Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/bMk8m7albPuDGUCZVOZfipZcp00.roa
File: bMk8m7albPuDGUCZVOZfipZcp00.roa (raw, json)
Hash identifier: 1ds0a7jQWV1Q8oPHPD/jS7Bot1lIzjMJKQRHJhFi2Ts=
Subject key identifier: 6C:C9:3C:9B:B6:A5:6C:FB:83:19:40:99:54:E6:5F:8A:96:5C:A7:4D
Certificate issuer: /CN=de568adc35283796554b2beb85bcc1d3f3f1e81b
Certificate serial: 01A143C9B3066E0FB474A9079BA32C149CBF
Authority key identifier: DE:56:8A:DC:35:28:37:96:55:4B:2B:EB:85:BC:C1:D3:F3:F1:E8:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/bMk8m7albPuDGUCZVOZfipZcp00.roa
Signing time: Fri 16 Oct 2026 08:17:34 +0000
ROA not before: Fri 16 Oct 2026 08:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25135
IP address blocks: 46.237.128.0/18 maxlen: 18
46.237.128.0/21 maxlen: 21
46.237.136.0/21 maxlen: 21
46.237.144.0/21 maxlen: 21
46.237.152.0/21 maxlen: 21
46.237.160.0/21 maxlen: 21
46.237.168.0/21 maxlen: 21
46.237.176.0/21 maxlen: 21
46.237.184.0/24 maxlen: 24
46.237.185.0/24 maxlen: 24
83.216.64.0/19 maxlen: 19
83.216.64.0/21 maxlen: 21
83.216.72.0/21 maxlen: 21
83.216.80.0/21 maxlen: 21
83.216.88.0/21 maxlen: 21
89.104.32.0/19 maxlen: 19
89.104.32.0/21 maxlen: 21
89.104.40.0/21 maxlen: 21
89.104.48.0/21 maxlen: 21
89.104.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:c9:b3:06:6e:0f:b4:74:a9:07:9b:a3:2c:14:9c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de568adc35283796554b2beb85bcc1d3f3f1e81b
Validity
Not Before: Oct 16 08:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cc93c9bb6a56cfb8319409954e65f8a965ca74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:91:80:ed:e2:e6:29:82:ce:eb:66:25:2d:
85:f2:cc:0f:d1:1c:ac:d1:6d:55:16:c9:40:b2:b3:
c4:67:90:ef:2b:cf:16:50:b1:e3:82:85:09:d4:26:
15:72:d0:8c:93:f0:55:6a:df:bd:ce:c0:05:0e:89:
40:76:5b:46:ab:39:62:9a:73:61:e7:80:4c:01:d3:
5d:b7:04:90:7a:c7:da:56:5d:4c:8e:08:be:49:87:
f8:6f:cf:61:6c:7c:b6:57:aa:a4:6f:b7:c7:b3:14:
5a:ac:f8:0e:39:f8:e5:a5:86:84:90:c4:54:7b:39:
57:35:ef:ab:b2:1a:0c:64:cc:b0:36:1f:e0:6a:e3:
55:60:d1:04:e0:10:6d:5a:b8:ac:49:65:9d:da:15:
a3:3c:45:4e:94:3a:09:d9:bb:d6:b9:11:fc:38:e9:
d5:c9:42:c1:8b:fc:27:fa:fb:8c:46:d8:98:99:ab:
fb:a3:e2:09:26:bc:b8:49:7a:4a:07:fd:56:5e:7f:
a2:d1:67:b4:11:95:d0:27:53:65:22:28:7b:f4:91:
6e:e4:ac:33:63:d4:b9:8a:b8:95:63:10:ca:d9:1d:
3c:e9:05:d1:02:15:37:7e:0f:10:49:8b:c2:ea:d1:
86:cf:ba:80:56:01:38:83:71:28:68:ab:4f:23:35:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:3C:9B:B6:A5:6C:FB:83:19:40:99:54:E6:5F:8A:96:5C:A7:4D
X509v3 Authority Key Identifier:
keyid:DE:56:8A:DC:35:28:37:96:55:4B:2B:EB:85:BC:C1:D3:F3:F1:E8:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/bMk8m7albPuDGUCZVOZfipZcp00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.237.128.0/18
83.216.64.0/19
89.104.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:4c:7b:a7:aa:72:e6:9e:89:39:2f:c9:7b:b3:8f:4a:90:73:
2f:5a:37:94:0a:8e:64:de:cd:27:b2:ec:91:6d:1f:52:39:5c:
86:66:4c:f8:2f:4d:f0:7b:f3:df:f8:93:5a:d2:52:8a:1d:ea:
03:e3:52:54:18:2a:d0:e6:4a:4b:e8:98:b3:66:47:4b:f9:c2:
d4:74:13:d5:02:cd:03:74:42:22:38:f5:e6:a1:10:29:2a:5b:
b5:c8:31:55:c6:20:02:65:d6:40:db:b4:8d:5b:3f:00:03:39:
4f:ef:8c:30:36:8e:9d:f9:6e:15:d9:18:e7:55:c7:d9:fe:5c:
3f:12:76:9d:48:37:70:dd:64:52:9a:3f:31:48:24:1f:de:2d:
15:12:35:60:2e:98:36:df:ff:89:80:69:a1:86:c0:44:c2:8f:
ed:4b:96:bc:b2:ff:e7:ca:19:f6:18:e4:0a:5c:53:17:e4:e2:
4c:3e:df:72:91:03:77:7f:10:0c:75:88:4b:4c:69:fc:64:2b:
cb:e7:a9:17:f2:e0:a0:b9:11:e1:72:21:cd:09:0c:38:05:a7:
46:78:1b:94:38:94:f6:37:ea:f7:32:f6:24:a5:0c:85:44:23:
88:44:41:40:1d:62:e7:1f:76:60:1a:18:be:88:9d:41:a1:c6:
85:ee:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:39 2026 by rpki-client