Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/rdJyBdK2iV50iM4LtkIDk5goq3w.roa
File: rdJyBdK2iV50iM4LtkIDk5goq3w.roa (raw, json)
Hash identifier: lGGO7x3NU/orErYEGSdJ6SmoJ+86W9eVKa7qBlgKpv4=
Subject key identifier: AD:D2:72:05:D2:B6:89:5E:74:88:CE:0B:B6:42:03:93:98:28:AB:7C
Certificate issuer: /CN=a9694021a175cafd25344c04799f76779ff04576
Certificate serial: 019F2368BB2FA6625732A263B6A3665BD9D7
Authority key identifier: A9:69:40:21:A1:75:CA:FD:25:34:4C:04:79:9F:76:77:9F:F0:45:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWlAIaF1yv0lNEwEeZ92d5_wRXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/rdJyBdK2iV50iM4LtkIDk5goq3w.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197712
IP address blocks: 46.16.56.0/21 maxlen: 24
134.0.8.0/21 maxlen: 24
185.22.200.0/22 maxlen: 24
185.34.192.0/22 maxlen: 24
185.42.104.0/22 maxlen: 24
185.66.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWlAIaF1yv0lNEwEeZ92d5_wRXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bb:2f:a6:62:57:32:a2:63:b6:a3:66:5b:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9694021a175cafd25344c04799f76779ff04576
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=add27205d2b6895e7488ce0bb64203939828ab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:73:b6:5d:a6:0a:4c:8d:ed:1d:e7:78:44:
72:e9:d6:0a:a4:cb:ba:fc:1b:c6:e3:6b:45:26:df:
b3:b5:6b:d2:c6:e0:11:d7:66:b6:00:40:88:f1:ca:
8c:55:fd:8b:3b:c4:ad:6e:bd:5f:d5:f3:8e:7d:18:
2f:ef:b6:7e:10:52:59:f9:6e:19:60:02:17:3e:01:
6f:14:53:2f:37:95:2b:ee:0b:aa:2c:fd:f2:ff:47:
c3:f1:fc:d9:3c:b1:76:fb:e7:95:fe:5d:89:b8:64:
a6:3c:1c:d6:e1:80:73:f4:7f:6b:14:2e:bc:33:35:
fb:7f:2b:3c:8f:fc:4b:88:f6:f6:6c:f2:e8:e7:77:
33:18:dd:05:a0:3f:b2:51:b9:5b:fa:b6:f4:ec:92:
72:66:2a:13:5a:01:9c:b7:b3:dd:12:ce:d9:57:f9:
68:72:7a:7d:14:d2:02:ba:22:10:bc:e9:b2:4c:88:
f9:17:d0:6b:86:c0:ca:ae:95:38:79:e0:cf:ce:74:
28:e3:06:38:48:c8:62:ee:9a:a5:50:61:d1:25:9d:
2a:29:49:45:de:0c:7d:35:30:91:eb:7d:e2:06:34:
1f:8e:e4:97:e1:d2:4a:22:41:7d:a3:ff:4c:93:7a:
fa:f5:85:ff:d4:28:a6:ff:c8:83:c7:c9:63:75:fb:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:72:05:D2:B6:89:5E:74:88:CE:0B:B6:42:03:93:98:28:AB:7C
X509v3 Authority Key Identifier:
keyid:A9:69:40:21:A1:75:CA:FD:25:34:4C:04:79:9F:76:77:9F:F0:45:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWlAIaF1yv0lNEwEeZ92d5_wRXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/rdJyBdK2iV50iM4LtkIDk5goq3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.56.0/21
134.0.8.0/21
185.22.200.0/22
185.34.192.0/22
185.42.104.0/22
185.66.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:8d:f8:f3:39:48:75:34:1e:28:da:ba:d0:27:4e:e0:5c:f6:
b7:29:49:d9:d7:5d:a3:a3:9a:ef:d0:0c:50:ae:67:b2:02:d0:
d0:8a:f8:6d:63:2d:e0:c4:8e:97:14:48:a0:a7:df:a8:05:a2:
d3:17:c5:f9:bf:d0:93:9c:a5:68:2a:e7:a8:39:3e:47:15:cf:
5e:d3:79:66:56:48:42:b0:cb:b4:84:bf:c0:c6:0d:22:19:8c:
19:3f:60:17:1f:4a:58:34:20:f1:5f:47:67:cd:89:45:b8:be:
a0:9d:8e:f4:ae:28:69:0c:b0:7c:43:48:d3:0b:56:cd:d4:14:
f9:4b:fa:b5:ac:05:f2:c0:93:2b:b5:73:f2:b8:9b:80:8b:5e:
5b:e5:a5:36:af:5b:72:9b:a5:4d:bb:a9:73:a8:99:cb:45:be:
5b:d1:5e:fb:72:b8:09:d6:00:1e:64:06:84:ce:7a:99:e2:c3:
b6:3d:ae:48:30:ac:6d:a9:64:af:4c:9e:5d:4f:0c:e4:f7:d0:
e4:31:c4:06:b2:9a:10:5e:ed:4a:11:fd:0a:2f:17:42:29:d2:
64:f3:00:b3:3b:90:2a:a5:a8:ab:e8:d8:ea:8f:00:9d:7c:a4:
9c:04:e3:c0:83:2d:87:7f:77:56:d9:13:ad:61:9a:3a:85:a6:
e1:f8:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:11 2026 by rpki-client