Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa
File: R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa (raw, json)
Hash identifier: 61Iq2Y9qBNlCXxjTubM5AW+momY69I+HgyILrPoypSI=
Subject key identifier: 47:46:96:D5:49:54:D8:6F:48:27:42:52:81:1B:A1:5E:96:34:42:BD
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01A03EDBCE66B9E0FAB2C0C26FC4833211C0
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa
Signing time: Wed 26 Aug 2026 16:16:27 +0000
ROA not before: Wed 26 Aug 2026 16:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:16::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:31::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:53::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
2a11:840:73::/48 maxlen: 48
2a11:840:73:1b::/64 maxlen: 64
2a11:840:74::/48 maxlen: 48
2a11:840:75::/48 maxlen: 48
2a11:840:76::/48 maxlen: 48
2a11:840:77::/48 maxlen: 48
2a11:840:78::/48 maxlen: 48
2a11:840:79::/48 maxlen: 48
2a11:840:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:db:ce:66:b9:e0:fa:b2:c0:c2:6f:c4:83:32:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Aug 26 16:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=474696d54954d86f48274252811ba15e963442bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:82:60:ab:26:13:91:4c:d1:52:90:62:3b:
a9:c6:be:10:e8:8c:55:f5:47:07:b1:77:61:15:aa:
eb:c8:18:45:91:26:e7:86:3b:aa:51:3a:6c:62:2d:
04:dc:00:4f:3b:ab:2b:96:aa:49:ca:7a:0e:ab:2a:
db:72:f7:d0:0c:47:a6:11:92:ba:0f:7e:07:ec:b2:
81:e8:c0:f6:60:3b:aa:36:d8:55:d9:c9:6a:70:c0:
23:14:b1:73:db:ea:52:44:46:e2:c9:20:a6:c9:2a:
f1:04:77:cb:1a:44:3b:c1:94:91:6d:28:8d:49:04:
99:9e:b5:e5:0c:0d:38:d7:21:7b:60:ad:9b:bd:56:
ad:df:20:02:25:de:f4:66:4e:99:3e:ec:a4:af:9a:
a8:10:c6:5e:a8:68:f3:63:07:5a:8b:d7:0b:08:49:
77:fe:a2:21:d1:41:8d:ec:79:91:91:0f:4e:22:58:
84:26:6e:be:f2:8b:2d:1e:a9:e7:75:5d:de:66:ba:
68:87:33:bd:77:77:e8:9d:51:fb:cf:09:44:b8:ef:
1b:da:35:93:8c:8b:42:c5:fe:49:45:33:12:a2:9c:
ab:bb:48:b0:9a:1d:57:9d:26:67:59:04:53:25:f2:
64:0b:7f:ee:79:57:79:ad:b2:b3:83:f1:fb:b1:74:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:96:D5:49:54:D8:6F:48:27:42:52:81:1B:A1:5E:96:34:42:BD
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.236.0/22
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::-2a11:840:9:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/47
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:53::-2a11:840:54:ffff:ffff:ffff:ffff:ffff
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::-2a11:840:79:ffff:ffff:ffff:ffff:ffff
2a11:840:80::/48
Signature Algorithm: sha256WithRSAEncryption
41:bf:27:34:70:20:ac:a5:28:ab:f1:09:fe:9c:3e:94:3d:63:
c6:ca:dd:c5:83:7c:4e:15:43:cd:b5:90:c1:b7:97:d1:ac:04:
33:ef:b7:ed:f6:b8:23:9f:86:d0:ba:06:1d:b1:2f:b6:e7:59:
37:52:8c:07:56:61:d4:f1:ef:e5:e4:66:ac:8e:b6:a5:35:42:
41:80:23:f7:1a:f1:59:ed:37:96:21:fa:6d:27:eb:c1:5c:d6:
27:62:b6:2f:4c:c3:dd:3e:a4:a7:9f:88:a6:07:31:63:dd:97:
05:be:20:4d:8e:b1:be:0d:e8:48:f2:5d:20:57:cd:e8:8a:80:
ab:69:03:a7:f3:9a:65:df:b7:d0:a2:e5:c3:2e:7f:ea:38:a7:
2c:67:67:64:1b:40:e3:1b:50:ad:09:a6:06:81:09:df:cf:25:
2d:73:bb:07:49:30:f9:aa:28:a3:64:cc:02:95:53:db:18:4a:
ee:99:66:00:01:44:a7:0f:d3:23:fc:5d:f1:9b:8d:0f:fa:dc:
59:de:5d:e2:c0:7e:c7:40:4d:66:9b:d0:8d:a1:70:12:92:96:
14:1c:2c:90:55:4c:64:e3:bc:ca:b0:cc:df:1a:a5:1d:20:41:
29:df:18:5b:ee:0a:ba:ca:1a:bd:51:8d:8b:ca:bf:34:be:c3:
ff:a8:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:47 2026 by rpki-client