Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hjslYSBRCy4Jv3YuUmTFlkgY7NI.roa
File: hjslYSBRCy4Jv3YuUmTFlkgY7NI.roa (raw, json)
Hash identifier: sGKHjIrsfddZddoeN9cdUpOIrjfw7GmPvmQ33h1NH7U=
Subject key identifier: 86:3B:25:61:20:51:0B:2E:09:BF:76:2E:52:64:C5:96:48:18:EC:D2
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01A1C6BED1E32B3872A0AA1E971026ED650D
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hjslYSBRCy4Jv3YuUmTFlkgY7NI.roa
Signing time: Tue 10 Nov 2026 18:35:56 +0000
ROA not before: Tue 10 Nov 2026 18:35:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49037
IP address blocks: 46.226.160.0/21 maxlen: 32
80.72.16.0/21 maxlen: 32
85.198.120.0/21 maxlen: 32
89.169.52.0/22 maxlen: 32
92.118.72.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
92.246.136.0/21 maxlen: 32
93.185.144.0/20 maxlen: 32
93.185.152.0/24 maxlen: 32
95.174.96.0/19 maxlen: 32
178.212.139.0/24 maxlen: 32
185.9.184.0/22 maxlen: 32
185.136.32.0/22 maxlen: 32
185.230.240.0/22 maxlen: 32
185.230.241.0/24 maxlen: 24
185.230.242.0/24 maxlen: 24
213.108.20.0/22 maxlen: 32
217.144.176.0/20 maxlen: 32
2a00:8740::/32 maxlen: 128
2a00:8740:2100::/40 maxlen: 64
2a0b:1c40::/29 maxlen: 128
2a12:3280::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:be:d1:e3:2b:38:72:a0:aa:1e:97:10:26:ed:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 10 18:35:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=863b256120510b2e09bf762e5264c5964818ecd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:94:46:9e:20:9b:1c:cb:1a:a5:e0:ce:5f:
8e:3d:7f:e7:1d:5b:b5:c6:cc:45:23:fb:a1:7c:bb:
8a:c7:51:2b:88:6a:ab:8e:d1:66:b1:91:20:6f:f1:
f4:4d:b9:a1:15:c4:83:76:39:98:0f:aa:c5:ad:ea:
e9:41:28:33:0c:6a:df:e4:cf:86:e7:46:9f:48:bb:
bf:15:e1:47:d4:1e:7c:40:ba:3d:a5:03:20:c9:c3:
4b:3a:20:0b:c7:fd:f0:d5:71:7e:74:bd:12:44:53:
4a:71:e1:47:4d:f5:eb:f2:28:ab:97:8a:5d:16:2c:
d7:e7:23:b7:82:a6:aa:d7:ff:07:c4:87:99:35:15:
c0:7c:b8:94:77:eb:d9:c9:a5:05:6d:be:9a:a4:72:
5e:25:ec:8a:a9:b7:64:64:a9:2b:98:2e:58:49:77:
9a:f3:21:62:48:b8:e1:37:60:45:1b:aa:36:25:ff:
4e:4c:7b:98:08:a7:63:d3:f2:bf:00:90:12:7d:d7:
d8:98:dd:32:1a:c8:eb:8d:7d:74:b8:12:7b:f1:56:
eb:cb:68:de:ee:dc:09:3a:95:da:7e:63:27:56:f4:
9c:45:31:4f:7d:48:cc:2f:95:e5:ae:1a:31:04:18:
3a:fa:21:52:d7:94:bd:bf:97:70:bb:52:be:5d:89:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:25:61:20:51:0B:2E:09:BF:76:2E:52:64:C5:96:48:18:EC:D2
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hjslYSBRCy4Jv3YuUmTFlkgY7NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.160.0/21
80.72.16.0/21
85.198.120.0/21
89.169.52.0/22
92.118.72.0/22
92.246.132.0-92.246.143.255
93.185.144.0/20
95.174.96.0/19
178.212.139.0/24
185.9.184.0/22
185.136.32.0/22
185.230.240.0/22
213.108.20.0/22
217.144.176.0/20
IPv6:
2a00:8740::/32
2a0b:1c40::/29
2a12:3280::/32
Signature Algorithm: sha256WithRSAEncryption
7d:b2:71:6e:13:92:5b:87:24:dc:f6:fa:46:7e:e8:b9:fa:45:
35:c7:7c:72:7c:a0:f1:f1:af:52:e7:01:b8:c3:95:9d:af:0e:
b8:a8:bb:f2:dc:ee:4b:48:00:5f:e0:d3:12:84:13:b9:d3:06:
44:0a:4d:1f:30:87:54:e9:a2:5f:61:58:76:46:10:19:b0:66:
ad:c6:ab:f7:c3:a7:c4:0f:65:58:1c:29:a7:92:00:b8:e7:6d:
bd:10:89:a3:20:bb:eb:6e:60:80:da:99:cd:8b:64:f4:8d:f8:
c4:c0:8d:10:ca:88:0b:31:d6:84:29:7c:b1:4c:3a:77:df:a7:
cc:71:01:e2:8d:d4:64:1a:59:9c:af:5c:c8:26:d9:df:0e:27:
ff:28:e3:25:e7:65:9e:16:17:20:8b:88:1d:79:1a:fb:fe:69:
b0:43:07:20:73:6b:a0:76:1b:96:a5:a9:5e:e8:79:50:7e:49:
3a:61:9b:83:2f:d2:a7:8d:3c:7f:53:3f:af:29:28:dd:9b:33:
1f:8e:6f:97:51:ad:09:26:5a:35:dc:32:b9:c8:aa:4f:4a:0a:
de:95:ab:80:62:08:87:ae:9e:3c:79:bb:3c:65:f3:22:be:6f:
37:12:78:94:bc:c4:7c:ae:22:7a:7b:28:8e:fc:ff:70:1d:13:
26:49:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:50:06 2026 by rpki-client