Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/U0zFycq25PPn0dlxRYsOouqMHlQ.roa
File: U0zFycq25PPn0dlxRYsOouqMHlQ.roa (raw, json)
Hash identifier: 0/WeAZRiRBLJaCyVnQwSNF+wkwCVBcyTTJkapLynjLs=
Subject key identifier: 53:4C:C5:C9:CA:B6:E4:F3:E7:D1:D9:71:45:8B:0E:A2:EA:8C:1E:54
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019FF0C5D5D9DBC0204A06EAF354EDFD358F
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/U0zFycq25PPn0dlxRYsOouqMHlQ.roa
Signing time: Tue 11 Aug 2026 12:22:04 +0000
ROA not before: Tue 11 Aug 2026 12:22:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44600
IP address blocks: 46.182.80.0/22 maxlen: 22
46.182.84.0/22 maxlen: 22
91.202.72.0/22 maxlen: 22
91.202.161.0/24 maxlen: 24
91.202.162.0/23 maxlen: 24
94.131.244.0/24 maxlen: 24
94.131.245.0/24 maxlen: 24
94.131.248.0/24 maxlen: 24
94.131.249.0/24 maxlen: 24
94.131.250.0/23 maxlen: 23
94.131.250.0/24 maxlen: 24
94.131.252.0/24 maxlen: 24
94.131.253.0/24 maxlen: 24
94.131.254.0/24 maxlen: 24
94.131.255.0/24 maxlen: 24
185.41.248.0/22 maxlen: 22
185.46.148.0/22 maxlen: 22
185.128.232.0/22 maxlen: 22
185.128.235.0/24 maxlen: 24
185.156.52.0/24 maxlen: 24
185.156.53.0/24 maxlen: 24
185.156.54.0/24 maxlen: 24
185.156.55.0/24 maxlen: 24
194.42.201.0/24 maxlen: 24
2a03:a600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:c5:d5:d9:db:c0:20:4a:06:ea:f3:54:ed:fd:35:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Aug 11 12:22:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=534cc5c9cab6e4f3e7d1d971458b0ea2ea8c1e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:e4:7f:19:0f:c5:2c:e0:e9:8c:a0:d1:d5:
ea:50:b6:cd:77:35:79:dd:b6:9a:ff:59:d4:35:3c:
49:6b:6f:14:bd:ed:be:80:49:12:64:48:f1:24:70:
8c:90:a1:7b:cb:6d:79:e5:13:0c:a4:fd:94:15:20:
dd:b1:fa:71:18:94:02:a3:5a:3f:51:84:15:c8:50:
ae:82:be:d0:7e:3d:1a:90:d8:f8:6e:1c:67:09:92:
97:e6:81:8e:c8:24:80:7d:a1:8f:ab:7c:3d:97:84:
1b:90:a5:be:9f:0a:bc:e6:c4:ad:9b:1d:45:73:3c:
b4:6b:ee:c8:71:1a:fd:8b:da:ab:74:51:5f:6f:4f:
62:90:82:9b:6c:c4:a9:37:d1:5d:86:c8:3c:8c:7a:
c4:97:a2:8f:3a:03:86:ad:3f:37:38:75:39:1b:21:
7a:e8:53:b3:00:07:11:61:20:fa:aa:5f:94:18:14:
68:8f:ac:3d:88:9c:c2:3f:32:52:6e:2a:86:d6:7e:
92:11:39:9e:63:71:41:f7:fc:09:e1:41:3a:23:77:
74:bc:ef:7d:12:09:4b:66:36:57:33:40:44:cf:ca:
03:3f:64:82:3a:6e:83:34:29:d6:ee:6e:c1:a1:95:
7c:45:cf:3b:3f:70:74:2c:ac:2c:f9:17:ab:23:53:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4C:C5:C9:CA:B6:E4:F3:E7:D1:D9:71:45:8B:0E:A2:EA:8C:1E:54
