Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/1-0XkuVbQiGbGnZeqZ39QpTsFzuM.roa
File: 1-0XkuVbQiGbGnZeqZ39QpTsFzuM.roa (raw, json)
Hash identifier: muDPIis/CAFFEeSCOeh59jxBWbg2vpbAbbwipl0qVhA=
Subject key identifier: FB:45:E4:B9:56:D0:88:66:C6:9D:97:AA:67:7F:50:A5:3B:05:CE:E3
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019DB47828ADC16D52560F074FC59318DFA4
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/1-0XkuVbQiGbGnZeqZ39QpTsFzuM.roa
Signing time: Wed 22 Apr 2026 09:14:26 +0000
ROA not before: Wed 22 Apr 2026 09:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48065
IP address blocks: 46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/21 maxlen: 21
46.57.144.0/22 maxlen: 22
46.57.148.0/22 maxlen: 22
46.57.152.0/21 maxlen: 21
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.168.0/22 maxlen: 22
46.57.172.0/22 maxlen: 22
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/21 maxlen: 21
46.213.0.0/22 maxlen: 22
46.213.4.0/22 maxlen: 22
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.104.0/22 maxlen: 22
46.213.108.0/22 maxlen: 22
46.213.112.0/21 maxlen: 21
46.213.112.0/22 maxlen: 22
46.213.116.0/22 maxlen: 22
46.213.120.0/21 maxlen: 21
46.213.120.0/22 maxlen: 22
46.213.124.0/22 maxlen: 22
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.168.0/22 maxlen: 22
46.213.172.0/22 maxlen: 22
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.184.0/22 maxlen: 22
46.213.188.0/22 maxlen: 22
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.224.0/22 maxlen: 22
46.213.228.0/22 maxlen: 22
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/21 maxlen: 21
94.252.232.0/21 maxlen: 21
94.252.240.0/21 maxlen: 21
94.252.248.0/21 maxlen: 21
178.52.0.0/21 maxlen: 21
178.52.0.0/22 maxlen: 22
178.52.4.0/22 maxlen: 22
178.52.8.0/21 maxlen: 21
178.52.8.0/22 maxlen: 22
178.52.12.0/22 maxlen: 22
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.104.0/22 maxlen: 22
178.52.108.0/22 maxlen: 22
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/21 maxlen: 21
178.52.176.0/22 maxlen: 22
178.52.180.0/22 maxlen: 22
178.52.184.0/21 maxlen: 21
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
178.52.248.0/22 maxlen: 22
178.52.252.0/22 maxlen: 22
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:78:28:ad:c1:6d:52:56:0f:07:4f:c5:93:18:df:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Apr 22 09:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb45e4b956d08866c69d97aa677f50a53b05cee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:9c:89:8f:a0:64:8f:92:a9:83:63:7d:7f:
f0:82:d1:80:ad:68:30:65:bd:d3:2a:5b:2a:b6:13:
05:d4:41:26:77:fc:8c:48:86:3b:5b:a8:9f:8b:db:
04:71:9c:66:12:f4:c1:ad:9e:9d:7b:1d:1c:75:e8:
be:4f:53:45:fc:50:66:1e:0f:5a:12:62:c2:c4:16:
16:77:39:2e:b9:e1:59:39:72:c6:9e:14:fa:8c:a8:
9a:3d:15:2e:6f:5d:07:b1:5c:65:7b:d2:44:97:91:
7a:7d:65:c5:89:89:a2:e2:03:ab:74:88:dc:e2:ce:
89:4e:c0:7c:31:3b:84:eb:3d:2c:cf:4f:ac:ec:59:
92:d7:9c:87:fd:6d:8c:86:fe:7e:f4:e1:90:11:0b:
e9:a3:e8:a5:5f:de:86:e0:1b:a0:31:4f:de:89:fe:
7f:e4:38:cc:b6:58:3d:aa:d1:12:fc:36:c7:14:be:
09:8f:d8:f6:a9:fc:92:5b:7f:34:7c:b3:9f:67:ab:
35:f5:85:89:69:03:6c:ec:4b:e7:d4:50:d8:50:15:
81:bf:2f:e5:d2:44:e1:47:72:95:56:1c:cd:52:74:
bc:75:aa:52:93:5a:56:e8:ef:56:3f:a2:c2:84:9a:
12:b1:12:ed:b9:44:2c:f8:8a:47:94:14:a8:10:ec:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:E4:B9:56:D0:88:66:C6:9D:97:AA:67:7F:50:A5:3B:05:CE:E3
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/1-0XkuVbQiGbGnZeqZ39QpTsFzuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.132.0-94.252.159.255
94.252.192.0/18
178.52.0.0/16
188.139.128.0/17
Signature Algorithm: sha256WithRSAEncryption
05:57:32:4e:1f:02:46:42:79:0d:bf:4d:97:3c:0b:be:f3:0f:
c1:ab:a8:f1:83:5f:e6:36:c5:4c:00:61:37:f3:8c:b6:c0:ed:
7a:80:43:35:2f:14:fc:d4:24:a0:e8:64:70:1c:56:45:02:b9:
0a:c6:a1:a0:a9:47:cd:62:83:b1:cc:20:f0:67:a6:16:ea:a3:
8c:8d:d3:df:99:5c:64:16:e7:b9:36:b2:ac:62:d4:06:8e:b7:
18:06:d7:81:b3:27:1e:96:34:ec:18:09:73:e7:f3:c0:d6:0c:
75:42:bb:8b:7b:e6:4a:59:3a:ff:4d:80:20:7b:07:36:4e:35:
b3:8e:50:b6:66:6f:dd:05:8d:05:8c:16:24:e9:93:e6:d1:8d:
08:91:d7:12:98:3e:21:d5:e8:bc:be:32:fb:0f:60:96:14:ad:
4e:05:4f:fe:40:49:4a:c0:06:cb:12:51:6d:1f:c1:7a:98:6f:
1b:87:97:be:7b:3b:78:ef:cb:71:b0:8f:5d:1f:32:7c:93:d4:
21:eb:30:9c:55:4b:5b:db:ff:7d:15:c4:8a:89:66:04:28:af:
bb:b4:61:1d:ef:f7:3a:b0:53:3c:a3:61:ec:03:df:c2:75:15:
f8:12:93:f1:7b:32:97:fa:05:0e:0c:ac:37:2d:82:01:2c:75:
f2:f1:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:52 2026 by rpki-client