Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/0nM5gZLay0XoSOm1YApEyesZhFA.roa
File: 0nM5gZLay0XoSOm1YApEyesZhFA.roa (raw, json)
Hash identifier: utKCoWc4VLwlHlmmcV65CsTPE8IA4veV7+tK9lqpAzg=
Subject key identifier: D2:73:39:81:92:DA:CB:45:E8:48:E9:B5:60:0A:44:C9:EB:19:84:50
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 019F41F4B3E86F6FF439C217F90BF4DB7EDD
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/0nM5gZLay0XoSOm1YApEyesZhFA.roa
Signing time: Wed 08 Jul 2026 13:39:43 +0000
ROA not before: Wed 08 Jul 2026 13:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39507
IP address blocks: 46.253.208.0/20 maxlen: 20
91.221.158.0/23 maxlen: 23
91.222.72.0/22 maxlen: 22
91.224.196.0/23 maxlen: 23
91.231.32.0/23 maxlen: 23
91.234.100.0/22 maxlen: 22
91.237.219.0/24 maxlen: 24
91.237.224.0/22 maxlen: 22
91.237.228.0/23 maxlen: 23
95.171.192.0/19 maxlen: 19
176.101.128.0/20 maxlen: 20
185.3.60.0/22 maxlen: 22
185.23.44.0/22 maxlen: 22
185.41.80.0/22 maxlen: 22
185.95.196.0/22 maxlen: 22
185.107.140.0/22 maxlen: 22
185.234.232.0/22 maxlen: 22
185.245.44.0/22 maxlen: 22
185.253.64.0/22 maxlen: 22
188.191.216.0/21 maxlen: 21
194.180.220.0/22 maxlen: 22
2a07:f080::/32 maxlen: 32
2a0c:3540::/32 maxlen: 32
2a0d:3100::/29 maxlen: 29
2a0d:4a80::/32 maxlen: 32
2a0d:9180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:f4:b3:e8:6f:6f:f4:39:c2:17:f9:0b:f4:db:7e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Jul 8 13:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d273398192dacb45e848e9b5600a44c9eb198450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:49:56:f7:5f:06:50:c9:75:49:08:e8:93:
8e:8a:c8:75:79:5f:48:4c:ce:00:84:88:48:f1:53:
17:a3:d4:03:bd:fb:c5:0a:d2:c1:97:30:52:5c:ae:
20:d0:06:6d:e7:97:fb:71:7c:c8:67:2b:97:a7:c8:
7a:e6:cc:e9:e7:b2:ba:26:6d:c1:09:77:d8:11:54:
6c:97:40:0a:1f:80:06:58:cc:53:05:f0:5b:d1:41:
4d:13:e2:6f:78:0b:f2:0c:fe:98:81:d0:a4:ef:4f:
d3:77:77:e4:12:74:3d:92:7a:bf:38:e7:fa:12:5a:
1d:b2:bf:6a:bb:9b:92:d8:8a:87:4c:b5:b4:37:69:
82:07:cb:76:2f:69:0d:cb:a8:e0:a4:e0:ef:b2:73:
f3:4e:71:b0:3b:19:2c:09:87:86:15:f4:d4:dd:48:
10:c6:d9:3c:41:20:bb:36:68:72:a4:12:21:2b:94:
b4:ea:84:27:a8:09:65:45:92:22:b2:ce:24:2e:f1:
2f:01:7c:ea:7f:cf:7d:8d:16:09:77:f0:67:5f:03:
35:d7:fc:52:71:90:19:53:73:ff:30:d7:0b:4b:48:
3a:b1:ad:de:63:39:1e:89:b8:62:62:18:9c:5b:08:
be:5f:ae:af:66:27:7d:9f:6c:d6:9b:12:5b:73:c7:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:39:81:92:DA:CB:45:E8:48:E9:B5:60:0A:44:C9:EB:19:84:50
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/0nM5gZLay0XoSOm1YApEyesZhFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.208.0/20
91.221.158.0/23
91.222.72.0/22
91.224.196.0/23
91.231.32.0/23
91.234.100.0/22
91.237.219.0/24
91.237.224.0-91.237.229.255
95.171.192.0/19
176.101.128.0/20
185.3.60.0/22
185.23.44.0/22
185.41.80.0/22
185.95.196.0/22
185.107.140.0/22
185.234.232.0/22
185.245.44.0/22
185.253.64.0/22
188.191.216.0/21
194.180.220.0/22
IPv6:
2a07:f080::/32
2a0c:3540::/32
2a0d:3100::/29
2a0d:4a80::/32
2a0d:9180::/32
Signature Algorithm: sha256WithRSAEncryption
76:f8:32:83:8b:fc:88:94:6c:78:63:f2:62:8b:c9:2c:b6:eb:
c8:dd:16:5a:63:cb:43:fd:87:c9:7d:36:d7:42:96:33:08:7f:
f0:8c:fa:b7:ad:ab:ca:c5:d3:43:25:45:1b:5e:6c:df:72:aa:
80:b5:50:8e:57:09:2c:55:51:53:f4:35:8b:0a:1d:21:5c:45:
a2:f0:36:8f:3b:3d:99:51:90:58:f7:9f:08:93:34:75:3a:52:
81:f8:3c:74:76:22:86:25:7a:b1:6a:17:80:cf:8d:9a:ea:0a:
46:04:ef:eb:3f:65:12:35:6b:80:03:3f:bb:fa:23:46:51:e9:
6c:88:8e:7f:dc:cb:7e:94:fa:13:66:f6:45:ea:8f:e9:52:e3:
cb:3d:c0:7d:e6:2f:d9:89:75:19:14:d6:6b:89:2a:58:d3:9d:
0c:27:c9:12:3c:f0:06:e2:20:ba:bb:b3:bc:86:29:db:73:0e:
5f:be:76:4a:37:32:d5:50:85:8c:06:ba:77:6d:6f:b8:0f:26:
51:78:aa:b1:24:f0:80:47:b4:aa:74:1b:f4:df:ff:a6:35:e4:
1e:26:50:dd:03:7f:ce:bd:c0:d0:75:ef:cb:e2:0a:40:5d:f3:
55:53:b4:98:8f:89:aa:a3:6c:52:9a:9e:d3:df:de:19:09:34:
d3:48:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:06:19 2026 by rpki-client