Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/H5jiHDmDZpH5dCanovylWuhKWdg.roa
File: H5jiHDmDZpH5dCanovylWuhKWdg.roa (raw, json)
Hash identifier: weqLDFwGRCA1K3CvRT4uVmRU0TMgiNat70D8wc2p/1U=
Subject key identifier: 1F:98:E2:1C:39:83:66:91:F9:74:26:A7:A2:FC:A5:5A:E8:4A:59:D8
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A06D19C6B63431009F9307FC38B369AFCB
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/H5jiHDmDZpH5dCanovylWuhKWdg.roa
Signing time: Fri 04 Sep 2026 15:46:40 +0000
ROA not before: Fri 04 Sep 2026 15:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 46.29.27.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.14.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:46c0::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
2a10:8b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:19:c6:b6:34:31:00:9f:93:07:fc:38:b3:69:af:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 4 15:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f98e21c39836691f97426a7a2fca55ae84a59d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:7a:51:5a:9b:c5:65:22:b7:7b:ec:b6:28:
2b:d2:55:47:ab:d1:d9:9c:b7:d6:e5:c5:9b:48:78:
87:01:26:f8:ed:5b:24:bf:51:b0:ec:5e:5a:e6:71:
87:d3:59:fa:93:d6:92:9f:cd:60:3c:9d:17:1d:5a:
65:f2:b6:c2:60:2c:e8:f1:e9:85:1d:53:26:c0:0c:
10:2d:04:b0:ee:bd:2e:50:dc:30:2a:9d:65:1b:9a:
92:8f:53:8c:de:50:6d:5b:24:f8:6c:15:75:35:4b:
1e:f8:cb:43:2f:93:91:a6:85:bf:5d:d1:60:e7:0f:
fa:cf:fc:8d:5f:32:36:db:8c:be:e3:46:80:92:5e:
49:b2:d9:ed:5c:e3:04:68:11:ec:83:dc:86:34:c9:
14:ff:58:a7:f4:c2:5d:87:0b:34:4e:19:63:84:eb:
4f:1c:76:9f:28:b5:e5:9a:3d:48:47:0a:91:0b:87:
7b:65:70:e8:44:90:97:69:df:e7:a5:42:8d:65:e9:
6b:f8:b6:4c:77:51:7e:20:e5:fd:bc:21:05:ac:a1:
24:26:bf:e9:12:b0:73:c2:8a:2b:3b:8f:4c:fd:ae:
78:85:16:06:82:a9:26:ef:8d:50:f7:e4:59:54:d5:
62:cf:7c:c7:f0:47:a3:d1:f7:f3:33:90:e5:0b:ca:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:98:E2:1C:39:83:66:91:F9:74:26:A7:A2:FC:A5:5A:E8:4A:59:D8
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/H5jiHDmDZpH5dCanovylWuhKWdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.27.0/24
93.190.12.0/24
93.190.14.0/24
185.85.189.0-185.85.190.255
185.85.237.0/24
185.86.4.0/23
185.86.13.0/24
185.88.172.0/23
185.88.175.0/24
185.98.63.0/24
185.119.80.0/24
185.141.33.0/24
185.184.27.0/24
185.243.180.0/24
185.243.182.0/23
185.249.200.0/22
193.160.140.0/22
193.223.104.0/22
IPv6:
2a0b:6780::/29
2a0c:46c0::/29
2a0c:67c0::/29
2a10:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
63:37:9e:8e:34:45:9e:22:5d:e8:a4:18:0f:e9:b3:8a:4e:88:
a0:62:d4:49:8b:a5:71:7d:74:58:2f:55:c6:b7:e3:db:2c:eb:
79:1c:6e:2a:64:1c:28:17:4a:b6:cd:17:a1:b9:51:3a:dd:15:
ca:78:fa:49:45:49:75:5e:c5:d0:a4:3a:7c:b2:c8:46:20:46:
11:d7:02:76:7f:88:02:ee:0a:3b:be:e1:e9:f5:37:8a:cc:46:
33:46:48:3f:b1:b3:39:d9:89:e3:14:e3:25:99:9d:d3:be:49:
ae:49:dd:fa:15:9e:9f:17:86:74:ce:5c:c0:c3:1c:63:65:2e:
c9:f7:62:a0:09:53:7d:11:f7:d7:91:04:e4:b6:84:36:b6:b1:
1e:6e:f2:62:4a:60:78:82:c3:e6:21:18:6f:2c:59:17:28:79:
f0:d6:cf:30:65:17:b5:7e:ff:72:70:bc:01:ce:cc:4b:a3:e8:
57:3e:1f:9d:44:44:fd:9e:47:1d:ae:c8:8e:67:08:44:11:73:
bb:80:33:f1:64:a1:dc:5a:c5:99:20:db:1c:3b:ff:b9:1e:4e:
44:fe:47:91:4a:e4:1e:fe:ae:0e:a0:32:e9:6a:74:af:b9:ff:
06:3e:01:f8:cd:0e:0d:b4:95:39:2f:5d:5b:fa:a1:60:55:ae:
bb:97:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:34 2026 by rpki-client