Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/EcTxX-SiywrzoNwOuII1aWR6zHs.roa
File: EcTxX-SiywrzoNwOuII1aWR6zHs.roa (raw, json)
Hash identifier: beN8BaOivwm2yhNJxlNC7Uur/3tPi7/Y31IRkJGKn0c=
Subject key identifier: 11:C4:F1:5F:E4:A2:CB:0A:F3:A0:DC:0E:B8:82:35:69:64:7A:CC:7B
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019CD7EB589E7E264BD92B79D93B16DC7BA0
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/EcTxX-SiywrzoNwOuII1aWR6zHs.roa
Signing time: Tue 10 Mar 2026 13:24:10 +0000
ROA not before: Tue 10 Mar 2026 13:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16024
IP address blocks: 46.28.32.0/21 maxlen: 24
149.232.16.0/20 maxlen: 24
149.232.184.0/22 maxlen: 24
149.232.190.0/23 maxlen: 24
149.232.244.0/22 maxlen: 24
149.232.248.0/22 maxlen: 24
156.67.56.0/23 maxlen: 23
156.67.56.0/24 maxlen: 24
156.67.57.0/24 maxlen: 24
185.47.232.0/22 maxlen: 24
185.159.32.0/22 maxlen: 24
217.70.160.0/20 maxlen: 24
217.70.161.0/24 maxlen: 26
217.70.161.128/26 maxlen: 26
217.70.161.192/26 maxlen: 26
217.70.162.0/24 maxlen: 24
217.70.167.0/24 maxlen: 24
217.70.172.0/24 maxlen: 24
2a02:1670::/29 maxlen: 32
2a02:1670::/32 maxlen: 32
2a02:1671::/32 maxlen: 32
2a02:1672::/32 maxlen: 32
2a02:1673::/32 maxlen: 32
2a02:1674::/32 maxlen: 32
2a02:1675::/32 maxlen: 32
2a02:1676::/32 maxlen: 32
2a02:1677::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:eb:58:9e:7e:26:4b:d9:2b:79:d9:3b:16:dc:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Mar 10 13:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c4f15fe4a2cb0af3a0dc0eb8823569647acc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:ce:e4:84:83:8a:6a:c7:42:ae:d3:eb:bb:
18:43:1c:fd:d4:52:16:3c:59:74:89:aa:ac:c7:63:
81:5d:d3:2b:31:4f:53:27:e9:07:bb:10:92:06:36:
5e:a8:55:74:f7:64:76:d3:96:d8:e7:9b:6f:ac:86:
2b:ae:8d:cb:87:3e:93:e2:80:da:63:fa:70:65:95:
72:07:39:ee:c9:86:6e:ff:ea:20:e2:a2:17:05:3e:
24:59:f9:14:b4:3b:51:f7:55:cf:a7:30:ed:a3:da:
3a:3e:79:33:57:4a:73:eb:8d:ae:53:46:03:db:0b:
ac:8e:a5:e6:42:9e:31:76:8a:99:83:de:bc:4b:2d:
ea:76:7e:23:0f:c1:df:6e:85:98:c6:79:f8:20:c1:
ff:d6:2c:b7:da:07:3d:35:c8:5a:c4:5d:3e:66:ea:
90:c0:21:57:a4:05:8d:c4:1b:fd:dd:f4:4d:05:d0:
32:ba:53:6a:fe:b6:47:b8:37:39:5c:0f:1d:5f:0f:
b2:85:8c:71:74:9e:26:21:ea:05:71:28:d3:87:6e:
b5:d5:c5:f5:38:8b:1d:80:0c:2e:22:e5:b6:f3:c4:
1b:ce:72:21:4e:51:c5:b8:5f:45:3c:9f:b7:89:85:
f2:50:79:6b:a1:1e:e6:5c:fe:7a:da:8f:a2:b5:c1:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:F1:5F:E4:A2:CB:0A:F3:A0:DC:0E:B8:82:35:69:64:7A:CC:7B
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/EcTxX-SiywrzoNwOuII1aWR6zHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.32.0/21
149.232.16.0/20
149.232.184.0/22
149.232.190.0/23
149.232.244.0-149.232.251.255
156.67.56.0/23
185.47.232.0/22
185.159.32.0/22
217.70.160.0/20
IPv6:
2a02:1670::/29
Signature Algorithm: sha256WithRSAEncryption
4f:ea:e0:7d:d2:12:58:5d:3f:f6:e8:06:1e:00:8f:b0:21:c6:
2d:71:da:60:cb:6d:83:a7:e9:c3:da:19:51:14:46:9c:0c:28:
49:96:44:00:98:c2:6f:15:a9:4b:c5:1a:e8:06:fa:13:9d:9d:
79:3d:55:84:7a:bf:aa:b6:88:b6:43:19:b6:d7:d4:48:30:3f:
0b:c5:df:62:a4:d9:05:7a:8a:e4:57:03:81:08:32:53:38:c5:
27:3d:4c:9e:c3:9b:0d:1e:8d:04:a1:c5:d1:57:5c:94:97:19:
ef:48:8f:38:5d:45:ca:00:46:5d:68:d6:99:f1:b1:5c:84:62:
c6:d0:e1:67:c8:5d:42:6d:1e:2b:10:2b:c6:ca:4e:f0:31:32:
23:cb:2f:45:86:e7:93:68:8e:f0:dc:e8:43:88:fd:78:41:1c:
82:73:50:aa:8f:76:1c:56:f7:4d:4f:00:bb:f6:10:d9:bb:a9:
2d:ff:37:b9:d6:18:eb:73:3c:e4:28:2c:73:72:a2:64:d6:45:
52:d9:6e:2f:22:02:e3:0f:4b:ca:8d:cb:2c:cc:f0:da:20:88:
c6:fd:3c:d2:3b:af:2e:db:78:3a:2e:68:e4:50:9d:62:16:b4:
5a:39:bc:dc:03:ad:94:66:55:c4:70:ac:ad:5a:c1:44:a9:d1:
57:5d:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:28 2026 by rpki-client