Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/46p9s-6bK1x3IMhZZTLtFnLKSG4.roa
File: 46p9s-6bK1x3IMhZZTLtFnLKSG4.roa (raw, json)
Hash identifier: m9iX0hvEzdFtNZKfroikZrbqGhUWZla8pnTb/7pKB2A=
Subject key identifier: E3:AA:7D:B3:EE:9B:2B:5C:77:20:C8:59:65:32:ED:16:72:CA:48:6E
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01A13A16777BED9D282BFC6C7F6B30CAEC8D
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/46p9s-6bK1x3IMhZZTLtFnLKSG4.roa
Signing time: Wed 14 Oct 2026 11:05:13 +0000
ROA not before: Wed 14 Oct 2026 11:05:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202492
IP address blocks: 185.162.88.0/24 maxlen: 24
185.162.90.0/23 maxlen: 24
185.165.152.0/23 maxlen: 24
185.165.155.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
185.172.36.0/23 maxlen: 24
185.174.41.0/24 maxlen: 24
185.174.42.0/23 maxlen: 24
185.175.164.0/23 maxlen: 23
185.175.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:16:77:7b:ed:9d:28:2b:fc:6c:7f:6b:30:ca:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Oct 14 11:05:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3aa7db3ee9b2b5c7720c8596532ed1672ca486e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:aa:95:70:43:81:b8:3a:85:54:23:3b:aa:
60:25:d5:eb:68:78:69:96:13:03:53:16:ad:03:10:
d7:f1:16:a1:1e:5d:b1:c3:28:45:f7:c7:a8:d9:16:
ed:55:71:85:7e:f5:8e:af:5b:ec:ed:a0:7d:c2:54:
4d:7a:0a:38:53:26:8a:a9:3c:34:d6:44:10:44:0e:
46:f0:48:25:48:9d:2a:be:53:8c:9b:8a:8c:38:d2:
b2:da:d3:e2:8c:41:db:0f:af:c4:ae:aa:bb:db:08:
96:95:18:b8:07:21:dd:2e:b6:ef:a9:c6:70:bf:33:
7f:b8:65:bf:58:54:86:4c:e9:c1:ce:57:87:be:a8:
7c:e0:43:a8:48:0e:65:66:fd:f9:1b:59:0c:f7:f8:
0f:aa:cf:ae:f4:35:b6:fc:89:ae:d6:fd:0f:ab:5b:
05:d0:04:04:de:f9:8f:05:19:b1:17:9b:a5:01:64:
01:cd:12:80:bf:70:fb:a1:5a:84:d2:d3:f0:5b:e2:
da:9b:56:bf:30:69:36:e0:ef:c6:ca:83:86:60:26:
7b:eb:27:4a:e9:46:82:f0:01:64:c5:14:f6:e0:4e:
d4:27:f4:20:54:aa:23:df:66:64:df:d5:21:87:ec:
c4:ba:ba:43:6d:be:93:09:c8:5b:93:85:bb:24:ad:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:7D:B3:EE:9B:2B:5C:77:20:C8:59:65:32:ED:16:72:CA:48:6E
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/46p9s-6bK1x3IMhZZTLtFnLKSG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.88.0/24
185.162.90.0/23
185.165.152.0/23
185.165.155.0/24
185.170.128.0/24
185.170.130.0/24
185.172.36.0/23
185.174.41.0-185.174.43.255
185.175.164.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ae:e8:40:7e:a8:f3:75:3e:5a:54:65:66:88:5c:ab:7b:61:
ff:75:c6:df:5b:6c:71:12:c1:94:0d:29:39:68:9f:6f:da:6e:
b6:dc:88:30:0e:75:6b:a5:f0:91:7e:8d:fa:4a:b1:2e:7c:7c:
91:fc:11:e7:f1:40:af:5b:79:51:7d:12:bd:37:d0:cc:88:dc:
04:11:bb:52:e7:60:bb:2b:33:9f:7a:01:e0:be:c2:b2:a2:07:
02:2c:b7:2e:f7:15:2b:22:99:b5:38:69:b4:2e:6b:6d:20:39:
8f:7c:47:80:c4:bd:ab:e0:c6:6f:e4:46:86:ac:15:42:a3:07:
fb:33:1d:8d:c2:d7:66:14:3e:3c:53:c3:17:94:90:4f:a7:9f:
07:6f:67:4c:e6:aa:8c:b6:60:c4:05:5b:d3:4f:b6:97:aa:e7:
fc:b8:50:1b:79:3a:9c:36:c8:a0:a8:9d:04:c4:e3:cd:7a:89:
b5:05:3c:9e:75:e9:a5:6e:6b:7b:f7:12:30:30:58:bb:64:de:
da:97:36:1b:49:32:12:6f:73:e0:b2:89:9f:34:36:88:8e:4f:
67:66:b3:84:ca:65:1f:68:89:d6:f6:4c:53:37:14:83:e5:fc:
03:e9:37:05:b2:33:3f:f3:61:15:59:92:72:60:03:b9:cd:ba:
91:77:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:24 2026 by rpki-client