Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/49Ros6yQCBCZx-lT7pJaksTqTxI.roa
File: 49Ros6yQCBCZx-lT7pJaksTqTxI.roa (raw, json)
Hash identifier: 6aT2vpkyxb5g2x4cqRIpe85BI1NJlRToFTz1Sp4RhTw=
Subject key identifier: E3:D4:68:B3:AC:90:08:10:99:C7:E9:53:EE:92:5A:92:C4:EA:4F:12
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0DE83301B41A2B5C2DC30613C8134DBB2
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/49Ros6yQCBCZx-lT7pJaksTqTxI.roa
Signing time: Sat 26 Sep 2026 16:18:54 +0000
ROA not before: Sat 26 Sep 2026 16:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/23 maxlen: 24
61.14.227.0/24 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.176.0/21 maxlen: 24
85.202.172.0/22 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/23 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/24 maxlen: 24
160.238.99.0/24 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.145.46.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.202.47.0/24 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/22 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/24 maxlen: 24
185.235.122.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.118.0/23 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/22 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:83:30:1b:41:a2:b5:c2:dc:30:61:3c:81:34:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 26 16:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3d468b3ac90081099c7e953ee925a92c4ea4f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:1e:60:77:fc:e0:b1:3d:2f:42:cb:e8:03:
d0:ce:cd:58:77:41:90:10:37:a3:e2:66:1a:aa:33:
a2:f9:d7:31:69:c0:46:5c:e3:8b:3c:c8:40:42:81:
74:97:a3:90:1e:51:ea:84:35:24:64:51:cb:b0:0d:
0f:88:45:7a:63:d1:92:a0:f1:6d:e6:bd:4c:48:d4:
4b:ea:d9:2c:5a:48:bf:65:66:21:13:ca:4c:09:b6:
07:89:d3:88:88:ee:bc:32:4f:cf:ab:ac:0f:a1:ac:
a8:c8:2e:a3:85:a7:b2:dc:45:db:1c:0a:77:01:94:
84:62:29:1c:b0:79:08:2a:04:9d:50:c7:78:49:25:
56:57:05:63:af:02:90:d3:13:45:30:e6:89:8f:b4:
11:f8:db:d3:da:3f:69:82:2d:de:a4:d2:94:f3:46:
cb:14:35:3c:c8:14:63:3e:64:c7:34:52:a1:3c:ab:
84:04:60:3b:c5:03:39:e4:8b:95:2d:fc:3f:be:34:
be:c7:6d:41:6a:12:16:eb:60:eb:42:78:a0:d0:68:
66:5f:49:4e:da:47:ef:a5:50:9b:90:d4:46:06:ea:
1d:1d:33:86:76:97:cc:49:8c:78:91:23:a8:80:cf:
51:9b:5b:af:cd:63:da:a7:cc:ce:fc:5f:8f:e1:f9:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:68:B3:AC:90:08:10:99:C7:E9:53:EE:92:5A:92:C4:EA:4F:12
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/49Ros6yQCBCZx-lT7pJaksTqTxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/23
61.14.227.0/24
62.106.64.0/24
79.110.176.0/21
85.202.172.0/22
91.132.84.0/24
91.132.87.0/24
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.163.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/24
160.238.99.0/24
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.145.46.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.202.47.0/24
185.206.20.0/23
185.209.128.0-185.209.130.255
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/22
185.227.254.0/24
185.228.44.0/22
185.232.42.0/24
185.235.120.0/24
185.235.122.0/24
193.163.35.0/24
193.176.116.0/24
193.176.118.0/23
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0/22
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
97:d5:13:cd:81:a1:e1:ef:0c:26:13:74:94:05:da:50:66:21:
c2:60:97:ea:1e:22:53:5e:8c:ba:27:e3:9a:fc:a0:0c:85:22:
9b:c7:33:28:4e:04:f0:ba:3c:fa:01:af:99:fb:06:38:20:58:
e7:7c:fa:0a:b8:2a:f7:9e:1c:c6:98:b2:1c:4b:32:ad:c7:28:
65:e3:0f:5b:ee:9d:bf:65:22:8d:2a:1c:9a:60:7a:e5:48:27:
34:73:f7:a0:86:64:11:e6:ad:f2:cc:26:e4:d9:be:ef:e4:42:
58:41:d0:00:21:70:59:96:ce:7c:a1:cd:83:8f:02:33:da:9b:
94:d4:fa:fe:ad:8f:a8:08:01:75:da:88:77:fe:b1:aa:6a:10:
44:63:be:b8:9f:20:3e:95:37:bd:cb:de:10:cf:e2:72:35:1e:
f2:c2:46:e5:aa:08:7a:ca:ca:b8:91:05:a7:7a:11:0b:3a:81:
a1:ad:ff:de:da:61:54:06:30:af:66:b5:5c:29:23:d2:a9:f3:
57:60:63:5e:5a:fe:cb:c5:d1:0f:e5:41:51:3a:77:a7:79:56:
c1:cb:20:e1:d3:25:e2:19:2c:e3:0d:2d:30:57:a1:25:7e:72:
0e:97:fe:4d:24:cb:55:c3:53:f2:e7:77:9a:05:c6:5e:e5:a9:
09:55:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:09:15 2026 by rpki-client