Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/In4lqbEabjwz8aLUkBV_OAixk-o.roa
File: In4lqbEabjwz8aLUkBV_OAixk-o.roa (raw, json)
Hash identifier: HtgltGmI5kV5Jd30aPGAUttUdYj0csAuRIHgjQG9jQ4=
Subject key identifier: 22:7E:25:A9:B1:1A:6E:3C:33:F1:A2:D4:90:15:7F:38:08:B1:93:EA
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 01A10B0C94F2276CBCD6B699DE9E150724ED
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/In4lqbEabjwz8aLUkBV_OAixk-o.roa
Signing time: Mon 05 Oct 2026 07:52:16 +0000
ROA not before: Mon 05 Oct 2026 07:52:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6797
IP address blocks: 46.32.156.0/22 maxlen: 22
62.12.32.0/20 maxlen: 20
62.12.48.0/21 maxlen: 21
87.104.192.0/19 maxlen: 19
87.104.224.0/21 maxlen: 21
87.104.233.0/24 maxlen: 24
87.104.234.0/23 maxlen: 23
87.104.236.0/22 maxlen: 22
91.198.227.0/24 maxlen: 24
195.93.182.0/23 maxlen: 23
2a02:189::/32 maxlen: 32
2a02:18f::/32 maxlen: 32
2a02:460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:0c:94:f2:27:6c:bc:d6:b6:99:de:9e:15:07:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Oct 5 07:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=227e25a9b11a6e3c33f1a2d490157f3808b193ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a5:02:08:16:79:28:a2:7f:b1:a9:77:0d:13:
bb:42:e2:7e:eb:eb:b1:19:85:10:de:aa:db:eb:38:
66:95:0c:06:e8:c8:67:20:62:6a:0e:7a:f6:e0:a0:
0f:4a:65:63:f9:c9:3f:fb:69:ba:92:b8:72:50:47:
d3:a3:e9:39:2c:88:37:ad:79:d1:f1:e2:85:42:0c:
5e:95:97:08:47:88:5c:86:89:49:76:c6:e9:01:ee:
5e:d0:7f:76:50:7f:20:b2:9e:03:a9:e8:94:45:ba:
91:d4:65:ce:16:22:f1:f8:16:e7:7b:6c:82:52:e6:
97:63:11:a6:66:8f:6e:36:07:4a:0e:92:83:e8:9d:
54:2f:3b:fc:34:b7:81:ab:c7:f1:b2:a2:56:d3:77:
4e:36:e2:9c:a7:c6:90:b5:ac:54:08:8c:45:f1:f3:
22:3a:ec:3a:45:30:e7:c7:00:7c:da:14:22:bf:c0:
40:30:91:8b:a4:09:38:d7:84:f5:12:de:d8:70:3b:
e6:70:d4:bf:3b:1f:11:a3:9b:cf:5f:f1:c1:87:ee:
0e:30:c4:39:d6:a8:66:71:73:5c:ec:7c:64:24:fb:
4e:ff:5a:e5:c8:05:7d:38:a5:d2:98:7a:40:0c:01:
c0:99:eb:08:d2:58:52:c3:3e:99:c8:30:1b:25:69:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:25:A9:B1:1A:6E:3C:33:F1:A2:D4:90:15:7F:38:08:B1:93:EA
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/In4lqbEabjwz8aLUkBV_OAixk-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.156.0/22
62.12.32.0-62.12.55.255
87.104.192.0-87.104.231.255
87.104.233.0-87.104.239.255
91.198.227.0/24
195.93.182.0/23
IPv6:
2a02:189::/32
2a02:18f::/32
2a02:460::/32
Signature Algorithm: sha256WithRSAEncryption
5d:c6:cc:60:f7:c3:78:d1:8d:07:a6:b5:58:6e:9e:c5:ca:98:
e0:32:b6:af:66:a4:52:68:04:9b:28:66:8f:a0:c0:91:e4:cc:
1e:5c:7e:bc:9e:78:03:55:47:4c:b9:58:46:b4:95:41:da:9f:
42:25:30:7f:3c:6d:ec:cd:28:f3:00:9b:29:4f:de:51:06:e9:
1f:7b:79:44:68:e3:6e:72:df:bb:06:50:1e:44:0a:9e:7b:28:
c8:9c:00:c1:e8:13:28:52:47:44:c0:32:5f:43:a0:25:24:46:
08:9e:91:b4:16:f7:f3:9a:23:b4:72:7e:b3:db:e4:6a:b9:49:
58:8e:7a:90:1d:4c:7f:f7:e5:84:f9:3f:41:16:04:46:f9:a9:
52:92:b7:93:15:1d:fd:e0:c0:ff:2a:e7:0d:b5:29:ac:5c:fc:
9a:2e:ff:a5:eb:de:09:47:38:32:4d:01:31:bc:b6:57:11:4f:
04:dc:c9:2a:93:18:07:d0:34:e0:27:97:f5:f0:af:d0:0e:b4:
91:e4:28:a3:50:09:80:01:84:02:07:6d:54:52:e4:9c:db:9f:
98:5a:5e:c2:e0:a4:25:13:ca:8e:dd:94:aa:a6:af:20:4e:ac:
50:46:1b:aa:11:28:16:92:57:c1:7d:98:a9:06:ef:df:c7:28:
ff:e3:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:55 2026 by rpki-client