Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa
File: sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa (raw, json)
Hash identifier: 2uUaKaqnXjYRfBDPcREAVlMI7n+cIkRs0thYn8PfX5g=
Subject key identifier: B0:7C:FA:9F:61:90:C3:F6:1B:15:19:03:66:BF:00:24:02:09:28:29
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F236884249CE9AEA75568902CC3D60A1F
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24651
IP address blocks: 46.23.32.0/20 maxlen: 32
77.93.0.0/19 maxlen: 32
82.193.64.0/19 maxlen: 32
82.193.67.0/24 maxlen: 27
82.193.67.0/27 maxlen: 27
82.193.83.0/24 maxlen: 32
83.99.128.0/17 maxlen: 32
83.99.167.0/24 maxlen: 24
83.99.167.0/26 maxlen: 27
85.158.72.0/21 maxlen: 24
89.221.112.0/20 maxlen: 24
89.221.121.0/24 maxlen: 24
89.221.122.0/23 maxlen: 23
89.221.122.0/24 maxlen: 24
89.221.123.0/24 maxlen: 24
89.221.124.0/23 maxlen: 24
89.221.124.0/24 maxlen: 24
89.221.125.0/24 maxlen: 24
89.221.126.0/23 maxlen: 24
89.221.127.0/24 maxlen: 24
109.73.96.0/20 maxlen: 32
185.31.44.0/22 maxlen: 32
185.75.236.0/22 maxlen: 32
185.141.52.0/22 maxlen: 32
188.92.16.0/21 maxlen: 32
188.92.16.0/24 maxlen: 32
195.130.205.0/24 maxlen: 24
212.142.64.0/18 maxlen: 32
217.195.48.0/20 maxlen: 32
2a01:4e0::/29 maxlen: 29
2a01:4e0::/32 maxlen: 32
2a01:4e1:460:1::/64 maxlen: 64
2a01:4e1:cc1::/64 maxlen: 64
2a01:4e1:1745::/64 maxlen: 64
2a04:4e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:24:9c:e9:ae:a7:55:68:90:2c:c3:d6:0a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b07cfa9f6190c3f61b15190366bf002402092829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:33:7c:1e:75:a1:a1:ef:7e:c1:c8:ab:86:
95:25:10:8d:06:6c:2c:76:bf:33:18:95:fa:a7:e5:
5f:08:51:90:74:42:b2:cf:a5:55:c5:07:6d:1d:a0:
eb:d8:7d:e7:83:61:e3:30:29:ad:56:a0:fa:77:1a:
39:ab:6d:38:16:be:8c:ae:1e:83:7a:63:f2:9f:19:
75:48:09:08:0a:53:32:4b:c3:92:a4:2f:ba:2e:36:
9c:3e:68:cb:d4:0f:c2:50:ac:20:08:9d:fd:85:30:
e9:03:4c:b9:a1:86:7f:87:a4:cd:34:39:fd:f7:72:
d2:09:31:2a:eb:79:f1:c6:1f:ad:68:72:c3:30:41:
52:11:ab:80:66:38:a2:f5:a0:f3:bc:9a:86:a1:1f:
f8:ea:ba:49:7a:f1:73:ca:0b:62:f3:07:df:01:ae:
d5:1a:eb:92:46:23:07:39:c5:d9:e0:54:16:71:bf:
4d:5e:31:86:52:40:a0:2b:2b:17:96:d7:68:27:3e:
65:ab:10:be:9f:21:a2:0f:f9:fe:9c:24:02:b4:f1:
df:6e:62:f7:b4:34:44:2a:b9:61:6a:36:0f:1f:7e:
f3:4f:4e:e3:cd:2d:87:15:33:12:97:ef:14:26:bf:
56:45:84:b6:d5:6f:ef:19:27:52:50:13:fa:1c:9c:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:FA:9F:61:90:C3:F6:1B:15:19:03:66:BF:00:24:02:09:28:29
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.32.0/20
77.93.0.0/19
82.193.64.0/19
83.99.128.0/17
