Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4IHfy85ZaLrvd3K3s3DC-8GPnFs.roa
File: 4IHfy85ZaLrvd3K3s3DC-8GPnFs.roa (raw, json)
Hash identifier: +XyFXE8DW9cD5zOpH1SHE+em22K2wucEzZ/Vryu10i0=
Subject key identifier: E0:81:DF:CB:CE:59:68:BA:EF:77:72:B7:B3:70:C2:FB:C1:8F:9C:5B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A1D4BA7C2884F27950F8B11D61830A91E7
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4IHfy85ZaLrvd3K3s3DC-8GPnFs.roa
Signing time: Fri 13 Nov 2026 11:45:53 +0000
ROA not before: Fri 13 Nov 2026 11:45:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.29.24.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:ba:7c:28:84:f2:79:50:f8:b1:1d:61:83:0a:91:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 13 11:45:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e081dfcbce5968baef7772b7b370c2fbc18f9c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:a1:6a:6f:5e:49:b6:11:1b:c4:b7:22:16:
30:06:85:77:62:ef:71:e0:3f:e5:18:8a:8c:ff:0f:
af:15:71:33:6e:fc:f8:4c:2f:c6:2a:0f:4e:42:e6:
07:40:de:20:0d:f1:11:09:9f:3c:25:3d:90:ab:34:
83:d3:ba:0f:75:6f:c5:4d:c4:c2:f8:61:b9:9b:ec:
b1:4c:3f:f3:a5:3a:e2:e0:45:d7:71:3a:17:7c:a1:
8a:2c:c0:ce:9b:bc:a9:7c:1f:26:d8:fc:30:cb:2a:
c2:0c:80:21:e2:16:1c:f7:22:bb:c8:c9:2b:a4:c5:
83:ae:54:ea:29:fa:a8:3e:c7:f4:14:50:dc:8c:75:
48:ee:cd:b5:5d:ab:18:ca:62:c7:3d:c3:89:97:6d:
e4:b3:24:67:ce:d5:bc:50:33:c8:d9:d7:e1:f5:da:
b9:dc:29:fc:f3:7c:0d:a9:d9:ae:89:b1:eb:43:cd:
b6:81:49:47:f1:43:e5:68:bd:77:4f:c1:b5:e6:fd:
04:f6:2b:d1:5f:01:3c:37:09:e4:e4:89:e3:f3:bd:
7e:73:56:44:b4:0d:d0:17:1a:d7:f7:e0:cf:d5:11:
0f:d0:36:b0:21:2a:d5:7d:75:32:15:c0:4b:34:18:
20:55:a2:f4:a4:f9:02:44:49:12:5e:23:43:95:e2:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:DF:CB:CE:59:68:BA:EF:77:72:B7:B3:70:C2:FB:C1:8F:9C:5B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4IHfy85ZaLrvd3K3s3DC-8GPnFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/24
185.85.188.0/24
185.85.237.0/24
185.86.12.0/24
185.88.173.0-185.88.175.255
185.98.61.0/24
185.119.80.0/24
185.184.25.0-185.184.26.255
185.249.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:26:b3:dd:a9:62:93:46:70:81:54:bc:12:4f:5e:37:7e:9f:
8c:17:87:0b:a7:b4:77:97:f9:12:51:04:cc:05:d1:07:bd:22:
eb:da:6b:b2:76:72:4a:7c:b0:d6:58:62:eb:55:27:ae:32:66:
b6:fd:f8:6e:e0:0e:37:c2:3d:1d:32:7d:38:65:75:6f:af:86:
27:7b:cb:52:e1:d8:ef:16:e6:c1:9d:05:96:73:c5:38:1e:04:
32:55:b4:6f:76:c8:32:f9:3e:e3:94:d5:46:d5:ed:bf:c0:1e:
4e:7f:05:70:cf:5f:3b:ca:42:ca:5f:22:4a:50:52:37:4b:d9:
5d:bb:44:62:49:82:57:94:2a:2e:de:7f:82:04:d0:9b:5e:0d:
99:7b:98:01:59:9c:a1:e9:6c:ce:33:5e:ab:75:6e:a1:95:ae:
ba:2b:6e:64:00:91:fe:6d:16:4a:72:fb:4f:7f:85:cf:bc:e8:
75:b6:1f:3b:14:45:2a:b2:a3:e8:3c:24:c6:87:23:89:9b:7d:
94:f8:cc:b4:46:ff:5c:da:f5:61:4c:9b:1a:04:3b:3f:a4:92:
8f:68:0e:ae:31:7b:7b:27:46:14:99:f9:a0:75:44:31:db:d9:
b7:5f:44:de:dd:86:d6:86:98:fa:b5:ad:39:d6:30:78:a0:55:
c7:c8:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:03 2026 by rpki-client