Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/49I4lQBoyZe6nj8LJtoimcMyHBw.roa
File: 49I4lQBoyZe6nj8LJtoimcMyHBw.roa (raw, json)
Hash identifier: vTiTxlJuP/iRv2dEwOKEP17dmiVA9uCLbt3LmyRBvDE=
Subject key identifier: E3:D2:38:95:00:68:C9:97:BA:9E:3F:0B:26:DA:22:99:C3:32:1C:1C
Certificate issuer: /CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Certificate serial: 01A162AA8E47D3C6508408911AAA85352066
Authority key identifier: 4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/49I4lQBoyZe6nj8LJtoimcMyHBw.roa
Signing time: Thu 22 Oct 2026 08:11:47 +0000
ROA not before: Thu 22 Oct 2026 08:11:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 136.176.193.0/24 maxlen: 24
136.176.196.0/24 maxlen: 24
136.176.197.0/24 maxlen: 24
136.176.198.0/24 maxlen: 24
136.176.199.0/24 maxlen: 24
136.176.202.0/24 maxlen: 24
136.176.203.0/24 maxlen: 24
136.176.204.0/24 maxlen: 24
136.176.205.0/24 maxlen: 24
136.176.206.0/24 maxlen: 24
136.176.207.0/24 maxlen: 24
136.176.210.0/24 maxlen: 24
136.176.214.0/24 maxlen: 24
136.176.216.0/24 maxlen: 24
136.176.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:aa:8e:47:d3:c6:50:84:08:91:1a:aa:85:35:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Validity
Not Before: Oct 22 08:11:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3d238950068c997ba9e3f0b26da2299c3321c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:a3:ea:d3:5d:73:64:6a:1f:ce:cc:27:e8:
81:66:a1:49:16:e6:14:c8:11:90:b1:2d:79:e6:ae:
69:c0:78:69:56:c8:b4:ae:c1:4c:f3:38:c7:19:8b:
f5:65:bb:71:06:57:a9:46:0f:41:13:02:36:60:dd:
0e:f0:f8:96:74:94:33:9e:72:0f:a8:37:96:5c:13:
64:3e:ca:f0:c6:12:86:8a:94:40:27:99:70:b7:cc:
46:d3:89:55:83:7a:5e:f8:40:c9:cd:e9:1e:fb:8b:
17:b5:2d:af:a8:b8:79:b2:da:51:6d:17:67:5c:37:
fb:72:34:e1:63:a3:67:09:bb:f0:c7:ea:ab:f2:1b:
48:4b:7b:ed:6c:87:7b:03:b2:0e:9e:81:b6:25:16:
ce:34:57:26:a1:4b:cb:43:43:29:d2:13:54:d9:ff:
f5:7f:be:8d:41:95:b7:dc:fe:f6:63:4e:9d:37:38:
73:07:07:03:93:92:07:21:04:39:92:9c:97:2b:d6:
ec:a5:d0:18:7c:ee:ac:df:10:75:cc:81:d1:90:6e:
d8:fc:ea:e0:7c:6d:7e:8d:b2:a8:c2:4c:ac:94:71:
73:96:4a:0d:38:43:17:97:67:ad:9c:3d:7a:69:cd:
51:f5:78:18:56:df:86:2f:60:66:a7:30:5e:6d:92:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:38:95:00:68:C9:97:BA:9E:3F:0B:26:DA:22:99:C3:32:1C:1C
X509v3 Authority Key Identifier:
keyid:4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/49I4lQBoyZe6nj8LJtoimcMyHBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.193.0/24
136.176.196.0/22
136.176.202.0-136.176.207.255
136.176.210.0/24
136.176.214.0/24
136.176.216.0/24
136.176.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:81:e7:9d:8b:8b:d4:5a:56:ed:8a:7b:7e:0b:37:12:8a:6d:
7f:fb:fd:2d:a6:28:f8:d6:79:2d:28:ee:54:54:16:76:f7:b6:
72:a8:44:af:8c:69:44:46:14:bd:3f:cc:27:0e:6f:07:5e:1b:
a9:51:16:37:90:46:0d:b1:77:90:29:58:99:12:ce:b1:90:77:
b9:89:b6:11:76:47:a6:2f:d5:2d:87:56:ce:ed:c9:be:78:35:
30:5a:a5:8a:66:0f:2e:cf:91:75:d4:8b:86:6b:00:e5:c0:8d:
43:b6:1c:c6:a1:fa:b0:01:12:0b:50:e4:d6:da:7d:63:6e:14:
37:65:c1:0c:22:e9:00:8b:2b:48:f9:e8:73:29:c7:47:63:c0:
0c:1b:9e:ef:4a:2e:97:d1:cc:00:17:cd:49:22:67:02:17:b4:
22:c5:e9:d0:bb:42:b4:ea:97:d2:ee:a1:c9:62:72:0b:1f:97:
08:77:67:48:b2:11:18:ee:2c:e5:69:57:4d:e9:a6:00:6d:27:
36:50:1a:f6:55:f4:26:ce:39:ec:06:54:f6:58:00:cb:6b:8d:
68:bf:44:4e:c6:eb:64:98:e7:80:db:45:dd:3d:63:31:7e:39:
3a:4f:29:45:03:6d:07:03:14:d2:8c:36:65:3c:be:aa:e2:2c:
5b:94:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:25 2026 by rpki-client