Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/424KRo2rW8hETRkK5jeVcECSjxc.roa
File: 424KRo2rW8hETRkK5jeVcECSjxc.roa (raw, json)
Hash identifier: Vp1Ks2keyVeobYUeHwyZHktNIDz13Qm+4UcnkNyUvUs=
Subject key identifier: E3:6E:0A:46:8D:AB:5B:C8:44:4D:19:0A:E6:37:95:70:40:92:8F:17
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019CB9C034E211D471AED2FB18E78BB79EAF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/424KRo2rW8hETRkK5jeVcECSjxc.roa
Signing time: Wed 04 Mar 2026 16:48:27 +0000
ROA not before: Wed 04 Mar 2026 16:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.152.0/22 maxlen: 22
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:c0:34:e2:11:d4:71:ae:d2:fb:18:e7:8b:b7:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 4 16:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e36e0a468dab5bc8444d190ae637957040928f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:d4:1f:cc:a1:b4:ff:89:03:2d:95:31:57:
20:3e:91:14:db:4e:73:ed:5b:8e:80:90:39:b8:15:
09:c9:32:f1:c2:9d:0a:de:b0:f4:ae:bb:3b:ad:bd:
58:b9:d1:bd:df:21:6f:3c:e6:4c:a5:14:20:ee:4f:
3e:f7:61:11:2a:12:f5:12:35:47:3b:7c:37:28:7a:
7f:71:1f:4d:94:2a:e4:af:0a:fe:e9:49:bb:ee:e8:
85:7f:db:3e:fa:d1:61:07:a9:88:6b:38:8e:29:7d:
75:e1:a3:c1:bf:e8:94:56:e4:5e:6f:8e:3a:f4:30:
b1:e0:a6:06:b4:ca:64:e0:6b:91:4e:29:59:55:67:
2f:d9:38:69:c4:c4:b3:9f:4d:fc:78:88:8b:c7:da:
3e:8b:ce:e7:99:35:bf:4e:28:2b:5a:83:78:ad:e2:
d3:4d:54:71:94:db:61:d2:68:1f:bd:ea:b7:3a:ce:
4a:0f:48:64:5e:e1:9e:d9:64:ea:89:95:ed:5f:d4:
c7:c2:9f:3a:29:dc:63:9d:7b:06:f8:23:be:4d:48:
39:11:bf:45:bf:3c:86:fc:84:96:d4:0e:7f:37:44:
b5:8d:27:08:ca:f2:a7:7a:0d:23:f3:0c:3d:ca:99:
d3:a9:ac:1a:af:c6:e9:47:bb:29:90:72:70:21:14:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:0A:46:8D:AB:5B:C8:44:4D:19:0A:E6:37:95:70:40:92:8F:17
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/424KRo2rW8hETRkK5jeVcECSjxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
89.34.106.0/24
89.125.126.0/24
91.132.50.0/24
93.114.183.0/24
103.245.228.0/24
167.17.191.0/24
194.58.47.0/24
206.245.152.0-206.245.156.255
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
07:64:8a:ef:2a:5a:0b:d4:de:71:11:af:c6:58:1e:3a:09:59:
e4:b3:49:b9:62:8c:35:33:1c:de:5c:db:6e:11:58:89:ea:2a:
f6:23:35:a8:9b:b0:53:72:7e:0f:6f:92:51:65:f0:d8:5a:24:
bf:aa:b7:7a:41:59:7c:cf:3d:c0:78:75:ee:34:89:db:83:02:
c9:16:d3:b0:1a:a2:14:0e:df:0a:9a:aa:77:65:fe:97:a0:7d:
65:06:fa:93:52:b3:7e:19:66:55:1e:52:4b:65:67:2b:27:55:
46:7a:ab:ec:db:fe:3f:62:c7:68:2e:c4:41:09:3b:31:4d:8e:
d1:36:dc:58:07:e7:dd:28:a9:20:43:1c:14:31:ab:23:4f:8f:
13:bc:b5:96:3e:f2:d7:78:d9:5d:64:36:75:e0:2f:ce:cb:a3:
70:31:8e:97:f6:3f:5e:86:fb:ed:05:a0:45:a3:47:e5:b1:32:
d5:a8:55:15:0d:aa:68:c9:9d:b4:46:43:c5:f7:e0:96:fe:12:
cb:e5:a5:94:95:21:cb:11:79:3e:a5:4f:6a:39:ca:b0:4e:bb:
73:98:eb:0f:35:31:43:79:87:1e:a2:89:29:fc:8f:8b:f7:5e:
da:d1:bf:6a:eb:a7:a7:0c:08:fa:1d:71:06:5b:4a:3b:42:fd:
d5:dc:57:d9
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAZy5wDTiEdRxrtL7GOeLt56vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMzA0MTY0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzZlMGE0NjhkYWI1YmM4NDQ0ZDE5MGFlNjM3OTU3MDQwOTI4ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsfUH8yhtP+JAy2VMVcgPpEU205z
7VuOgJA5uBUJyTLxwp0K3rD0rrs7rb1YudG93yFvPOZMpRQg7k8+92ERKhL1EjVH
O3w3KHp/cR9NlCrkrwr+6Um77uiFf9s++tFhB6mIaziOKX114aPBv+iUVuReb446
9DCx4KYGtMpk4GuRTilZVWcv2ThpxMSzn038eIiLx9o+i87nmTW/TigrWoN4reLT
TVRxlNth0mgfveq3Os5KD0hkXuGe2WTqiZXtX9THwp86KdxjnXsG+CO+TUg5Eb9F
vzyG/ISW1A5/N0S1jScIyvKneg0j8ww9ypnTqawar8bpR7spkHJwIRQgEwIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFONuCkaNq1vIRE0ZCuY3lXBAko8XMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNDI0S1JvMnJXOGhFVFJrSzVqZVZjRUNTanhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQALmbtAwQA
WSJqAwQAWX1+AwQAW4QyAwQAXXK3AwQAZ/XkAwQApxG/AwQAwjovMAwDBAPO9ZgD
BADO9ZwDBADO9Z4wDAMEANTABwMEANTACAMEANTACgMEANTAHgMEANTA0DANBgkq
hkiG9w0BAQsFAAOCAQEAB2SK7ypaC9TecRGvxlgeOglZ5LNJuWKMNTMc3lzbbhFY
ieoq9iM1qJuwU3J+D2+SUWXw2Fokv6q3ekFZfM89wHh17jSJ24MCyRbTsBqiFA7f
Cpqqd2X+l6B9ZQb6k1KzfhlmVR5SS2VnKydVRnqr7Nv+P2LHaC7EQQk7MU2O0Tbc
WAfn3SipIEMcFDGrI0+PE7y1lj7y13jZXWQ2deAvzsujcDGOl/Y/Xob77QWgRaNH
5bEy1ahVFQ2qaMmdtEZDxffglv4Sy+WllJUhyxF5PqVPajnKsE67c5jrDzUxQ3mH
HqKJKfyPi/de2tG/auunpwwI+h1xBltKO0L91dxX2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:25 2026 by rpki-client