Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/My7nFs0Vdg40cSVzVAWWgDYiiWQ.roa
File: My7nFs0Vdg40cSVzVAWWgDYiiWQ.roa (raw, json)
Hash identifier: xMnqeo8kv1TT3K5je0MfFlhPp2VhqBwqS4yOebCmHHo=
Subject key identifier: 33:2E:E7:16:CD:15:76:0E:34:71:25:73:54:05:96:80:36:22:89:64
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 01A111B6A97F0E29F5E83872730841B59CC7
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/My7nFs0Vdg40cSVzVAWWgDYiiWQ.roa
Signing time: Tue 06 Oct 2026 14:55:45 +0000
ROA not before: Tue 06 Oct 2026 14:55:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50673
IP address blocks: 5.178.64.0/21 maxlen: 24
5.188.12.0/22 maxlen: 24
5.255.64.0/19 maxlen: 24
46.249.32.0/19 maxlen: 24
89.47.1.0/24 maxlen: 24
91.221.69.0/24 maxlen: 24
93.158.200.0/21 maxlen: 24
93.158.208.0/20 maxlen: 24
160.20.152.0/22 maxlen: 22
178.21.16.0/21 maxlen: 24
185.8.176.0/22 maxlen: 22
185.12.12.0/22 maxlen: 24
185.53.160.0/22 maxlen: 22
185.79.112.0/22 maxlen: 24
194.107.76.0/22 maxlen: 24
2a00:1ca8::/32 maxlen: 32
2a00:1ca8:77::/48 maxlen: 48
2a00:1caa::/32 maxlen: 32
2a03:3f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:b6:a9:7f:0e:29:f5:e8:38:72:73:08:41:b5:9c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Oct 6 14:55:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=332ee716cd15760e347125735405968036228964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:c7:90:6e:fb:c9:4e:f8:52:d3:a7:35:45:
c1:3a:91:c1:28:81:9d:d6:66:33:8d:c4:49:4c:fb:
36:19:8a:36:44:4d:d2:8e:62:c2:d7:d9:23:10:78:
18:d1:dc:24:32:fc:a5:80:87:ba:0d:a0:b6:ad:59:
44:48:d6:03:52:82:6f:cc:a0:28:5d:ad:63:87:f1:
18:42:ab:48:0d:a5:60:a3:75:ea:df:27:ff:08:56:
15:bc:9e:6e:9f:cf:00:e2:98:79:05:45:70:99:0d:
48:65:4c:5d:db:45:7a:f6:c8:38:af:01:5e:0b:7f:
07:dc:59:57:07:1e:49:41:f8:6e:f8:99:14:22:90:
15:cd:78:13:e5:56:e8:c1:12:94:c1:74:bf:2c:fe:
8c:35:13:63:ad:04:d3:5f:4d:1a:fd:eb:48:32:50:
64:50:2e:e0:a6:4a:9d:b1:d0:0e:e6:6b:a3:07:bd:
74:2a:2d:d9:d3:ab:6f:19:04:9d:f8:4e:7b:03:59:
ee:c9:5d:37:b0:d5:31:9c:d3:ab:42:81:e5:8a:5d:
60:be:d0:1a:67:b9:7e:f1:d4:6b:9d:59:ec:d7:b8:
5f:8e:c3:21:fa:f4:2d:5a:f5:39:98:95:47:a9:ce:
00:db:97:ce:97:22:da:73:0c:c3:88:ce:64:6f:f3:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:E7:16:CD:15:76:0E:34:71:25:73:54:05:96:80:36:22:89:64
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/My7nFs0Vdg40cSVzVAWWgDYiiWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.64.0/21
5.188.12.0/22
5.255.64.0/19
46.249.32.0/19
89.47.1.0/24
91.221.69.0/24
93.158.200.0-93.158.223.255
160.20.152.0/22
178.21.16.0/21
185.8.176.0/22
185.12.12.0/22
185.53.160.0/22
185.79.112.0/22
194.107.76.0/22
IPv6:
2a00:1ca8::/32
2a00:1caa::/32
2a03:3f40::/32
Signature Algorithm: sha256WithRSAEncryption
6e:6f:0e:51:b3:96:a5:93:46:00:ff:64:24:cc:57:8f:cc:b1:
0b:3b:81:c0:11:df:58:ea:2f:c3:e6:2e:ae:f9:a1:50:51:aa:
b5:4b:d8:27:ed:e4:7b:c3:bd:b7:9b:42:83:de:f1:9a:22:b2:
51:77:df:ea:06:1a:42:fe:13:99:c0:97:1f:a3:e4:fb:02:41:
0a:a8:f2:53:3d:19:55:42:19:59:c4:0a:de:73:eb:03:a3:d9:
57:3c:f3:9a:df:8c:6f:5c:c5:2c:21:72:ea:d8:dc:44:9c:ba:
d1:b7:bb:ab:d8:18:b0:5f:ff:9e:e3:ba:55:fb:60:51:01:8b:
90:fb:d4:80:22:e0:66:7f:ae:1f:8d:74:36:e4:a9:af:dd:db:
c0:6f:eb:d0:45:73:1a:17:77:6f:5e:f1:9a:a3:be:b6:11:f6:
b9:2a:f2:1e:58:e7:6c:94:5d:07:66:3e:69:76:52:eb:3d:83:
68:f7:02:84:8c:53:95:c7:c0:7a:08:9a:95:79:e1:5f:ab:ef:
57:31:6c:bd:7c:c6:01:97:da:73:45:3c:5d:67:d4:73:39:11:
e5:0b:d2:90:49:c2:db:17:db:f4:ae:ca:3a:33:e3:a7:3b:04:
41:6f:72:a2:31:aa:bc:00:c2:da:ba:d8:e9:ff:26:da:c7:18:
7f:66:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:51 2026 by rpki-client