Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/qEghLoN1iiF0goU1gVxwFrySfFg.roa
File: qEghLoN1iiF0goU1gVxwFrySfFg.roa (raw, json)
Hash identifier: 3jYy81C5LnlKfMQ1I0vpC9e8jd+RkWb8kU2Np75bx8o=
Subject key identifier: A8:48:21:2E:83:75:8A:21:74:82:85:35:81:5C:70:16:BC:92:7C:58
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019CBE4AEB6E1359229008D85AF2E8AFB910
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/qEghLoN1iiF0goU1gVxwFrySfFg.roa
Signing time: Thu 05 Mar 2026 13:58:26 +0000
ROA not before: Thu 05 Mar 2026 13:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25311
IP address blocks: 46.102.0.0/20 maxlen: 20
86.105.206.0/23 maxlen: 23
89.34.180.0/22 maxlen: 22
89.47.208.0/20 maxlen: 20
94.176.200.0/21 maxlen: 21
188.209.96.0/20 maxlen: 20
195.182.220.0/23 maxlen: 23
2a01:4700:8000::/33 maxlen: 33
2a03:9c20:2002::/48 maxlen: 48
2a03:9c20:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:4a:eb:6e:13:59:22:90:08:d8:5a:f2:e8:af:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Mar 5 13:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a848212e83758a2174828535815c7016bc927c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:56:13:b1:b9:e6:ad:83:79:64:40:7e:c7:
81:75:7c:8e:40:45:ac:cd:50:c2:1c:88:13:25:03:
ee:39:29:d5:61:81:23:4b:6f:b4:bf:18:8f:ac:de:
d4:98:c4:c6:93:af:ef:66:b5:4a:e8:fc:63:5d:1a:
c1:3b:75:09:51:0e:ab:ee:fe:f1:db:0a:60:0c:2f:
2a:e6:d3:c0:50:6f:b3:34:7f:c2:be:f3:5c:bb:bb:
0d:01:6b:99:65:63:eb:78:10:6f:fc:37:d5:ac:5d:
70:07:8b:5e:34:07:6c:eb:fe:7f:e2:9f:ee:39:66:
7d:ae:18:71:9e:93:af:72:8b:4a:4c:7c:e4:db:32:
00:f7:c3:6f:ca:41:82:34:d1:04:22:98:ff:f3:0e:
76:35:28:89:24:59:ed:4f:90:3c:41:3b:9a:c0:58:
23:41:27:ca:af:f4:2f:58:6b:1c:78:0a:fa:ec:b3:
76:2d:d8:5d:23:47:5c:11:06:dc:e6:cf:99:23:46:
01:73:cb:46:f8:f6:30:7d:8b:94:36:ea:05:a5:bb:
0b:8c:ec:2d:4a:68:38:ff:dc:20:b8:bb:b4:61:52:
13:fc:6a:7e:cb:be:7b:5d:29:88:e5:6d:e9:d7:3c:
e7:3d:41:60:39:41:02:6e:20:73:f5:7c:4a:d9:df:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:21:2E:83:75:8A:21:74:82:85:35:81:5C:70:16:BC:92:7C:58
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/qEghLoN1iiF0goU1gVxwFrySfFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.0.0/20
86.105.206.0/23
89.34.180.0/22
89.47.208.0/20
94.176.200.0/21
188.209.96.0/20
195.182.220.0/23
IPv6:
2a01:4700:8000::/33
2a03:9c20:2002::/48
2a03:9c20:3000::/36
Signature Algorithm: sha256WithRSAEncryption
2d:38:38:aa:d6:63:36:95:4e:59:02:8c:87:5b:e2:f7:3c:01:
29:f3:8e:26:d9:97:48:35:48:55:80:b4:92:9c:7d:b1:8d:24:
45:1a:f9:cd:4c:32:8b:d7:57:fb:87:9d:bd:da:60:2a:d7:98:
88:ba:13:93:bb:00:16:0b:e6:5b:f9:69:fa:90:0c:f1:71:ae:
34:7d:cf:71:58:f9:eb:fb:72:80:31:09:15:f0:60:eb:f7:ef:
29:8c:3b:23:11:6f:5b:7a:2b:df:6f:5b:4f:91:2e:f5:e1:26:
90:ad:25:42:61:3c:1b:4a:cc:83:38:5f:82:e4:8f:19:fe:16:
63:f9:5b:50:ee:5b:71:5f:3e:ac:84:2d:ce:da:f6:a9:1d:88:
02:54:47:ef:92:06:6e:27:b9:d6:d4:71:87:f2:9f:15:ac:ad:
40:39:96:3a:f3:c4:b9:38:f6:04:a9:af:0b:e0:7a:74:22:a2:
e9:1d:9f:ba:90:15:3b:d6:49:84:3d:2c:1f:8e:ec:4e:fe:fb:
77:a3:4f:33:6a:6d:79:48:1f:70:18:e6:52:43:a3:ff:ea:8c:
63:95:7f:29:2f:34:8d:64:3b:c6:b5:79:23:7d:91:9c:e1:e2:
9d:74:f0:05:2b:94:b5:95:80:49:fa:d5:62:53:65:91:14:c5:
ba:91:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:06 2026 by rpki-client