Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/ac39p23Mlso4QNH8cdOzO3mni7Q.roa
File: ac39p23Mlso4QNH8cdOzO3mni7Q.roa (raw, json)
Hash identifier: zNEIIVv/2x4DKy5eI3kHXbKd5gO+/WjIv8WvcZ4JDUY=
Subject key identifier: 69:CD:FD:A7:6D:CC:96:CA:38:40:D1:FC:71:D3:B3:3B:79:A7:8B:B4
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019FF65C98C72DBB0079AB0BF9CE7BDF9BC0
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/ac39p23Mlso4QNH8cdOzO3mni7Q.roa
Signing time: Wed 12 Aug 2026 14:24:51 +0000
ROA not before: Wed 12 Aug 2026 14:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51175
IP address blocks: 46.148.80.0/20 maxlen: 24
178.219.128.0/20 maxlen: 24
185.11.108.0/22 maxlen: 24
185.101.188.0/22 maxlen: 24
194.29.180.0/22 maxlen: 24
195.110.50.0/23 maxlen: 24
213.5.0.0/21 maxlen: 24
2a00:c020::/32 maxlen: 32
2a03:22c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:5c:98:c7:2d:bb:00:79:ab:0b:f9:ce:7b:df:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Aug 12 14:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cdfda76dcc96ca3840d1fc71d3b33b79a78bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:28:4c:79:27:18:b9:c1:eb:f6:0d:f6:35:
11:a8:63:a2:3c:a2:00:34:0a:9a:1d:fc:e2:35:58:
f3:53:ee:d6:88:7f:ab:42:e0:d9:e2:35:39:df:f8:
6c:db:85:8b:d8:8f:c5:bc:25:33:93:92:2a:66:2e:
e0:28:a1:7a:55:75:cc:c5:7f:76:29:42:0c:25:2c:
97:53:2d:fe:0b:9a:77:e5:3c:e4:6a:04:b8:a2:6a:
40:97:6c:eb:ef:fc:09:d6:77:fc:23:1a:a6:0b:6a:
9f:64:a2:8b:98:ae:0f:52:f1:6b:1b:b4:7c:69:82:
29:6e:b2:14:f8:71:ca:9b:da:4c:db:43:d2:55:d1:
dc:5f:03:46:37:fe:33:a6:a4:da:fd:6e:a1:92:ec:
e5:5e:cf:b1:78:52:b6:49:65:00:95:4d:c5:ce:27:
dc:a9:62:1f:9d:3f:11:9f:79:41:29:ee:23:53:df:
c7:53:04:5f:6a:ff:8b:a5:cf:48:1b:48:4e:5e:0e:
4a:2d:97:ea:1a:cc:45:2a:2b:51:6f:7b:96:a4:05:
95:35:02:c4:38:4e:cd:87:b2:5b:ab:cf:84:4f:d6:
c8:5a:9a:b1:a6:17:d5:f0:4e:e8:c2:07:74:9e:81:
4a:cc:bd:7d:12:54:e8:36:4e:c3:c4:e0:2e:ac:3d:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CD:FD:A7:6D:CC:96:CA:38:40:D1:FC:71:D3:B3:3B:79:A7:8B:B4
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/ac39p23Mlso4QNH8cdOzO3mni7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.80.0/20
178.219.128.0/20
185.11.108.0/22
185.101.188.0/22
194.29.180.0/22
195.110.50.0/23
213.5.0.0/21
IPv6:
2a00:c020::/32
2a03:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:f9:f2:b0:04:73:59:fc:3c:3c:ed:46:3f:18:a7:15:0e:3e:
04:23:4b:28:40:b2:d8:34:e3:f7:c7:38:3e:99:f9:7c:03:bb:
ea:09:c4:06:2d:63:95:29:45:f5:52:3a:e5:d6:78:c4:48:d6:
87:d2:1c:8b:e8:1e:b4:59:ee:d3:81:e8:1b:a6:e0:e3:14:0a:
2e:df:71:5e:db:21:2a:98:a0:fa:3b:bc:51:b4:5a:0e:af:32:
c9:dc:1c:1b:36:e7:6f:7d:0e:4b:3a:3b:0c:d8:60:f0:a1:2b:
40:70:16:33:c3:91:b0:09:d6:db:e0:0b:95:12:6e:20:04:12:
49:34:cb:b4:09:fc:a3:d9:f8:08:16:6a:8f:f9:00:12:95:3c:
0f:96:fe:bc:fb:93:83:d4:51:c1:19:08:18:18:08:f1:28:6b:
8b:26:4f:27:31:85:86:38:d9:72:46:58:21:2c:29:d0:f7:63:
c8:78:08:32:12:b9:0c:56:d1:6c:97:25:93:6a:c2:e0:23:e7:
d8:68:5f:7f:53:a6:33:cb:b5:74:42:b2:d7:23:32:2c:91:69:
fd:11:16:8f:35:6e:03:8a:d3:e7:2d:d0:a9:b9:ec:7e:b8:43:
9e:60:18:dd:88:fe:18:cc:67:02:b3:18:95:f8:d4:f6:12:da:
c7:c0:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:39:00 2026 by rpki-client