Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/vh6NseAghHJymfpLFAp__IjYLZE.roa
File: vh6NseAghHJymfpLFAp__IjYLZE.roa (raw, json)
Hash identifier: OvWAQsoPdM/tCCDWu4Kz0DARoTFNVGHiZJaQCgwefQA=
Subject key identifier: BE:1E:8D:B1:E0:20:84:72:72:99:FA:4B:14:0A:7F:FC:88:D8:2D:91
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01A11AD9C17F4BB60C42D2B2843842C909A4
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/vh6NseAghHJymfpLFAp__IjYLZE.roa
Signing time: Thu 08 Oct 2026 09:30:40 +0000
ROA not before: Thu 08 Oct 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 92.42.1.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.185.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
185.93.104.0/24 maxlen: 24
185.93.105.0/24 maxlen: 24
185.93.106.0/24 maxlen: 24
185.93.107.0/24 maxlen: 24
185.192.20.0/24 maxlen: 24
185.192.21.0/24 maxlen: 24
185.192.23.0/24 maxlen: 24
185.200.197.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0e:a7c2::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:d9:c1:7f:4b:b6:0c:42:d2:b2:84:38:42:c9:09:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Oct 8 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be1e8db1e02084727299fa4b140a7ffc88d82d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:a0:3f:52:ee:f5:8a:ff:95:01:a4:3c:13:
5d:ca:bb:95:fe:04:97:ff:a9:87:ac:b3:7a:74:49:
3f:54:f7:ef:d5:2d:03:4e:e9:23:27:30:a2:ca:3c:
77:89:9c:a8:5d:9f:68:fb:e7:8c:bd:00:df:2f:7b:
5b:82:58:c5:aa:64:84:26:5c:6e:ed:53:66:bf:ae:
b2:33:dc:e2:3f:88:85:3a:03:e5:f6:8c:e3:b5:76:
7c:16:59:80:53:2c:d8:b8:3c:2a:3b:c4:90:13:b2:
ca:45:52:6d:fb:dc:c4:41:b7:8e:15:cf:6e:d9:7f:
7e:98:44:14:7d:c4:8b:0a:e4:03:d9:79:5a:6e:a4:
c1:1e:b3:ef:c5:05:dc:9e:58:77:87:95:31:d0:ae:
67:87:6c:98:eb:7b:f5:fe:46:01:a4:36:a3:1a:4a:
86:fd:d8:bf:76:8b:26:3b:0a:a8:e6:d5:4d:52:f4:
a7:7b:d6:72:ba:1b:e4:d2:20:28:b6:8f:b8:50:4a:
fc:62:6e:a0:8a:58:d9:5a:ad:0a:31:cd:32:c3:ed:
b8:ec:3c:2c:d0:5b:cf:8d:cf:3c:39:80:98:15:df:
1e:f5:22:d4:d4:f6:f7:24:5d:13:86:2c:d5:ba:d1:
27:81:57:5f:21:cd:5b:c4:44:49:1e:f3:be:c1:84:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1E:8D:B1:E0:20:84:72:72:99:FA:4B:14:0A:7F:FC:88:D8:2D:91
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/vh6NseAghHJymfpLFAp__IjYLZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.1.0/24
92.63.224.0/24
148.222.185.0-148.222.186.255
185.93.104.0/22
185.192.20.0/23
185.192.23.0/24
185.200.197.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
83:9d:d1:f9:70:ae:13:b4:0d:64:32:0c:47:5a:b3:f2:af:81:
5b:a1:42:91:32:bb:3e:0e:3c:92:4a:48:47:0d:80:29:58:71:
38:35:62:0c:97:99:25:d0:0a:e7:24:8b:a9:67:36:1d:59:69:
5f:c5:69:5e:5a:e8:bc:c3:33:f7:34:8e:8f:17:b6:06:f4:93:
3e:69:9b:d1:25:8b:79:ca:79:e4:e6:a6:95:12:77:d2:a4:bf:
2a:11:72:37:a0:2d:37:f0:39:40:f7:55:c7:57:cb:38:27:bd:
26:64:49:3a:33:03:07:c3:d6:60:ca:c0:e9:91:fc:d7:42:a0:
7e:1e:54:10:ba:da:ad:25:7c:55:65:4d:85:53:d1:91:51:57:
a9:10:9a:a3:f9:42:88:27:86:e3:3d:e7:4f:a7:72:79:b4:38:
58:a5:06:be:e8:4a:d3:16:9a:49:f3:12:b3:56:83:d6:e9:f3:
99:51:7a:12:82:d2:db:52:34:eb:0e:95:58:bf:33:0a:33:2e:
e2:79:24:20:b4:1b:90:24:10:03:7c:68:64:2d:8a:e8:18:3d:
df:30:bf:67:34:c9:ca:70:06:74:8c:ce:bf:eb:22:96:16:d1:
9f:75:b2:d4:c4:bd:86:33:e9:7f:be:0f:2d:d2:c0:a2:83:fc:
f0:b2:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:48 2026 by rpki-client