Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/4Dt7Mn1lHQkg5yii2IEpcWGwkhI.roa
File: 4Dt7Mn1lHQkg5yii2IEpcWGwkhI.roa (raw, json)
Hash identifier: kHQ2nl9ekG4m6X2gKv/CM3Og7S1UQ5gzllovoXGKw5M=
Subject key identifier: E0:3B:7B:32:7D:65:1D:09:20:E7:28:A2:D8:81:29:71:61:B0:92:12
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 01A153ACD7DFF39DD3C93BAB968906056001
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/4Dt7Mn1lHQkg5yii2IEpcWGwkhI.roa
Signing time: Mon 19 Oct 2026 10:19:58 +0000
ROA not before: Mon 19 Oct 2026 10:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31122
IP address blocks: 45.139.240.0/22 maxlen: 22
46.183.104.0/23 maxlen: 23
78.137.128.0/18 maxlen: 18
78.143.128.0/18 maxlen: 18
79.140.128.0/20 maxlen: 20
80.93.16.0/20 maxlen: 20
82.195.128.0/19 maxlen: 19
83.147.128.0/18 maxlen: 18
84.51.224.0/21 maxlen: 21
84.51.236.0/22 maxlen: 22
84.51.240.0/20 maxlen: 20
84.203.0.0/16 maxlen: 16
89.16.64.0/19 maxlen: 19
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
89.184.56.0/23 maxlen: 23
89.234.64.0/18 maxlen: 18
91.142.96.0/20 maxlen: 20
92.51.192.0/20 maxlen: 20
92.51.216.0/21 maxlen: 21
92.51.240.0/21 maxlen: 21
93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
109.106.96.0/20 maxlen: 20
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
176.52.216.0/22 maxlen: 22
176.52.220.0/23 maxlen: 23
185.47.144.0/22 maxlen: 22
185.53.32.0/24 maxlen: 24
185.53.35.0/24 maxlen: 24
185.182.72.0/22 maxlen: 22
185.205.228.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.242.236.0/23 maxlen: 23
212.78.224.0/20 maxlen: 20
212.78.240.0/23 maxlen: 23
212.84.40.0/21 maxlen: 21
212.126.32.0/19 maxlen: 19
212.126.60.0/22 maxlen: 22
217.78.0.0/20 maxlen: 20
2001:1bd8::/32 maxlen: 32
2a00:15b8::/32 maxlen: 32
2a00:15b8:400::/40 maxlen: 40
2a01:258::/32 maxlen: 32
2a01:8aa0::/32 maxlen: 32
2a02:220::/32 maxlen: 32
2a0a:e780::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:ac:d7:df:f3:9d:d3:c9:3b:ab:96:89:06:05:60:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Oct 19 10:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e03b7b327d651d0920e728a2d881297161b09212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:0a:88:b5:62:24:e8:24:fb:ed:58:b8:df:
f3:22:91:9b:17:67:45:1d:92:06:5d:d9:d3:ef:4f:
61:54:05:4c:ee:69:2d:16:45:c1:3e:13:01:a5:56:
84:e6:c6:84:33:d3:a7:89:79:3b:30:da:ec:49:e4:
e3:fd:11:25:66:87:a0:c2:c9:ab:72:25:5b:c3:13:
e7:e7:13:d1:b3:54:ab:9d:52:e2:27:22:aa:84:e3:
76:45:d7:f5:c9:a2:ce:20:af:b0:5b:3c:e7:38:ce:
2e:80:3f:c9:75:f8:fc:c7:7e:6e:63:9f:d5:74:2d:
47:d4:c7:c9:7d:d4:42:f9:f6:86:76:d3:54:01:cd:
3f:39:ca:91:b3:2a:19:84:92:3e:cd:62:49:2f:79:
29:d6:af:48:3a:3b:a1:cf:d7:b8:ac:67:59:53:57:
42:0e:c3:df:a2:15:08:e1:ee:38:e0:51:b5:c3:8f:
15:c2:f5:95:13:b9:fd:95:32:bf:3c:3d:06:3a:48:
c7:68:ff:e0:d0:bd:33:01:ee:22:5b:7e:46:19:37:
6b:06:1f:d0:45:74:f5:be:60:4c:87:24:61:35:99:
b4:50:4a:a1:e0:6c:43:43:fe:4b:74:95:f2:f2:de:
18:b2:8d:ac:44:0b:2d:00:86:81:34:31:36:1c:9d:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3B:7B:32:7D:65:1D:09:20:E7:28:A2:D8:81:29:71:61:B0:92:12
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/4Dt7Mn1lHQkg5yii2IEpcWGwkhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
79.140.128.0/20
80.93.16.0/20
82.195.128.0/19
83.147.128.0/18
84.51.224.0/21
84.51.236.0-84.51.255.255
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/20
92.51.216.0/21
92.51.240.0/21
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.78.224.0-212.78.241.255
212.84.40.0/21
212.126.32.0/19
217.78.0.0/20
IPv6:
2001:1bd8::/32
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
Signature Algorithm: sha256WithRSAEncryption
49:8a:76:0d:79:5a:19:32:8e:80:fb:27:25:22:de:eb:24:96:
12:07:f8:d6:37:ce:6a:c0:8a:48:e5:0a:94:e4:71:68:22:f1:
c0:f8:9c:c0:4e:c2:bf:08:16:ed:b6:02:44:17:61:98:1a:29:
72:f4:6c:cd:a6:a3:4a:54:1a:f5:16:98:9c:36:8f:25:d8:d0:
60:b1:a8:c4:d6:f6:62:1f:6e:e2:4d:da:04:57:f3:f8:8c:c3:
21:51:68:82:6c:a0:39:cf:4c:55:16:5a:f9:37:4b:8c:bf:7e:
72:b7:5e:df:96:d6:e8:7f:10:19:74:27:22:30:32:1c:aa:33:
f3:6c:0c:df:3e:77:cf:07:38:52:99:45:b2:fb:53:b0:1e:bc:
f0:8f:69:61:1f:7a:7c:33:9e:a1:a2:e0:72:7a:15:a5:1a:4a:
7a:d3:c7:e0:82:5f:fa:5e:6c:3d:06:ba:7e:97:b6:82:82:a6:
e4:f7:1a:11:19:8d:1d:37:50:da:dd:59:14:c0:ad:a4:e5:21:
b4:02:0c:0e:dd:a6:10:eb:0a:ea:34:62:01:0e:1b:c2:ce:2c:
96:53:de:a3:cc:0a:05:43:06:f5:89:92:d8:f8:a5:60:15:e9:
b5:4b:e1:a3:f8:21:1f:2f:14:1d:12:1d:84:ff:f1:70:4e:50:
39:86:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:04 2026 by rpki-client