Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Arh2s6mM7MW_nIX53gV-8B1bhtw.roa
File: Arh2s6mM7MW_nIX53gV-8B1bhtw.roa (raw, json)
Hash identifier: iDla/C9bAVeMss08ZBSZIkzoQuebu/5L8PGgJYh4/nA=
Subject key identifier: 02:B8:76:B3:A9:8C:EC:C5:BF:9C:85:F9:DE:05:7E:F0:1D:5B:86:DC
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A01E7C74C7CD06A7C31A32BADAFEAAFCF2
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Arh2s6mM7MW_nIX53gV-8B1bhtw.roa
Signing time: Thu 20 Aug 2026 09:24:27 +0000
ROA not before: Thu 20 Aug 2026 09:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 46.8.64.0/24 maxlen: 32
46.8.68.0/24 maxlen: 24
46.8.69.0/24 maxlen: 24
46.8.70.0/24 maxlen: 32
46.8.71.0/24 maxlen: 32
46.8.78.0/24 maxlen: 24
46.8.224.0/24 maxlen: 24
46.8.225.0/24 maxlen: 24
46.8.226.0/24 maxlen: 24
46.8.227.0/24 maxlen: 24
46.8.228.0/24 maxlen: 32
46.8.229.0/24 maxlen: 24
46.8.230.0/24 maxlen: 32
46.8.231.0/24 maxlen: 24
46.8.232.0/24 maxlen: 32
46.8.233.0/24 maxlen: 32
46.8.236.0/24 maxlen: 32
46.8.237.0/24 maxlen: 32
46.8.238.0/24 maxlen: 32
95.182.96.0/24 maxlen: 24
95.182.97.0/24 maxlen: 24
95.182.98.0/24 maxlen: 24
95.182.99.0/24 maxlen: 32
95.182.100.0/24 maxlen: 24
95.182.101.0/24 maxlen: 24
95.182.114.0/24 maxlen: 24
95.182.115.0/24 maxlen: 32
95.182.116.0/24 maxlen: 24
109.248.160.0/24 maxlen: 24
109.248.161.0/24 maxlen: 32
109.248.162.0/24 maxlen: 24
109.248.163.0/24 maxlen: 32
188.130.154.0/24 maxlen: 32
188.130.206.0/24 maxlen: 32
188.130.207.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:7c:74:c7:cd:06:a7:c3:1a:32:ba:da:fe:aa:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 20 09:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02b876b3a98cecc5bf9c85f9de057ef01d5b86dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ed:6b:71:55:c6:ab:a6:06:e9:00:00:a0:b8:
c5:fd:ce:16:fe:f8:a1:4a:b7:f1:6f:e1:3f:3b:a6:
9d:0b:60:7c:19:4a:08:60:d4:fd:f8:a8:33:80:9b:
83:7e:c8:21:96:1f:fb:35:62:62:4e:1f:b2:50:02:
a6:db:96:82:5b:70:09:99:a1:61:36:1e:47:03:77:
ff:a6:44:56:cb:38:d2:de:0c:44:6a:73:82:84:cc:
42:96:cc:f3:99:1b:e2:9d:b5:0b:e9:47:71:bb:73:
b7:fa:f4:da:26:4d:5f:ea:2c:45:3c:0c:fc:41:29:
26:3a:e5:39:93:16:f3:9f:3d:c2:71:20:65:d1:4b:
a3:ea:a3:be:20:b4:d6:31:b7:aa:72:36:32:e1:d8:
8a:fb:b7:46:d6:c1:b3:bb:7a:a7:f9:f3:de:13:78:
06:52:2c:04:19:0e:55:a9:ab:fe:7d:c3:09:d3:ed:
de:e3:ea:cf:31:a4:58:7f:1f:40:69:3c:17:27:5b:
d5:1e:9b:99:18:52:df:45:d5:3a:3d:3d:de:1d:42:
2a:54:40:c0:a9:03:59:54:8f:e5:69:94:2c:3a:2a:
d4:3d:c6:2a:be:7b:ff:6d:08:a6:26:fc:48:59:0d:
53:a5:14:15:26:87:db:a1:b9:57:3a:dd:c1:85:8c:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:76:B3:A9:8C:EC:C5:BF:9C:85:F9:DE:05:7E:F0:1D:5B:86:DC
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Arh2s6mM7MW_nIX53gV-8B1bhtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.64.0/24
46.8.68.0/22
46.8.78.0/24
46.8.224.0-46.8.233.255
46.8.236.0-46.8.238.255
95.182.96.0-95.182.101.255
95.182.114.0-95.182.116.255
109.248.160.0/22
188.130.154.0/24
188.130.206.0/23
Signature Algorithm: sha256WithRSAEncryption
39:2b:3b:1f:fa:3f:b7:4a:0b:5a:90:80:05:a7:d7:a1:00:5d:
c1:37:44:42:a7:14:43:17:25:ff:58:71:e7:b7:d4:7b:01:00:
e1:45:f3:1e:5c:cf:80:05:37:fa:2e:ea:c6:80:96:e7:58:38:
1d:12:90:3f:5f:1d:1f:71:3c:09:9e:39:d5:04:0c:4b:1b:3d:
a6:93:19:e9:8a:d5:8f:08:c3:ef:db:70:38:2f:33:00:10:da:
ca:87:7a:a3:09:2e:6a:a9:68:90:c7:b5:e3:ef:6e:15:c5:84:
c6:80:2a:cf:3a:4a:4a:57:c3:ed:5d:74:8e:70:f6:db:3e:4b:
f9:e4:be:82:4b:b6:87:45:d1:9d:cd:15:7e:4b:8e:8a:36:05:
03:82:52:49:49:e7:01:21:51:55:64:1f:49:77:1f:8f:3f:a4:
fa:de:af:02:6b:5f:a3:12:01:00:b2:0a:4c:5b:ff:dc:95:c4:
5a:fc:2d:3f:05:62:90:c8:b3:16:47:13:04:ba:da:4a:03:48:
c7:de:d8:8b:ca:54:7a:0f:55:72:4f:c1:5a:a0:77:41:48:ee:
52:4e:a6:a3:3b:66:51:78:50:03:f5:6f:2c:86:49:66:05:fa:
d3:d3:18:55:1f:b1:90:e2:78:c5:80:e0:29:1b:88:0a:2d:2f:
50:3e:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:36 2026 by rpki-client