Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/48kvc70oHaX3Hs47ywn4DHfY4MU.roa
File: 48kvc70oHaX3Hs47ywn4DHfY4MU.roa (raw, json)
Hash identifier: 7AQY5Q/jAbFiyzD1DDF5JD06g5dI3N+wl6QpUZHsUkI=
Subject key identifier: E3:C9:2F:73:BD:28:1D:A5:F7:1E:CE:3B:CB:09:F8:0C:77:D8:E0:C5
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 01A0D323E1BFCBA5038E5495CA29F7F84777
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/48kvc70oHaX3Hs47ywn4DHfY4MU.roa
Signing time: Thu 24 Sep 2026 11:18:59 +0000
ROA not before: Thu 24 Sep 2026 11:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 94.16.30.0/23 maxlen: 23
94.16.30.128/25 maxlen: 25
94.16.31.0/24 maxlen: 24
94.16.104.0/22 maxlen: 24
94.16.108.0/22 maxlen: 24
94.16.112.0/21 maxlen: 24
94.16.120.0/22 maxlen: 24
185.216.176.0/22 maxlen: 22
185.232.68.0/22 maxlen: 22
188.172.228.0/23 maxlen: 24
193.26.156.0/22 maxlen: 22
194.36.144.0/22 maxlen: 22
2a00:11c0:5d::/48 maxlen: 48
2a00:11c0:5f::/48 maxlen: 48
2a00:11c0:60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:23:e1:bf:cb:a5:03:8e:54:95:ca:29:f7:f8:47:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Sep 24 11:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3c92f73bd281da5f71ece3bcb09f80c77d8e0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:7d:d5:96:17:c4:7c:ff:9f:6d:bc:4e:70:
0d:e6:1f:ec:b9:66:01:03:39:d6:0b:01:64:79:b5:
0d:a3:c2:8d:61:8e:87:36:fb:ff:39:4a:2b:bc:e1:
cd:4e:4a:02:47:a9:52:8b:75:b8:bb:48:a7:f0:40:
ef:43:06:c4:9c:8d:9b:da:f0:7a:df:ee:1e:31:a1:
4b:b9:52:10:cf:9a:63:8c:32:c3:e2:d2:0c:7e:3f:
06:45:01:45:f1:61:e4:b8:53:38:a0:a6:16:7e:a6:
e2:9a:ff:98:f9:3d:4d:13:88:17:c4:f7:34:2e:9a:
d6:be:25:8c:5e:b4:44:9b:a5:cc:9c:54:0e:6d:97:
22:9b:59:c5:58:de:7f:dd:3a:33:38:79:22:16:f5:
d2:b9:ab:ed:a8:fd:ed:a0:48:29:1c:d4:11:a0:5c:
bb:b2:fe:8f:5c:02:00:c3:ee:b1:e1:fd:75:6d:80:
ae:85:5f:78:5d:05:c5:39:91:44:05:40:26:b8:ff:
27:cf:6f:69:fd:53:21:1a:6a:89:21:b8:a8:eb:ac:
2f:e5:2c:a0:67:7c:0e:3a:7b:63:a9:f9:00:18:11:
ab:f2:c2:2a:60:2e:a1:dc:96:54:15:57:e9:25:b4:
ad:cd:cc:cb:94:7d:02:8a:3e:40:76:79:9f:3c:12:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:2F:73:BD:28:1D:A5:F7:1E:CE:3B:CB:09:F8:0C:77:D8:E0:C5
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/48kvc70oHaX3Hs47ywn4DHfY4MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.16.30.0/23
94.16.104.0-94.16.123.255
185.216.176.0/22
185.232.68.0/22
188.172.228.0/23
193.26.156.0/22
194.36.144.0/22
IPv6:
2a00:11c0:5d::/48
2a00:11c0:5f::-2a00:11c0:60:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:b1:5e:fd:63:bd:07:48:16:42:d7:28:53:87:15:a7:40:f9:
93:0e:a5:d0:e9:7a:3b:f9:70:f7:22:a1:40:bf:b7:6a:81:9c:
2f:a1:20:67:55:54:d3:b0:95:b5:07:43:04:bf:2d:52:d9:21:
f4:5b:36:3b:7d:4e:25:5b:c0:8b:d8:21:51:b6:1c:bd:39:ac:
d5:e1:44:5a:ea:ab:0e:b0:91:fe:ac:6d:d0:10:d9:0c:27:f1:
b3:df:63:05:d9:d0:54:8b:85:6f:b4:44:73:34:13:00:b7:00:
ec:6a:2e:ef:55:9a:62:a2:cf:94:7f:d9:06:88:f6:52:4c:70:
57:27:f8:e9:ce:5f:e3:06:b8:16:ce:88:dc:b3:4d:72:03:18:
22:a1:b5:d3:cc:44:63:d1:3a:ec:34:0e:fb:d3:c8:cc:31:8f:
f2:41:79:33:8b:c5:8b:7e:60:97:4d:ed:c2:79:cb:03:cd:83:
04:14:d0:20:fb:5b:d3:82:2f:ae:cc:c7:5c:5c:fa:e0:c5:53:
0e:56:80:dd:3f:84:9e:29:92:77:ef:0c:79:0e:04:f3:d8:c5:
ae:cf:bc:b7:a4:a8:1f:35:5e:88:c1:73:68:ce:eb:c8:ec:0a:
31:85:7f:12:a1:95:24:9b:a7:d8:3f:b5:20:27:04:52:ef:f1:
1e:9f:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:50:35 2026 by rpki-client