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/U0zFycq25PPn0dlxRYsOouqMHlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.80.0/21
91.202.72.0/22
91.202.161.0-91.202.163.255
94.131.244.0/23
94.131.248.0/21
185.41.248.0/22
185.46.148.0/22
185.128.232.0/22
185.156.52.0/22
194.42.201.0/24
IPv6:
2a03:a600::/29
Signature Algorithm: sha256WithRSAEncryption
61:8c:d6:91:62:1b:4c:61:f3:56:01:8c:2b:cc:eb:03:28:6a:
4a:c4:1e:50:4b:cb:16:78:1d:f1:f6:f5:b4:fd:6e:32:63:3f:
d6:d2:87:f6:03:bd:12:b7:57:61:39:a2:53:ae:26:a9:f6:24:
71:70:ed:5c:18:36:4f:ad:fa:5a:90:62:0b:5e:81:6e:f5:d8:
1b:08:c5:8c:70:00:cb:77:3e:46:1a:c8:98:c5:3e:9c:7e:1a:
e6:09:3c:fc:38:e1:4e:9a:ca:26:06:ae:e3:96:06:91:71:f3:
e9:d0:3f:01:3b:a6:d2:87:16:4d:4b:e5:b5:e6:82:11:de:f0:
f7:5a:3f:d0:a2:1d:54:09:3e:65:6d:ba:09:50:6e:0c:57:9f:
41:45:6b:5d:e1:34:cc:56:db:79:69:64:89:7d:f4:c3:6c:4d:
eb:78:d0:c4:b4:b3:fd:56:f8:d0:2a:a4:8d:d5:7e:a8:ed:bf:
f6:3c:d6:c9:d7:67:af:92:6d:c8:6c:ac:b4:4c:35:4c:6f:ac:
98:f7:64:46:87:c5:6b:70:36:fd:ac:18:7a:51:50:79:f6:18:
e4:6a:31:55:00:aa:96:e7:8d:af:e9:b4:5d:7f:25:d6:2f:e3:
42:c3:74:55:c4:ec:e5:ab:4a:d1:cc:da:b8:57:f8:f0:59:38:
b4:1d:e7:90
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAZ/wxdXZ28AgSgbq81Tt/TWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjYwODExMTIyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzRjYzVjOWNhYjZlNGYzZTdkMWQ5NzE0NThiMGVhMmVhOGMxZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZTkfxkPxSzg6Yyg0dXqULbNdzV5
3baa/1nUNTxJa28Uve2+gEkSZEjxJHCMkKF7y2155RMMpP2UFSDdsfpxGJQCo1o/
UYQVyFCugr7Qfj0akNj4bhxnCZKX5oGOyCSAfaGPq3w9l4QbkKW+nwq85sStmx1F
czy0a+7IcRr9i9qrdFFfb09ikIKbbMSpN9Fdhsg8jHrEl6KPOgOGrT83OHU5GyF6
6FOzAAcRYSD6ql+UGBRoj6w9iJzCPzJSbiqG1n6SETmeY3FB9/wJ4UE6I3d0vO99
EglLZjZXM0BEz8oDP2SCOm6DNCnW7m7BoZV8Rc87P3B0LKws+RerI1PzBQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFFNMxcnKtuTz59HZcUWLDqLqjB5UMB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvVTB6RnljcTI1UFBuMGRseFJZc09vdXFNSGxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQDLrZQAwQC
W8pIMAwDBABbyqEDBAJbyqADBAFeg/QDBANeg/gDBAK5KfgDBAK5LpQDBAK5gOgD
BAK5nDQDBADCKskwDQQCAAIwBwMFAyoDpgAwDQYJKoZIhvcNAQELBQADggEBAGGM
1pFiG0xh81YBjCvM6wMoakrEHlBLyxZ4HfH29bT9bjJjP9bSh/YDvRK3V2E5olOu
Jqn2JHFw7VwYNk+t+lqQYgtegW712BsIxYxwAMt3PkYayJjFPpx+GuYJPPw44U6a
yiYGruOWBpFx8+nQPwE7ptKHFk1L5bXmghHe8PdaP9CiHVQJPmVtuglQbgxXn0FF
a13hNMxW23lpZIl99MNsTet40MS0s/1W+NAqpI3Vfqjtv/Y81snXZ6+SbchsrLRM
NUxvrJj3ZEaHxWtwNv2sGHpRUHn2GORqMVUAqpbnja/ptF1/JdYv40LDdFXE7OWr
StHM2rhX+PBZOLQd55A=
-----END CERTIFICATE-----
Generated at Thu Aug 13 18:11:39 2026 by rpki-client