Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa
File: o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa (raw, json)
Hash identifier: fRZlzhSQMVg6bKsTXfriyM4kD+yF0gFm89zq2eDjTlA=
Subject key identifier: A3:9C:EE:CA:B3:AB:7E:67:F1:E6:D3:31:6D:BC:C3:DA:DE:8E:15:37
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23689298E55652B8DC3AFD2F1FEFFCFD
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201942
IP address blocks: 46.31.68.0/24 maxlen: 24
46.226.144.0/21 maxlen: 21
185.58.196.0/22 maxlen: 22
185.119.112.0/22 maxlen: 24
185.232.41.0/24 maxlen: 24
193.46.216.0/24 maxlen: 24
193.163.117.0/24 maxlen: 24
194.26.143.0/24 maxlen: 24
195.182.205.0/24 maxlen: 24
195.184.72.0/24 maxlen: 24
212.23.223.0/24 maxlen: 24
2a02:6520::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:92:98:e5:56:52:b8:dc:3a:fd:2f:1f:ef:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a39ceecab3ab7e67f1e6d3316dbcc3dade8e1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:73:40:bf:1b:6a:14:75:2e:f9:55:54:db:
ce:40:71:f5:30:04:4a:7f:35:35:f5:50:e9:8e:d0:
c9:9f:99:0c:0c:30:55:0d:0c:f3:ba:1b:51:f2:d7:
80:f5:e5:a7:4e:4e:fd:01:a8:d4:4b:94:e1:5a:dd:
36:c3:8e:27:c4:ba:9e:db:c6:2c:29:63:dd:4d:7e:
d1:7e:4d:c6:5e:3d:c5:21:41:d3:08:30:bf:e0:e8:
19:a3:ad:01:48:28:91:90:70:38:11:03:0f:97:03:
61:aa:32:b2:1e:21:86:e3:98:fe:b6:6e:74:12:55:
84:61:94:e9:45:f4:3f:a4:1b:c1:2a:aa:de:e2:e1:
46:c0:c5:57:e7:82:28:5c:7f:bc:7a:a6:0d:27:dd:
5b:eb:80:ff:6f:2f:fb:68:54:02:61:be:88:4b:d9:
a7:d3:ae:e2:4e:95:c7:88:d1:19:cd:38:99:0a:ca:
46:14:b2:fe:8c:71:ed:6b:59:c3:36:4a:e9:a2:23:
bf:8f:2a:a0:14:ac:d5:8a:0f:9b:ef:79:e4:2b:71:
21:e4:18:cd:5f:a2:1a:f8:28:64:2d:bb:c9:b9:4e:
d3:e4:cd:d9:ae:e8:f2:29:24:1e:98:cb:e2:a8:48:
f4:77:58:7f:d2:b1:2b:0b:77:9a:ae:ed:01:6b:d0:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:EE:CA:B3:AB:7E:67:F1:E6:D3:31:6D:BC:C3:DA:DE:8E:15:37
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.68.0/24
46.226.144.0/21
185.58.196.0/22
185.119.112.0/22
185.232.41.0/24
193.46.216.0/24
193.163.117.0/24
194.26.143.0/24
195.182.205.0/24
195.184.72.0/24
212.23.223.0/24
IPv6:
2a02:6520::/32
Signature Algorithm: sha256WithRSAEncryption
3e:8a:df:65:60:25:a8:e7:37:ab:e5:bf:0d:25:17:1e:9c:9e:
23:af:6d:ee:21:0a:2b:cc:f8:92:96:54:59:e1:87:32:d5:f5:
80:40:e6:30:a1:dd:92:42:fd:83:2e:37:ce:07:32:b8:41:a1:
e5:20:c1:c3:ff:4f:ca:54:23:e9:df:0a:19:ee:75:73:94:21:
0e:55:33:b4:5c:d4:ac:60:16:9c:c2:72:f7:16:85:76:c9:0e:
e1:5d:d4:4e:94:cd:52:4b:66:63:82:01:aa:98:39:d7:20:c9:
74:f7:3a:f1:d2:60:74:28:37:eb:b5:03:82:6c:be:b3:68:53:
c7:a0:e0:71:35:85:e6:02:e3:c3:5e:7a:1e:83:ce:8e:56:d3:
a3:ed:cb:79:a0:17:9b:92:0a:f8:da:d1:57:52:b8:f2:b6:82:
27:c2:7c:8e:48:b5:2a:da:63:79:68:57:b3:d6:71:18:21:e1:
b4:10:68:57:b9:c8:37:58:85:ab:34:60:2a:70:de:54:77:52:
6d:8b:9c:12:01:52:69:f9:7b:22:17:c1:d0:4b:e0:52:51:d8:
01:0e:18:07:5f:10:f8:a7:2b:09:39:b7:5b:0c:5e:df:ce:b9:
d6:5c:32:60:f1:93:9f:2f:08:8e:a4:b2:e1:67:82:bd:0d:4c:
64:3e:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:45:26 2026 by rpki-client