Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hNasAoFXJpf84Bz1Xaihga7mO48.roa
File: hNasAoFXJpf84Bz1Xaihga7mO48.roa (raw, json)
Hash identifier: YsM4TPILzr8bjaSLtHnGErqmMAG4d1688MzxlR+p/sc=
Subject key identifier: 84:D6:AC:02:81:57:26:97:FC:E0:1C:F5:5D:A8:A1:81:AE:E6:3B:8F
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01A0C58DF66072A43F655CBD7DCAE5406F28
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hNasAoFXJpf84Bz1Xaihga7mO48.roa
Signing time: Mon 21 Sep 2026 20:00:10 +0000
ROA not before: Mon 21 Sep 2026 20:00:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62068
IP address blocks: 5.182.208.0/22 maxlen: 24
45.14.224.0/22 maxlen: 24
45.87.41.0/24 maxlen: 24
45.87.42.0/23 maxlen: 24
45.148.120.0/23 maxlen: 24
45.148.122.0/24 maxlen: 24
91.217.200.0/24 maxlen: 24
91.226.227.0/24 maxlen: 24
91.230.49.0/24 maxlen: 24
146.19.248.0/24 maxlen: 24
185.224.128.0/22 maxlen: 24
185.244.36.0/22 maxlen: 24
2a0d:2400::/29 maxlen: 39
2a0d:2780::/29 maxlen: 32
2a0e:16c0::/29 maxlen: 29
2a0e:1740::/29 maxlen: 29
2a0e:2000::/29 maxlen: 29
2a11:b240::/29 maxlen: 32
2a12:a8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8d:f6:60:72:a4:3f:65:5c:bd:7d:ca:e5:40:6f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Sep 21 20:00:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84d6ac0281572697fce01cf55da8a181aee63b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:88:c2:5e:72:c0:2e:08:2e:66:c4:70:6c:
3f:6d:13:db:a7:61:ec:b4:cb:05:0c:bb:9e:db:de:
19:8f:4e:a3:33:89:be:f5:4e:41:00:45:34:fe:9a:
f8:55:67:5e:99:31:f2:16:0c:9c:bf:67:0e:5b:aa:
e7:c2:ea:c7:ff:b5:69:76:66:03:0f:e6:51:ff:92:
9e:bf:4e:e9:7b:16:a4:4c:96:c3:55:84:21:75:23:
63:36:2a:7d:fe:3b:b1:64:85:18:82:76:5e:8a:dd:
5c:ff:a6:26:65:bb:54:cb:6b:02:96:b1:a7:11:6a:
3c:0b:73:d5:88:c5:6f:9b:c4:d8:a2:17:6d:a5:b7:
fa:fb:43:3c:f8:a7:4c:6b:84:6e:d5:90:a5:de:d9:
4d:1a:33:bb:51:0a:00:ac:87:43:63:13:8d:eb:17:
bb:76:92:50:43:e4:59:af:ef:69:42:85:d5:2d:09:
8f:53:82:9c:6f:2a:0f:2f:34:0a:75:87:21:1b:2f:
fa:b2:c7:fa:4d:0b:18:c7:9b:18:11:1d:16:16:b8:
d0:53:65:0c:05:f1:ba:9a:b1:5c:31:3d:19:ce:e6:
dc:dc:70:6c:2e:ef:c7:a4:46:80:3a:7d:e5:83:a2:
5b:15:e8:42:0b:13:e8:b8:22:25:de:62:d6:dc:02:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:AC:02:81:57:26:97:FC:E0:1C:F5:5D:A8:A1:81:AE:E6:3B:8F
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hNasAoFXJpf84Bz1Xaihga7mO48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.41.0-45.87.43.255
45.148.120.0-45.148.122.255
91.217.200.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:21:a3:53:45:38:84:98:2e:3e:3b:34:fe:22:aa:0e:48:14:
84:e3:7d:ad:87:d7:77:16:1d:bc:40:86:dc:23:a2:a4:4a:86:
f3:3c:b3:f1:37:15:38:87:24:fa:0b:bf:71:dc:f4:be:e8:cd:
30:3b:24:1f:ed:f0:c4:2b:09:c3:9a:16:4b:bc:f0:dd:0f:40:
f7:a1:5c:92:9f:05:61:f9:b6:0a:32:98:56:e3:3f:f9:32:20:
3e:07:7e:7c:44:13:41:ee:28:4a:b6:c7:7c:4c:d0:31:ec:7c:
2e:26:41:8d:eb:0a:ed:51:96:48:fa:71:96:89:60:07:fb:6f:
7f:f6:bf:14:8a:78:1c:a6:8e:23:1a:53:de:18:8b:53:1d:c9:
dc:26:b4:8b:50:d2:06:fc:b7:18:f4:31:9d:d0:83:8b:71:50:
27:71:60:25:57:85:ff:40:ca:8f:12:1f:85:20:c3:33:6a:14:
f6:bf:fe:04:03:28:57:75:0f:0e:83:27:d5:a3:98:3b:98:eb:
8c:6c:85:cb:e3:9f:37:45:a5:03:71:ef:d7:da:74:6c:ef:a6:
d4:42:7d:07:80:a6:57:65:da:48:47:54:e1:00:94:6c:0d:de:
3e:5b:c0:2c:1f:df:5c:56:ad:33:d0:1e:40:99:97:2b:a2:ed:
ad:58:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:50:10 2026 by rpki-client