Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/1-rCOCCP6oYHahsl-IY5BNjfe_vg.roa
File: 1-rCOCCP6oYHahsl-IY5BNjfe_vg.roa (raw, json)
Hash identifier: P7GfDsSTEb0lAdWkt0ng9MRklfQcjLO/lzvEnqcg5NY=
Subject key identifier: FA:B0:8E:08:23:FA:A1:81:DA:86:C9:7E:21:8E:41:36:37:DE:FE:F8
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019F31AB65E9AF59A1726607C8FF934ADC93
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/1-rCOCCP6oYHahsl-IY5BNjfe_vg.roa
Signing time: Sun 05 Jul 2026 09:45:44 +0000
ROA not before: Sun 05 Jul 2026 09:45:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48065
IP address blocks: 46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/22 maxlen: 22
46.57.148.0/22 maxlen: 22
46.57.152.0/21 maxlen: 21
46.57.160.0/21 maxlen: 21
46.57.168.0/22 maxlen: 22
46.57.172.0/22 maxlen: 22
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/22 maxlen: 22
46.213.4.0/22 maxlen: 22
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/22 maxlen: 22
46.213.108.0/22 maxlen: 22
46.213.112.0/22 maxlen: 22
46.213.116.0/22 maxlen: 22
46.213.120.0/22 maxlen: 22
46.213.124.0/22 maxlen: 22
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/22 maxlen: 22
46.213.172.0/22 maxlen: 22
46.213.176.0/21 maxlen: 21
46.213.184.0/22 maxlen: 22
46.213.188.0/22 maxlen: 22
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/22 maxlen: 22
46.213.228.0/22 maxlen: 22
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/21 maxlen: 21
94.252.232.0/21 maxlen: 21
94.252.240.0/21 maxlen: 21
94.252.248.0/21 maxlen: 21
178.52.0.0/22 maxlen: 22
178.52.4.0/22 maxlen: 22
178.52.8.0/22 maxlen: 22
178.52.12.0/22 maxlen: 22
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/21 maxlen: 21
178.52.104.0/22 maxlen: 22
178.52.108.0/22 maxlen: 22
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/22 maxlen: 22
178.52.180.0/22 maxlen: 22
178.52.184.0/21 maxlen: 21
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/21 maxlen: 21
178.52.248.0/22 maxlen: 22
178.52.252.0/22 maxlen: 22
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:ab:65:e9:af:59:a1:72:66:07:c8:ff:93:4a:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 5 09:45:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fab08e0823faa181da86c97e218e413637defef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:e5:55:98:f0:c7:20:44:98:86:26:92:43:
44:8a:aa:05:1e:c7:5a:b7:e1:16:87:37:d9:f7:eb:
56:c2:7a:4b:2d:9c:38:9f:3b:fe:ed:2f:2e:1a:02:
f6:f1:ac:a7:12:5e:46:01:c2:5e:df:ee:fc:26:96:
30:e7:e3:48:00:04:25:1e:47:c1:46:82:74:53:17:
b0:24:c2:dd:4f:96:dc:81:c7:4c:94:0a:b1:7d:6a:
fe:13:bd:14:66:c4:af:66:4b:af:d9:84:69:95:3c:
d5:d6:61:33:ad:f5:5f:88:a8:02:4b:31:bd:a5:74:
ca:aa:9d:91:55:dc:10:8a:6f:a1:cb:40:fe:c0:59:
d6:ec:dd:4e:33:c2:bb:29:3a:da:47:f2:30:34:91:
1f:26:58:a2:70:7f:d8:04:50:2e:63:53:5b:8e:49:
ea:92:bb:4c:ca:32:4c:80:4a:7d:0d:0e:a9:5c:e0:
bb:30:a0:17:fe:12:2d:2d:d4:9f:cb:16:5c:79:23:
7d:39:c1:0e:55:0f:78:2f:e6:e0:62:11:34:b8:3b:
ea:bc:71:3d:c7:8d:66:90:19:48:fa:ce:49:bc:5c:
60:c2:ea:62:23:71:e8:8d:f4:b4:cb:3a:cd:ba:a5:
49:e1:1f:f0:ae:ea:7b:b8:2e:86:37:84:40:aa:f6:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:8E:08:23:FA:A1:81:DA:86:C9:7E:21:8E:41:36:37:DE:FE:F8
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/1-rCOCCP6oYHahsl-IY5BNjfe_vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.192.0/18
178.52.0.0/16
188.139.128.0/17
Signature Algorithm: sha256WithRSAEncryption
00:0c:54:24:33:fb:41:44:08:63:18:15:90:1c:c8:e4:98:cd:
8b:06:20:a6:54:8a:09:54:fe:71:a3:84:af:25:8a:c8:db:c3:
3a:1f:db:0e:1e:e7:7c:38:12:dc:09:54:a8:f0:d4:d1:bb:ce:
c1:47:42:1b:5d:e2:03:7c:e3:39:db:91:75:50:20:14:12:53:
57:dc:bb:d0:18:ee:85:c4:c5:6a:8c:c5:f9:44:37:65:1c:2e:
1d:f0:48:8c:67:3e:57:e2:cb:e3:3f:e7:ac:00:af:13:c6:06:
8e:cb:0a:7a:ec:e3:93:f1:c6:66:4f:1f:54:2c:84:54:f8:0c:
33:b3:d7:e3:70:aa:a7:d3:20:21:d4:1d:60:fc:30:3d:9d:06:
e7:ef:1b:70:78:a5:f8:4a:23:a1:78:74:7c:fd:61:02:4f:53:
2a:b8:b0:15:c3:9a:ae:24:aa:a9:72:b1:89:e0:21:42:95:89:
5f:04:f4:ec:9e:c9:f0:fb:a5:d2:53:ad:81:8d:53:a7:dc:30:
4f:b0:71:f5:66:1f:c2:d0:b9:b9:14:80:17:65:00:c5:a4:8b:
0a:a9:22:90:42:b3:9b:33:c2:77:d8:67:04:bd:67:9a:84:08:
0f:a7:fa:a0:e5:63:22:49:bc:43:9e:67:d4:8f:be:ca:2c:ba:
2d:23:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:55 2026 by rpki-client