Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Q6H22A8PMvv3G8ffUlI8NEsWEno.roa
File: Q6H22A8PMvv3G8ffUlI8NEsWEno.roa (raw, json)
Hash identifier: Wv6nqAZVM0408UcAvfAun3D6l37CWF8bxpI1BJb36GQ=
Subject key identifier: 43:A1:F6:D8:0F:0F:32:FB:F7:1B:C7:DF:52:52:3C:34:4B:16:12:7A
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A16948B11CAC67BA7CB11B983F90A3460B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Q6H22A8PMvv3G8ffUlI8NEsWEno.roa
Signing time: Fri 23 Oct 2026 15:02:13 +0000
ROA not before: Fri 23 Oct 2026 15:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203087
IP address blocks: 46.8.79.0/24 maxlen: 24
109.248.170.0/24 maxlen: 24
109.248.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:48:b1:1c:ac:67:ba:7c:b1:1b:98:3f:90:a3:46:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 23 15:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43a1f6d80f0f32fbf71bc7df52523c344b16127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:a3:8e:aa:9b:f5:93:28:82:0d:1c:05:69:
3f:93:b7:ad:5e:34:9c:07:30:e0:f0:61:62:47:9c:
1b:ad:a7:58:93:16:12:55:43:d5:2f:85:63:db:ed:
80:75:c6:cb:88:49:fa:2e:44:41:12:d7:7c:44:e4:
ab:d2:52:af:55:7f:a7:b9:99:d1:ab:47:d3:ad:ec:
a4:45:16:a3:32:fe:25:88:cb:bb:df:e1:e2:56:5c:
45:f7:e5:f1:f6:0c:27:bd:17:3e:c9:84:d6:19:9f:
5e:72:70:19:27:7f:57:ba:6d:26:12:f9:7c:b4:a1:
5e:63:98:e3:a1:2d:91:a2:ba:61:f4:77:17:79:eb:
16:a9:14:39:3e:67:05:f4:08:8a:56:11:96:66:26:
a8:b2:8d:63:83:c3:68:2f:3b:a7:10:da:78:1a:9c:
69:49:79:82:3e:7d:64:5a:45:fa:20:f7:c6:ed:3b:
4d:65:bf:36:ec:2b:f9:e2:aa:ca:ea:42:cc:bc:bb:
c1:59:41:d4:1b:5c:e0:19:d5:3f:4e:53:ba:0d:64:
41:54:3b:13:09:b9:20:c6:ad:94:e3:35:4c:6f:3f:
73:47:54:f0:8b:f6:6a:dc:2b:8a:5a:c7:4d:8a:b4:
12:28:ab:36:be:08:40:49:e7:fd:10:18:cb:3c:bf:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:F6:D8:0F:0F:32:FB:F7:1B:C7:DF:52:52:3C:34:4B:16:12:7A
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Q6H22A8PMvv3G8ffUlI8NEsWEno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.79.0/24
109.248.170.0/24
109.248.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2a:05:ee:e5:25:f5:f0:db:23:11:d3:a9:2f:69:d6:79:af:
ca:88:f6:75:a3:14:a2:b3:bf:e0:94:70:44:90:e5:d3:cb:f5:
e8:e6:64:b3:b5:e9:e1:1d:31:b5:ec:1c:33:f1:be:53:56:40:
79:d4:10:29:51:f2:97:22:22:75:c3:10:df:73:31:87:aa:27:
e7:67:7b:87:b2:af:03:f4:c7:6c:47:a2:8f:0d:88:43:8e:7e:
2b:cf:0b:ef:47:5b:ce:26:11:33:f3:4e:0d:47:73:f5:48:5d:
89:c2:c7:82:d1:26:e5:86:86:bf:b5:d9:1b:b2:fc:1e:20:8f:
f2:10:25:f8:63:c9:c0:86:21:8f:08:71:cb:68:57:0c:c6:7e:
1a:82:01:25:50:60:da:40:b5:23:42:55:a1:ba:dc:a5:ea:bc:
27:99:e6:d8:59:45:f7:51:bf:3d:b4:8d:d7:40:cc:d5:71:f8:
48:3a:04:ca:98:97:1d:bd:d6:3f:ba:a0:84:7f:7c:28:84:76:
ed:0b:5e:e9:b1:52:75:d4:0f:95:d5:20:8f:cb:9a:5e:47:5e:
38:4f:66:bb:19:91:c9:70:0e:2d:24:9b:86:36:95:c2:4e:3f:
89:4a:23:f7:05:b2:7a:6a:7e:4d:21:69:ec:81:53:a9:2b:6f:
8d:28:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:48 2026 by rpki-client