Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/c7cUumgx_nzdqcQyZry7JjAxNsI.roa
File: c7cUumgx_nzdqcQyZry7JjAxNsI.roa (raw, json)
Hash identifier: h+eVuTX1ch1Bym3SZz/V4dnDjWuB0LPUsUUvQv1wkkI=
Subject key identifier: 73:B7:14:BA:68:31:FE:7C:DD:A9:C4:32:66:BC:BB:26:30:31:36:C2
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A02AA713F0A95277CA63EB931B5DE439C2
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/c7cUumgx_nzdqcQyZry7JjAxNsI.roa
Signing time: Sat 22 Aug 2026 18:06:27 +0000
ROA not before: Sat 22 Aug 2026 18:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.102.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.160.193.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:a7:13:f0:a9:52:77:ca:63:eb:93:1b:5d:e4:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 22 18:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73b714ba6831fe7cdda9c43266bcbb26303136c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:10:ff:d4:6a:f6:cb:b4:d7:09:f7:ec:4a:
7c:14:83:7d:a1:cc:5a:e6:4d:27:a7:12:f6:2e:48:
e4:23:63:17:cf:05:50:48:3a:33:d3:fa:26:b7:5a:
ac:f5:33:f5:6e:62:5c:2f:28:6b:56:d6:31:cf:6c:
68:6d:aa:90:db:dd:48:17:f5:63:2a:b4:8d:6e:ff:
60:fa:3c:6a:d1:14:21:93:62:70:f3:e4:8d:58:94:
17:f2:58:03:b2:db:30:9d:b0:7c:9f:8a:a7:92:23:
9b:ae:74:dc:55:40:af:c1:0c:66:83:28:f0:2d:35:
b0:2a:19:15:2f:a7:47:84:cc:2f:a6:b5:f7:9b:00:
4a:92:dc:8f:74:86:71:b4:35:92:13:3d:7e:e2:dd:
c7:68:e5:6a:46:64:15:8d:ac:17:11:6e:89:21:b5:
1f:42:cc:54:80:c3:4e:ec:9c:de:1b:2e:30:31:9f:
82:78:9a:2b:ee:cd:89:c4:1e:fb:0c:14:8c:11:db:
82:88:f7:5a:cb:46:7d:fc:a8:bb:f6:cf:9e:21:9f:
7b:bf:f4:9d:f9:56:28:e8:46:65:b6:25:4d:8c:24:
cc:56:66:1a:57:4f:c2:03:a1:fd:06:89:a4:dd:bf:
e0:86:07:c7:d3:54:c7:ac:a1:5a:41:ee:71:ca:78:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:14:BA:68:31:FE:7C:DD:A9:C4:32:66:BC:BB:26:30:31:36:C2
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/c7cUumgx_nzdqcQyZry7JjAxNsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.102.0/24
46.20.108.0/24
46.20.111.0/24
185.160.193.0-185.160.195.255
185.169.221.0-185.169.223.255
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
68:f5:a5:4f:96:38:32:38:90:81:ca:58:de:91:68:9c:99:e5:
cf:23:8b:4a:e0:49:e1:db:b2:71:83:77:cb:0b:a7:d3:3a:a4:
e7:24:3b:91:b4:07:01:89:83:1f:79:bf:ff:eb:b6:8e:3f:b8:
d1:47:82:9e:27:d7:30:17:37:82:14:a1:b5:72:e5:36:b5:ae:
51:c6:e6:2e:ed:93:af:77:03:c4:44:0f:6e:7c:50:28:36:c4:
d1:39:c0:c3:57:33:d1:6f:d3:ae:4e:91:9b:bc:63:b0:af:1a:
f9:95:39:8a:b1:f0:06:a6:64:42:0a:75:ba:f4:02:5e:c3:26:
8f:ba:8f:60:c3:08:28:53:89:19:98:b8:0b:60:49:76:9e:c4:
1a:13:d1:16:a0:19:fc:e9:84:0b:64:1d:e4:c5:f5:59:2d:52:
40:c6:66:72:66:f9:c2:af:f7:57:9a:97:76:67:c7:36:20:0d:
91:98:63:0d:41:90:1b:50:89:d8:7b:46:e2:db:cb:91:d5:86:
e4:c0:15:a5:ae:3d:b6:1f:05:11:4f:b5:1c:21:c9:8e:75:bf:
62:ac:b3:15:91:cd:2b:a6:3d:01:0a:ed:c2:3a:4d:96:50:71:
66:38:ff:71:71:bd:17:17:c9:35:c8:a7:02:9f:66:ba:08:43:
94:83:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:16:50 2026 by rpki-client