Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/1-LUU4VhlFrR5CgNLExqkgedMVto.roa
File: 1-LUU4VhlFrR5CgNLExqkgedMVto.roa (raw, json)
Hash identifier: pvcrd5yvfwxcXIiMFnqQbB/N6236xrQdUjUSB0U70o4=
Subject key identifier: F8:B5:14:E1:58:65:16:B4:79:0A:03:4B:13:1A:A4:81:E7:4C:56:DA
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01A1107810746E497AB337DB37329D0919D5
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/1-LUU4VhlFrR5CgNLExqkgedMVto.roa
Signing time: Tue 06 Oct 2026 09:07:46 +0000
ROA not before: Tue 06 Oct 2026 09:07:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56707
IP address blocks: 46.166.240.0/21 maxlen: 21
46.166.240.0/24 maxlen: 24
46.166.241.0/24 maxlen: 24
46.166.242.0/24 maxlen: 24
46.166.243.0/24 maxlen: 24
46.166.244.0/24 maxlen: 24
46.166.245.0/24 maxlen: 24
46.166.246.0/24 maxlen: 24
46.166.247.0/24 maxlen: 24
212.107.240.0/21 maxlen: 21
212.107.240.0/24 maxlen: 24
212.107.241.0/24 maxlen: 24
212.107.242.0/24 maxlen: 24
212.107.243.0/24 maxlen: 24
212.107.244.0/24 maxlen: 24
212.107.245.0/24 maxlen: 24
212.107.246.0/24 maxlen: 24
212.107.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:78:10:74:6e:49:7a:b3:37:db:37:32:9d:09:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Oct 6 09:07:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8b514e1586516b4790a034b131aa481e74c56da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:aa:23:0c:dd:7c:2c:11:4e:f7:36:1b:ef:
6e:1c:29:e6:62:98:5d:91:74:af:2b:a8:41:65:12:
25:71:71:a0:e9:eb:ed:31:fb:22:fe:f8:ae:e2:4f:
b8:62:c8:36:61:cf:a5:1a:f5:43:36:d4:ea:a2:f9:
86:8f:b3:dd:f8:e4:61:d7:1b:8e:a1:e1:92:b9:b5:
80:46:1c:0d:9e:6a:0a:a4:d4:a3:44:d1:92:dc:5a:
74:52:03:6a:fa:15:70:f2:ff:4f:41:f9:42:e5:4c:
fa:2a:63:66:fc:4e:a9:e2:01:69:27:4f:a6:89:e3:
14:98:dc:42:1f:bb:18:cf:33:3b:af:58:a7:67:24:
9b:ae:f6:9e:45:df:bd:f2:7e:76:bb:4e:48:95:e5:
e0:ea:de:36:25:2c:2f:db:d5:de:3f:91:d4:22:12:
cc:9b:40:81:78:1e:35:4d:91:e6:f3:37:88:b3:26:
3e:93:73:99:8f:09:ff:f2:9e:b9:cb:0f:e5:c5:fb:
31:5c:f6:23:a6:e4:1e:19:68:fd:1e:e9:bd:e4:cc:
b7:d1:14:12:38:f8:42:67:8e:c0:1c:39:95:ca:cf:
4d:42:9c:f5:b6:08:bd:52:37:c3:64:3a:2e:0f:a9:
a1:02:71:7f:6f:f5:62:33:cf:ea:18:33:8f:b8:b4:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:14:E1:58:65:16:B4:79:0A:03:4B:13:1A:A4:81:E7:4C:56:DA
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/1-LUU4VhlFrR5CgNLExqkgedMVto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.166.240.0/21
212.107.240.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:f0:62:20:91:39:21:d4:ce:4e:4d:f2:ce:1c:c6:a3:41:5c:
6b:2e:0b:8e:c7:85:29:c7:ed:7e:e7:72:5e:a8:2b:2a:e8:d1:
a0:6c:e3:11:20:4d:71:6d:48:1d:56:b2:f1:4f:47:96:9f:82:
40:e7:9b:23:fc:14:b4:02:29:9e:e8:44:09:b1:79:7f:3c:d7:
5d:16:00:ed:3a:a8:d2:dd:1d:bd:bd:1e:51:48:81:63:53:d9:
ba:e6:24:37:8a:bb:bb:b6:7f:5d:28:f6:2b:dd:d7:c9:51:c0:
4a:fe:45:60:89:fe:7f:f6:67:04:a1:7e:80:30:2a:ad:59:db:
65:5a:10:1f:99:0e:9f:15:79:ac:03:67:5c:6b:0f:4d:4b:f3:
06:bc:16:48:33:f2:ae:63:0b:24:c0:85:c0:70:64:73:8c:d4:
63:e7:74:a1:81:bb:e3:79:9a:f4:33:5f:c1:c3:76:4d:d9:f3:
eb:52:bc:96:c9:77:3e:c1:ba:55:3d:76:35:11:5d:a7:a9:98:
d8:80:d5:f8:bc:5b:7c:20:a6:e9:09:cc:36:4d:80:eb:47:32:
8a:fa:be:c3:5b:55:b9:71:b3:d9:e3:2e:d6:04:c9:61:39:af:
49:a5:3d:d1:57:91:d7:ae:fb:bc:43:e4:62:42:3e:23:5d:89:
ac:e1:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:19 2026 by rpki-client