85.158.72.0/21
89.221.112.0/20
109.73.96.0/20
185.31.44.0/22
185.75.236.0/22
185.141.52.0/22
188.92.16.0/21
195.130.205.0/24
212.142.64.0/18
217.195.48.0/20
IPv6:
2a01:4e0::/29
2a04:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:35:02:82:5b:60:13:8d:92:d9:58:b3:3c:13:c0:20:2c:89:
56:56:19:77:99:84:61:48:8b:a0:ac:52:9d:7b:16:2e:38:7f:
99:8b:34:b6:bf:d4:ab:50:cb:4f:d1:d8:76:88:0e:2a:1b:25:
d4:20:e6:d0:11:65:f9:90:f7:d0:55:20:00:92:79:dc:8c:18:
27:93:0a:87:27:26:a8:cc:11:f2:b8:af:40:1d:41:fa:73:a1:
30:3d:b9:f3:20:76:9e:5a:aa:34:e2:96:f1:4b:ff:51:8a:01:
de:59:46:87:91:53:5d:a7:8b:6f:14:83:08:a9:8a:5f:ea:ba:
02:13:a3:f6:2a:8f:d9:f0:60:8e:37:8f:0c:c4:40:39:51:70:
82:55:bc:53:6c:59:bc:1a:e7:6c:d1:44:21:47:69:de:55:94:
cf:26:a6:91:3c:d5:77:18:82:ee:8e:89:15:2c:65:41:40:76:
a1:34:fd:49:98:68:7e:f1:8b:66:dd:fa:6c:82:6b:fe:bb:1f:
cc:46:96:a4:06:81:65:84:b8:11:43:24:25:e2:02:d9:77:68:
86:6e:42:6a:b7:ac:c3:a8:4e:fa:04:5b:8f:cf:27:5d:74:28:
19:3c:e6:8b:34:e2:7e:2c:21:f0:f3:f3:b5:67:63:3b:a4:d0:
36:69:63:d5
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZ8jaIQknOmup1VokCzD1gofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzBmZjA4OTA3YTk4NGI4ZTc3NjNlN2FhOGE5ZmM4YWY1
MWVkYTYwHhcNMjYwNzAyMTUxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDdjZmE5ZjYxOTBjM2Y2MWIxNTE5MDM2NmJmMDAyNDAyMDkyODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9kzfB51oaHvfsHIq4aVJRCNBmws
dr8zGJX6p+VfCFGQdEKyz6VVxQdtHaDr2H3ng2HjMCmtVqD6dxo5q204Fr6Mrh6D
emPynxl1SAkIClMyS8OSpC+6LjacPmjL1A/CUKwgCJ39hTDpA0y5oYZ/h6TNNDn9
93LSCTEq63nxxh+taHLDMEFSEauAZjii9aDzvJqGoR/46rpJevFzygti8wffAa7V
GuuSRiMHOcXZ4FQWcb9NXjGGUkCgKysXltdoJz5lqxC+nyGiD/n+nCQCtPHfbmL3
tDREKrlhajYPH37zT07jzS2HFTMSl+8UJr9WRYS21W/vGSdSUBP6HJznPQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFLB8+p9hkMP2GxUZA2a/ACQCCSgpMB8GA1UdIwQY
MBaAFFbA/wiQephLjndj56qKn8ivUe2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvc0h6Nm4yR1F3X1liRlJrRFpyOEFKQUlKS0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwWgQCAAEwVAMEBC4XIAME
BU1dAAMEBVLBQAMEB1NjgAMEA1WeSAMEBFndcAMEBG1JYAMEArkfLAMEArlL7AME
ArmNNAMEA7xcEAMEAMOCzQMEBtSOQAMEBNnDMDAUBAIAAjAOAwUDKgEE4AMFAyoE
TgAwDQYJKoZIhvcNAQELBQADggEBAJo1AoJbYBONktlYszwTwCAsiVZWGXeZhGFI
i6CsUp17Fi44f5mLNLa/1KtQy0/R2HaIDiobJdQg5tARZfmQ99BVIACSedyMGCeT
CocnJqjMEfK4r0AdQfpzoTA9ufMgdp5aqjTilvFL/1GKAd5ZRoeRU12ni28Ugwip
il/qugITo/Yqj9nwYI43jwzEQDlRcIJVvFNsWbwa52zRRCFHad5VlM8mppE81XcY
gu6OiRUsZUFAdqE0/UmYaH7xi2bd+myCa/67H8xGlqQGgWWEuBFDJCXiAtl3aIZu
Qmq3rMOoTvoEW4/PJ110KBk85os04n4sIfDz87VnYzuk0DZpY9U=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:01 2026 by rpki-client