Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a53qHY2yN9qxisOFczEKtoXTkFQ.roa
File: a53qHY2yN9qxisOFczEKtoXTkFQ.roa (raw, json)
Hash identifier: CD6JZjPD48DBaZHLi9IEZZ5ge7+c+yhFj9Mv2PCtXac=
Subject key identifier: 6B:9D:EA:1D:8D:B2:37:DA:B1:8A:C3:85:73:31:0A:B6:85:D3:90:54
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019F46E24E1092E2DA33793816965BBE9DCC
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a53qHY2yN9qxisOFczEKtoXTkFQ.roa
Signing time: Thu 09 Jul 2026 12:37:44 +0000
ROA not before: Thu 09 Jul 2026 12:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
85.235.81.0/24 maxlen: 24
91.241.180.0/24 maxlen: 24
91.241.181.0/24 maxlen: 24
176.103.82.0/24 maxlen: 24
192.109.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:e2:4e:10:92:e2:da:33:79:38:16:96:5b:be:9d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jul 9 12:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b9dea1d8db237dab18ac38573310ab685d39054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:d3:41:76:77:d4:13:90:7d:60:b2:c8:35:
4d:7c:13:04:71:9d:f0:f9:47:c2:ed:f0:0f:cf:0b:
96:d5:0e:be:1f:04:80:0d:55:23:33:07:02:c2:d0:
8d:55:6b:9b:52:0c:b1:a3:36:10:a0:be:3a:63:3b:
eb:71:9c:35:8e:0f:02:4a:c1:6b:02:f4:be:85:75:
61:8c:a3:f6:71:db:58:94:4a:2a:b1:f6:e5:28:27:
46:b9:37:d8:48:67:41:43:33:3a:4a:4d:05:04:fd:
99:d5:62:2b:1a:9e:8b:0c:85:7a:4b:ab:d5:76:7d:
60:3e:98:0f:e1:6c:68:72:7c:06:94:e4:0e:97:1c:
e8:26:6f:9d:e1:89:3e:83:c7:60:2d:9f:af:ec:0f:
0c:fe:cc:5a:18:d2:35:00:2f:d2:6d:74:af:28:82:
26:00:46:42:31:ba:47:84:e5:41:27:31:fd:f9:39:
f0:d8:87:72:4b:d9:d4:89:76:4b:b9:e1:64:d7:c9:
b5:fd:a6:aa:7f:bf:50:dd:fb:af:a9:2d:0a:3e:38:
4b:1e:3f:12:01:b5:d9:d5:e2:17:0a:15:84:98:65:
d8:8f:4f:b4:b8:ba:55:db:28:30:17:8e:24:9e:2d:
9e:58:6b:bc:ea:9f:47:b4:d4:d1:f8:5a:a2:e8:cc:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:EA:1D:8D:B2:37:DA:B1:8A:C3:85:73:31:0A:B6:85:D3:90:54
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a53qHY2yN9qxisOFczEKtoXTkFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
85.235.81.0/24
91.241.180.0/23
176.103.82.0/24
192.109.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:91:f4:c7:08:86:68:d5:fc:00:65:4e:19:db:06:70:9c:8a:
63:20:6e:4c:04:4f:75:3f:07:56:13:71:e5:60:a6:94:a4:48:
a8:58:a8:ef:17:a6:cd:85:36:53:ff:a9:7f:f3:d1:e0:89:bf:
03:64:8d:b8:43:54:e2:dd:cc:c2:e1:50:40:1e:3e:b3:43:17:
75:51:32:34:07:bd:c8:4c:b2:4b:0a:37:02:c5:af:85:6d:ea:
40:7e:a6:a6:1b:51:c0:5b:38:b7:57:43:41:90:8d:6b:77:5f:
53:3d:7e:d0:ca:2d:a2:bd:c1:b8:b1:2d:59:cb:7a:57:36:c3:
a3:31:fa:4b:e0:f1:95:39:eb:2a:e4:17:ff:3e:a6:75:8d:73:
d2:5c:51:61:09:18:b8:06:15:37:c6:ee:fd:33:25:4d:86:94:
69:32:44:41:b7:a7:ae:f3:aa:41:75:d7:92:4a:f6:97:a1:b0:
b8:59:2b:18:dc:f0:d9:11:f2:fc:86:2d:4b:c7:f9:b7:d1:e4:
d3:d6:79:a5:8a:6f:b1:a7:cf:f4:72:43:80:61:17:5a:e0:ef:
6b:8c:ec:88:b0:16:18:c9:2b:55:8d:eb:3e:3e:f1:c4:94:b8:
b5:a6:ba:37:5f:bf:51:a4:9d:1d:37:56:5d:43:42:ac:90:be:
6c:c3:fe:58
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ9G4k4QkuLaM3k4FpZbvp3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3
YTkxODQwHhcNMjYwNzA5MTIzNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjlkZWExZDhkYjIzN2RhYjE4YWMzODU3MzMxMGFiNjg1ZDM5MDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMLTQXZ31BOQfWCyyDVNfBMEcZ3w
+UfC7fAPzwuW1Q6+HwSADVUjMwcCwtCNVWubUgyxozYQoL46YzvrcZw1jg8CSsFr
AvS+hXVhjKP2cdtYlEoqsfblKCdGuTfYSGdBQzM6Sk0FBP2Z1WIrGp6LDIV6S6vV
dn1gPpgP4WxocnwGlOQOlxzoJm+d4Yk+g8dgLZ+v7A8M/sxaGNI1AC/SbXSvKIIm
AEZCMbpHhOVBJzH9+Tnw2IdyS9nUiXZLueFk18m1/aaqf79Q3fuvqS0KPjhLHj8S
AbXZ1eIXChWEmGXYj0+0uLpV2ygwF44kni2eWGu86p9HtNTR+Fqi6MxPGQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGud6h2NsjfasYrDhXMxCraF05BUMB8GA1UdIwQY
MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt
MzZiYWM4ZDkxZTJlLzEvYTUzcUhZMnlOOXF4aXNPRmN6RUt0b1hUa0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl
LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLpb4AwQA
VetRAwQBW/G0AwQAsGdSAwQAwG1hMA0GCSqGSIb3DQEBCwUAA4IBAQCgkfTHCIZo
1fwAZU4Z2wZwnIpjIG5MBE91PwdWE3HlYKaUpEioWKjvF6bNhTZT/6l/89Hgib8D
ZI24Q1Ti3czC4VBAHj6zQxd1UTI0B73ITLJLCjcCxa+FbepAfqamG1HAWzi3V0NB
kI1rd19TPX7Qyi2ivcG4sS1Zy3pXNsOjMfpL4PGVOesq5Bf/PqZ1jXPSXFFhCRi4
BhU3xu79MyVNhpRpMkRBt6eu86pBddeSSvaXobC4WSsY3PDZEfL8hi1Lx/m30eTT
1nmlim+xp8/0ckOAYRda4O9rjOyIsBYYyStVjes+PvHElLi1pro3X79RpJ0dN1Zd
Q0KskL5sw/5Y
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:00 2026 by rpki-client