Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VL8hBO6Lrdw7OhH2zECttcbfF0E.roa
File: VL8hBO6Lrdw7OhH2zECttcbfF0E.roa (raw, json)
Hash identifier: g1fixnFOMpwbbqh2CiklkERRLSTSNvOpK5YylH6fVeM=
Subject key identifier: 54:BF:21:04:EE:8B:AD:DC:3B:3A:11:F6:CC:40:AD:B5:C6:DF:17:41
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FCBD9CB3A03F61D5307267A15B6D8A7A7
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VL8hBO6Lrdw7OhH2zECttcbfF0E.roa
Signing time: Tue 04 Aug 2026 08:17:55 +0000
ROA not before: Tue 04 Aug 2026 08:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 46.244.108.0/23 maxlen: 24
46.244.110.0/24 maxlen: 24
92.240.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:d9:cb:3a:03:f6:1d:53:07:26:7a:15:b6:d8:a7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 4 08:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54bf2104ee8baddc3b3a11f6cc40adb5c6df1741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:20:9d:9a:40:98:62:05:88:e4:1c:59:2a:
14:2d:4f:cf:b4:dc:fd:69:17:31:7d:9a:04:e9:a7:
bb:67:34:6f:e9:11:b2:8d:f9:84:7f:b6:af:2d:e5:
2d:39:e7:4b:3f:09:22:d1:10:51:27:ea:27:aa:87:
55:38:ef:87:fa:cc:63:a0:04:2d:26:9c:cc:27:a7:
6f:36:e5:8d:92:59:d4:57:99:ca:09:76:58:c9:9d:
c4:c4:10:0d:ed:b2:b4:ee:e8:6f:79:31:6d:ea:6b:
44:c4:83:c2:9d:cb:67:30:f8:aa:bb:77:0f:eb:ee:
fa:e6:c3:c0:91:04:1d:ba:63:d7:3c:bc:36:59:fe:
62:e0:95:f4:c5:c8:38:95:1d:25:55:b6:ef:34:21:
b3:c7:b4:cc:f4:ff:b2:5f:5e:68:23:60:7b:99:d6:
f2:26:ea:7c:b5:09:20:f9:0b:6c:2f:41:c4:b6:6b:
fc:f7:73:8d:2c:0c:bb:8b:51:dd:57:8d:75:88:ff:
4c:49:4c:fd:3e:dd:c9:60:e1:19:a8:0c:d0:77:13:
af:49:bb:ee:da:9c:7f:3e:04:2d:01:45:b7:c0:e5:
c2:b0:02:5a:5f:4c:90:a9:e1:e5:73:07:4f:2a:46:
30:c1:b6:58:63:4c:e5:54:bc:ca:9b:75:14:e7:a0:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:21:04:EE:8B:AD:DC:3B:3A:11:F6:CC:40:AD:B5:C6:DF:17:41
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VL8hBO6Lrdw7OhH2zECttcbfF0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.108.0-46.244.110.255
92.240.144.0/22
Signature Algorithm: sha256WithRSAEncryption
71:4c:a5:f5:f9:04:b3:03:a6:73:f2:9b:e9:b7:94:79:77:09:
c8:0e:ea:20:4c:a6:6e:66:ff:44:3c:00:17:b6:a7:b6:af:0f:
36:55:a9:e2:f1:22:d9:e1:fe:83:25:8d:36:70:d9:74:5c:d7:
77:3b:24:fa:9d:b7:7c:3d:1e:1e:6b:ea:35:ad:dd:45:f3:19:
1c:11:08:01:3e:91:23:80:18:76:24:4a:46:80:b4:5e:87:c7:
8d:4d:94:b9:69:50:34:13:8b:2b:31:97:a0:e9:87:2c:8b:47:
30:d3:95:b0:f6:7c:9b:a5:8e:b7:a0:91:a9:3d:d4:2e:cf:e1:
af:15:83:b2:52:3b:d1:40:0a:96:96:94:f7:4a:da:a9:4a:17:
ac:f8:f8:9e:aa:d1:58:e7:49:78:16:a5:24:70:bc:3d:72:97:
20:96:60:8c:b2:ba:34:89:b4:4a:79:82:fa:28:ef:95:a0:bf:
88:ac:43:59:05:69:eb:1f:b2:50:dd:1e:0c:39:69:91:96:6b:
09:85:98:13:4d:56:ff:cd:15:4b:ef:bd:e9:1c:04:2a:ce:92:
2e:d1:23:85:df:e1:5c:ca:0b:f7:66:c0:3c:50:59:3d:a8:60:
55:02:23:a0:eb:4e:b4:08:14:93:24:58:80:51:b8:f2:c9:94:
b3:5e:20:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:06 2026 by rpki-client