Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/LnEt7_jQpHm1LU2dU9XYibP0Gk4.roa
File: LnEt7_jQpHm1LU2dU9XYibP0Gk4.roa (raw, json)
Hash identifier: neF5D4t95x7RPvb+0CzstunGgqaNO8uJXxFt1Gqi7NE=
Subject key identifier: 2E:71:2D:EF:F8:D0:A4:79:B5:2D:4D:9D:53:D5:D8:89:B3:F4:1A:4E
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01A15BBDE55B51C8F3A53080DC70B2D286DC
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/LnEt7_jQpHm1LU2dU9XYibP0Gk4.roa
Signing time: Tue 20 Oct 2026 23:55:34 +0000
ROA not before: Tue 20 Oct 2026 23:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 2.56.63.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.156.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
185.29.122.0/24 maxlen: 24
185.59.29.0/24 maxlen: 24
185.114.192.0/24 maxlen: 24
185.114.194.0/24 maxlen: 24
2a04:4280::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:bd:e5:5b:51:c8:f3:a5:30:80:dc:70:b2:d2:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Oct 20 23:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e712deff8d0a479b52d4d9d53d5d889b3f41a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:57:58:42:bb:56:49:dd:0d:7e:1c:7f:28:
07:0e:67:fc:c0:c6:a4:91:ab:4d:a3:a4:52:1a:aa:
d2:9f:7e:95:4f:b9:57:57:f4:71:35:5a:2a:34:6f:
4c:f1:30:79:44:ce:6b:2b:aa:f6:0a:2b:97:4f:87:
0f:39:8a:15:14:a7:c1:37:f4:fc:cf:ed:70:0e:25:
83:66:0a:51:1e:a0:cc:ad:77:db:9e:80:9a:60:4e:
48:b0:33:b5:ae:5f:b3:69:f6:4a:85:f6:e5:8d:11:
8c:dc:d9:28:8d:80:cc:71:aa:53:9f:0c:bd:07:4a:
02:04:b3:e7:e6:36:28:02:90:b3:3f:24:b4:38:e2:
7a:5b:d9:e4:fa:60:8a:f9:bd:48:b5:2f:f6:34:74:
d5:d0:9e:b2:64:65:d7:06:bb:a2:3b:61:14:cf:33:
a7:fd:9a:27:3a:a9:6e:61:6c:1e:cd:ed:df:c0:5b:
f4:b6:c7:33:90:e8:ac:97:49:94:53:76:e6:33:39:
9c:83:e4:13:88:c0:c2:7b:cf:d5:95:44:0e:fa:c9:
da:aa:d1:11:93:fe:56:5b:a6:21:9a:4c:59:aa:52:
4b:d6:51:07:1d:fd:cb:fa:7e:65:dd:95:4c:9a:3b:
19:45:bc:42:ea:07:53:83:96:7e:96:5c:e9:69:02:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:71:2D:EF:F8:D0:A4:79:B5:2D:4D:9D:53:D5:D8:89:B3:F4:1A:4E
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/LnEt7_jQpHm1LU2dU9XYibP0Gk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.63.0/24
31.210.152.0/21
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0-185.29.122.255
185.59.29.0/24
185.114.192.0/24
185.114.194.0/24
IPv6:
2a04:4280::/48
2a04:4280:100::/48
2a04:4280:200::/48
Signature Algorithm: sha256WithRSAEncryption
23:e6:be:ea:90:ae:a4:0e:b6:ee:ea:d7:25:76:6f:26:de:21:
29:8e:d5:65:5a:bf:6f:c3:2c:70:7b:94:cf:fd:bf:bf:cb:3f:
88:65:ab:58:40:f3:e4:39:62:92:16:8a:0d:77:19:17:8a:9a:
ec:d7:63:fa:f6:7d:d3:d4:af:45:1c:ff:83:e7:1f:86:da:7b:
45:84:28:b6:e5:22:b2:9c:7f:b4:30:9f:50:a5:d5:d7:4b:fb:
59:94:57:06:78:9f:9e:fb:89:50:d5:06:3f:54:7c:fd:02:ad:
61:78:7a:5d:29:ec:b9:91:d0:c4:fd:c1:ac:ee:25:25:ab:f8:
95:bd:e4:94:12:68:2a:7d:4a:e7:32:1b:51:26:2b:74:b8:ff:
6a:73:33:dd:44:ce:38:cb:19:85:ab:fa:23:ed:df:d3:bb:30:
90:45:ca:70:e8:98:27:60:1b:81:18:a9:43:9c:d2:8a:f8:ac:
5e:cf:dc:9e:c6:43:fa:cd:8f:ec:46:b4:98:e0:be:13:2d:78:
81:cb:2b:35:95:c0:36:b8:57:1e:c0:d1:8a:3c:c3:7e:80:d9:
05:3b:e7:e0:33:e7:b0:ad:e0:b8:41:ee:bb:1a:ce:59:f0:58:
98:16:5c:09:f2:9a:6b:25:1c:00:89:29:49:63:8b:1a:ee:2d:
9d:69:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:13 2026 by rpki-client