Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/M71Eu-zWt0PySjmxxXHLCkVi9-Q.roa
File: M71Eu-zWt0PySjmxxXHLCkVi9-Q.roa (raw, json)
Hash identifier: eY8IcaDiNumjFmC1gTd+F54YR115WahVcyUFMCZtv5U=
Subject key identifier: 33:BD:44:BB:EC:D6:B7:43:F2:4A:39:B1:C5:71:CB:0A:45:62:F7:E4
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019EDBBC43BC4436AB8436D397007BB2CD31
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/M71Eu-zWt0PySjmxxXHLCkVi9-Q.roa
Signing time: Thu 18 Jun 2026 17:16:48 +0000
ROA not before: Thu 18 Jun 2026 17:16:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 46.8.41.0/24 maxlen: 24
46.8.184.0/23 maxlen: 24
46.8.186.0/23 maxlen: 24
109.248.175.0/24 maxlen: 24
188.130.141.0/24 maxlen: 24
188.130.226.0/24 maxlen: 24
188.130.227.0/24 maxlen: 24
188.130.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:bc:43:bc:44:36:ab:84:36:d3:97:00:7b:b2:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 18 17:16:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33bd44bbecd6b743f24a39b1c571cb0a4562f7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:3e:02:cd:67:6f:c1:41:1d:8e:d3:aa:b9:
53:63:db:e2:d2:0e:1d:7f:36:90:e3:43:02:a3:b9:
dd:0f:b9:6b:13:89:40:1d:ca:f2:67:d8:19:66:2c:
7f:a5:cf:01:df:8c:3c:62:0c:43:be:9a:f4:fc:b1:
8d:ca:a4:10:66:70:17:21:9e:7a:33:0f:26:51:8a:
88:4a:12:2b:17:b2:6b:2b:0e:a1:77:fe:bc:cc:a7:
be:b4:13:7e:8d:ce:f1:54:d9:85:59:7b:a3:e6:24:
ee:ac:92:dd:94:b6:87:1a:ba:44:e2:b5:da:19:08:
b8:67:a3:af:3d:2c:b0:d6:3a:0e:cf:a7:6a:14:7b:
87:3d:00:b6:97:a4:6d:0f:b0:93:f4:64:21:a8:16:
59:3a:ef:bb:6b:a8:a6:d5:f7:4e:57:82:f8:5f:db:
03:d3:e2:5b:e1:72:13:20:8c:7b:2e:e4:fd:da:12:
ea:97:89:9b:31:06:d2:a9:ff:18:80:12:6f:43:9e:
05:f2:dd:bc:31:4e:2a:08:12:6e:16:b4:20:bc:9b:
35:f2:37:d8:75:2a:92:f4:34:ac:91:35:69:fb:9a:
42:1b:25:92:6a:8c:3d:b3:32:53:40:4e:d5:a2:1b:
31:9d:b3:07:e4:47:c7:c1:70:25:12:81:9a:c4:85:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:44:BB:EC:D6:B7:43:F2:4A:39:B1:C5:71:CB:0A:45:62:F7:E4
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/M71Eu-zWt0PySjmxxXHLCkVi9-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.41.0/24
46.8.184.0/22
109.248.175.0/24
188.130.141.0/24
188.130.226.0/23
188.130.230.0/23
Signature Algorithm: sha256WithRSAEncryption
90:9b:6a:66:19:95:4a:99:31:cb:99:72:68:2e:d5:28:92:1d:
ba:07:d7:1f:59:0c:8f:40:c8:75:3b:72:ad:26:19:b9:cd:7c:
ef:ce:6b:77:7c:05:6f:59:1d:0f:12:e1:04:90:d4:7d:3b:35:
4c:05:87:a9:e6:5c:ca:e1:87:cf:25:49:d3:92:a4:c7:3e:5c:
7d:0a:b0:f1:af:d3:c7:ba:db:7a:94:1f:f8:0a:75:b0:6e:01:
7e:5f:3b:5d:b8:04:ae:a9:e5:67:cd:99:30:4e:63:46:f7:0c:
bd:a8:57:bb:1d:44:17:3b:96:80:37:51:67:45:52:55:a0:96:
76:98:0d:72:2f:dd:23:b7:8a:5b:39:1c:55:fe:8b:2b:e9:9f:
31:b8:79:4f:2e:d8:a4:0b:c0:a2:42:62:1b:07:3e:62:21:43:
ba:7a:49:bf:e5:df:37:fc:40:e2:71:a1:13:52:a5:41:fd:f5:
08:b0:7b:5a:20:67:d8:de:d4:e5:22:d3:24:78:63:ac:5e:ce:
c9:5c:e5:c3:a4:f8:2a:7a:fe:62:4a:19:5a:3a:cb:6a:e0:68:
d1:a8:6c:6a:4f:b0:8d:9f:32:01:7c:b5:23:4c:37:53:0b:2d:
d1:9e:a7:d9:ce:6e:10:40:ce:6e:3a:43:97:2f:90:0f:b7:a2:
b6:7b:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:24:00 2026 by rpki-client