Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/AsR8PMxYeWP89FOuspLxoZEjj1U.roa
File: AsR8PMxYeWP89FOuspLxoZEjj1U.roa (raw, json)
Hash identifier: ARY4kS+u5n58uyYcSBSAEiIPAoo4CIZkyZRdQCxQau0=
Subject key identifier: 02:C4:7C:3C:CC:58:79:63:FC:F4:53:AE:B2:92:F1:A1:91:23:8F:55
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0912356F6ADC6BD6A545D04FDDD3E80B5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/AsR8PMxYeWP89FOuspLxoZEjj1U.roa
Signing time: Fri 11 Sep 2026 15:43:27 +0000
ROA not before: Fri 11 Sep 2026 15:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218749
IP address blocks: 46.29.27.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:23:56:f6:ad:c6:bd:6a:54:5d:04:fd:dd:3e:80:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 11 15:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02c47c3ccc587963fcf453aeb292f1a191238f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:66:13:90:d9:f3:73:ff:1f:e7:f6:7b:20:71:
55:27:0d:46:b4:20:c9:ba:48:31:6d:c5:df:da:ea:
ce:65:ce:07:9d:2f:6c:f6:d6:11:2c:fe:48:83:c8:
32:7c:59:52:bc:d4:17:fb:66:33:3f:6c:ed:9b:b3:
d1:cf:72:da:b5:48:1b:5a:cc:22:56:d8:0b:57:49:
99:e7:99:ec:9c:c4:ce:f6:3b:aa:c9:e5:de:4c:91:
c9:5b:cb:b2:42:5b:03:ee:52:7e:ae:8c:e7:91:cd:
55:55:6e:96:10:c6:ae:a9:e0:59:81:ab:cd:06:06:
60:cc:f2:3f:26:aa:df:93:ac:69:ed:d2:c3:0f:24:
5c:e1:73:a8:a8:65:77:4d:18:84:22:64:47:32:0f:
a7:0b:88:ef:a7:58:24:ea:17:0e:9f:7b:b5:5f:d9:
ac:c5:47:e2:91:00:49:96:83:d8:79:f9:ac:19:0c:
f0:e2:f7:19:59:af:6c:03:87:3f:6b:59:68:c4:a7:
cb:0f:d7:e4:d6:b5:64:6a:e3:2c:d2:56:b7:2c:c7:
27:9e:0d:6e:2a:47:e9:37:f0:6a:b3:51:bd:8b:92:
12:6f:35:2a:da:96:c6:95:2d:a5:8b:5e:79:53:23:
62:2f:66:a4:62:11:45:89:19:12:a7:f4:66:49:e0:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:7C:3C:CC:58:79:63:FC:F4:53:AE:B2:92:F1:A1:91:23:8F:55
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/AsR8PMxYeWP89FOuspLxoZEjj1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.27.0/24
93.190.12.0/24
185.86.13.0/24
185.243.180.0-185.243.182.255
Signature Algorithm: sha256WithRSAEncryption
9b:5d:2b:99:63:4b:fc:89:1b:37:66:46:d1:55:55:41:dc:7f:
26:a1:1f:fd:33:ed:97:28:02:a3:95:5c:af:8a:c7:8f:01:05:
61:7a:59:1e:7d:54:6f:f1:3a:e8:0b:47:fc:64:97:0b:a7:1c:
d2:29:0e:84:d7:dd:55:12:4a:7b:de:51:b8:4e:18:f7:46:6f:
44:c4:f0:9f:2d:d3:69:ec:92:20:ad:62:55:3e:f7:65:0e:69:
0a:eb:23:c9:09:8f:a8:72:3a:80:e3:85:b7:8a:aa:bc:81:91:
ea:0d:2a:b1:6b:f8:6a:fb:3b:83:d1:25:43:e5:ae:c0:63:7c:
31:8b:c7:08:46:56:0a:57:63:93:fc:4d:7f:eb:c0:42:b1:a4:
c7:db:e6:07:b1:fb:f7:0c:e8:a9:ca:63:22:db:f5:64:8c:f1:
85:c9:46:ec:17:4e:5a:67:e7:25:da:9c:d2:cb:73:ad:91:6b:
eb:aa:7b:c1:43:fc:5c:73:bd:a2:5a:af:0a:d6:f3:41:ea:26:
09:a9:f0:b9:f2:80:df:74:c2:8d:02:8f:1b:ec:a3:29:5b:fa:
22:49:ae:4c:28:94:9f:c4:af:89:32:14:5b:34:fc:04:a2:40:
a4:10:1c:87:87:13:19:d6:42:b6:3b:e6:1f:6a:b7:5b:cf:f9:
34:c2:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:42:19 2026 by rpki-client