Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/5I7ff4eH9sdVgWYT6rgb3FdqpjU.roa
File: 5I7ff4eH9sdVgWYT6rgb3FdqpjU.roa (raw, json)
Hash identifier: JBvoZ15oumVzrKN2KL0kQUYYm44LSLC2zZrdWawpoAk=
Subject key identifier: E4:8E:DF:7F:87:87:F6:C7:55:81:66:13:EA:B8:1B:DC:57:6A:A6:35
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A0234DAD0D05B3D08D04D8D0CD7F27DE17
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/5I7ff4eH9sdVgWYT6rgb3FdqpjU.roa
Signing time: Fri 21 Aug 2026 07:51:28 +0000
ROA not before: Fri 21 Aug 2026 07:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 46.8.41.0/24 maxlen: 24
46.8.184.0/23 maxlen: 24
46.8.186.0/23 maxlen: 24
109.248.16.0/24 maxlen: 24
109.248.17.0/24 maxlen: 24
109.248.175.0/24 maxlen: 24
188.130.141.0/24 maxlen: 24
188.130.226.0/24 maxlen: 24
188.130.227.0/24 maxlen: 24
188.130.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:4d:ad:0d:05:b3:d0:8d:04:d8:d0:cd:7f:27:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 21 07:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e48edf7f8787f6c755816613eab81bdc576aa635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:1b:67:95:1f:fa:60:2d:ec:84:81:4f:90:
e0:71:17:8b:47:24:f6:2a:3b:2c:f1:4c:fe:1b:63:
05:2c:47:18:55:8a:d2:4b:f1:97:49:3d:db:12:68:
5c:e2:09:c6:ba:e2:c9:77:30:49:e9:30:15:ee:fa:
f0:13:34:26:b0:3f:7d:56:96:7e:68:fa:86:2a:9e:
8d:37:22:8f:b1:68:76:ee:af:45:c0:7d:b8:7b:06:
a3:1a:d8:3b:bc:f9:41:a0:08:60:bf:e1:73:47:17:
3f:e4:88:1b:f7:37:90:c6:28:00:35:e4:0c:18:80:
25:84:70:56:f9:84:98:0d:c4:fe:d7:de:1b:c4:43:
50:e8:d4:88:c3:58:41:b1:68:0f:90:d7:06:c2:d6:
10:46:60:d2:a9:a5:56:d9:3b:39:03:70:ee:6f:34:
64:5d:d3:b2:c1:a5:7b:0b:30:c6:2a:27:1b:5e:eb:
8f:f3:d5:4e:11:cc:db:48:42:2a:9b:0a:e4:b9:4e:
98:fe:37:08:61:8a:0d:5f:00:d2:eb:b0:50:a0:d7:
c4:6d:5d:74:ba:6d:bc:3e:96:28:41:6f:dd:54:8f:
2d:e7:0d:b9:ff:94:6e:91:c8:2b:89:76:20:0d:bc:
87:93:90:23:03:30:c3:93:3e:ca:ce:05:9d:b8:99:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:DF:7F:87:87:F6:C7:55:81:66:13:EA:B8:1B:DC:57:6A:A6:35
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/5I7ff4eH9sdVgWYT6rgb3FdqpjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.41.0/24
46.8.184.0/22
109.248.16.0/23
109.248.175.0/24
188.130.141.0/24
188.130.226.0/23
188.130.230.0/23
Signature Algorithm: sha256WithRSAEncryption
58:19:e3:30:07:6f:df:26:3a:1e:59:15:0d:57:f1:bb:44:55:
b1:e3:59:71:de:8b:2e:af:93:27:40:a3:e2:af:7d:b1:30:da:
17:42:c2:84:c6:c7:71:fa:2c:e5:c9:ee:9d:40:b5:66:65:bb:
66:d0:ce:36:b5:1c:fb:dc:c3:35:a2:8f:57:f8:28:d9:73:b0:
02:a9:f5:25:a5:75:bc:df:88:e2:c0:c2:a2:ea:e3:c6:c1:1d:
17:e7:92:a1:b7:f1:99:52:1c:00:6c:e8:98:90:40:e9:40:3f:
44:c2:44:8f:32:f3:b9:d5:7c:e2:5b:6f:9e:fa:71:38:b7:aa:
84:4e:b0:f6:33:38:36:8c:5d:0d:9f:78:19:82:6a:c4:6b:c9:
ae:cb:b6:59:28:4b:cb:07:50:2d:e9:8b:1f:7e:58:6c:16:f9:
da:05:ff:56:82:21:7e:fa:a4:63:76:5a:96:f9:b4:a5:f1:31:
d0:7a:39:ae:cd:c3:d7:52:b4:81:76:fc:aa:ba:81:94:d3:3b:
fa:f6:12:ef:d2:96:0d:31:13:fb:f7:9e:1e:3e:b1:0d:db:3a:
43:31:5e:ba:2b:8f:7e:f8:1f:15:1d:72:a6:53:fc:27:87:2f:
0d:63:29:76:b2:94:3e:f3:31:cd:5d:f5:e0:70:f3:eb:07:61:
e8:4a:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:35 2026 by rpki-client