Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/x86CTom7AXVfPVrzqqXjbrUQURY.roa
File: x86CTom7AXVfPVrzqqXjbrUQURY.roa (raw, json)
Hash identifier: VtlBuK8OxKd67U/IaQcXt0yJ5PAebcLvZF4N1BHaydo=
Subject key identifier: C7:CE:82:4E:89:BB:01:75:5F:3D:5A:F3:AA:A5:E3:6E:B5:10:51:16
Certificate issuer: /CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Certificate serial: 019F23688EE4B602BEC137D6B565A12C569C
Authority key identifier: 8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/x86CTom7AXVfPVrzqqXjbrUQURY.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 46.226.52.0/23 maxlen: 23
85.158.140.0/24 maxlen: 24
85.158.141.0/24 maxlen: 24
85.158.142.0/24 maxlen: 24
85.158.143.0/24 maxlen: 24
193.109.254.0/24 maxlen: 24
193.109.255.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:e4:b6:02:be:c1:37:d6:b5:65:a1:2c:56:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7ce824e89bb01755f3d5af3aaa5e36eb5105116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:a0:22:5e:d2:6a:f8:35:42:02:7d:20:f1:
c0:29:85:01:83:8c:c9:24:d2:a6:b0:ef:29:39:5a:
a3:db:31:d6:c8:0e:9d:20:22:ba:55:9e:63:46:c4:
7e:c6:5a:6b:e3:e0:a2:0a:0a:a7:ab:c4:6d:4b:44:
86:08:87:3b:46:52:e2:8f:54:3f:79:56:9e:b3:23:
67:54:24:a2:f1:4d:d9:8c:33:81:e7:30:78:5a:9b:
64:5a:31:30:90:f7:c0:34:bc:2e:25:35:b4:bb:17:
05:2c:89:a6:48:4d:4a:60:69:48:66:c0:8c:3b:32:
bc:53:75:1d:66:a6:47:38:09:1c:80:c3:44:03:ad:
ff:8a:06:b6:1b:ea:8a:85:be:0d:65:97:87:ea:1c:
a0:7e:bc:03:24:21:fc:6e:cf:15:6c:09:f8:59:fa:
53:bc:1d:15:df:a3:97:b9:96:80:af:13:5a:6a:15:
80:07:91:d6:fc:db:e9:80:a7:cc:06:d9:d8:53:d3:
c6:7b:78:a3:1f:ad:e8:ef:28:7d:5e:eb:87:56:ad:
dd:64:a2:93:75:1d:7f:1e:d8:40:69:f0:2c:93:1e:
c4:6e:cf:a6:5d:0f:6e:93:d5:c1:4c:32:60:b4:53:
f4:89:a8:ac:0d:d3:54:dd:f5:11:3d:b4:02:a4:d7:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CE:82:4E:89:BB:01:75:5F:3D:5A:F3:AA:A5:E3:6E:B5:10:51:16
X509v3 Authority Key Identifier:
keyid:8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/x86CTom7AXVfPVrzqqXjbrUQURY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/23
85.158.140.0/22
193.109.254.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:c9:5b:6d:0e:03:15:f2:25:36:75:47:e5:3a:73:4e:ef:b9:
d1:62:21:73:0c:12:bc:90:f4:0f:d5:1c:dc:be:eb:c4:ac:8c:
5e:a4:14:af:77:0c:e3:fb:fe:43:61:d4:e2:2a:51:71:5c:df:
4c:84:84:d6:6f:da:c1:fb:8e:e4:b3:cc:89:a8:6d:54:ab:40:
29:95:a2:49:e0:27:15:93:4b:25:13:72:fd:6f:87:2d:a5:43:
8c:7e:aa:a5:0e:fe:0d:14:8e:eb:05:f6:96:73:e3:93:67:33:
9f:21:e1:78:15:85:fd:a8:b5:df:de:03:ea:76:ee:5a:ac:0e:
fe:28:34:9a:20:70:82:70:83:89:ac:08:d8:41:1e:d5:48:4d:
c5:39:ec:6c:11:f5:7d:23:76:05:c2:c1:6a:d7:77:96:84:da:
bc:d3:cd:cd:f6:40:50:15:b7:db:c7:cd:1d:87:c9:60:a4:17:
0e:1d:2d:48:5b:38:50:f8:e5:3b:75:61:25:04:45:44:b6:6c:
54:9d:a2:c2:6c:8e:d1:0d:58:76:a4:e0:72:59:9c:72:08:cd:
5a:f8:cc:85:bf:a9:cc:cb:61:25:ed:d6:eb:c1:fd:56:75:27:
c6:ad:93:d6:a2:62:e9:a6:99:d2:22:44:3e:5f:fa:07:cb:c5:
26:b8:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:01:38 2026 by rpki-client