Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/m3oGe2mB77u_VmE8i2e8D0pyrD0.roa
File: m3oGe2mB77u_VmE8i2e8D0pyrD0.roa (raw, json)
Hash identifier: yVDR/TefuTNGYvv3QyTcnu7hpGu7n04cZ9xSirGmFhs=
Subject key identifier: 9B:7A:06:7B:69:81:EF:BB:BF:56:61:3C:8B:67:BC:0F:4A:72:AC:3D
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 01A1D5980A43737E291CF680CF168D2CA687
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/m3oGe2mB77u_VmE8i2e8D0pyrD0.roa
Signing time: Fri 13 Nov 2026 15:47:53 +0000
ROA not before: Fri 13 Nov 2026 15:47:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/21 maxlen: 21
46.255.144.0/22 maxlen: 22
46.255.144.0/24 maxlen: 24
46.255.145.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
93.159.196.0/22 maxlen: 22
93.159.196.0/23 maxlen: 23
93.159.198.0/23 maxlen: 23
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.136.0/24 maxlen: 24
95.107.141.0/24 maxlen: 24
95.107.144.0/23 maxlen: 23
95.107.144.0/24 maxlen: 24
95.107.145.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.148.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
95.107.151.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.160.0/21 maxlen: 21
95.107.160.0/22 maxlen: 22
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.162.0/24 maxlen: 24
95.107.164.0/22 maxlen: 22
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.167.0/24 maxlen: 24
95.107.168.0/22 maxlen: 22
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.172.0/23 maxlen: 23
95.107.174.0/24 maxlen: 24
95.107.176.0/21 maxlen: 21
95.107.176.0/22 maxlen: 22
95.107.177.0/24 maxlen: 24
95.107.180.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.184.0/22 maxlen: 22
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.193.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
95.107.194.0/24 maxlen: 24
95.107.195.0/24 maxlen: 24
95.107.196.0/22 maxlen: 22
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.200.0/21 maxlen: 21
95.107.200.0/22 maxlen: 22
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.202.0/23 maxlen: 23
95.107.204.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.228.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.232.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/20 maxlen: 20
95.107.240.0/22 maxlen: 22
95.107.244.0/22 maxlen: 22
95.107.248.0/22 maxlen: 22
95.107.248.0/23 maxlen: 23
95.107.248.0/24 maxlen: 24
95.107.252.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
109.69.162.0/23 maxlen: 23
109.69.164.0/22 maxlen: 22
109.69.164.0/24 maxlen: 24
109.69.165.0/24 maxlen: 24
109.69.166.0/24 maxlen: 24
109.69.167.0/24 maxlen: 24
141.8.200.0/21 maxlen: 21
141.8.200.0/22 maxlen: 22
141.8.204.0/22 maxlen: 22
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
185.118.150.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
185.122.228.0/23 maxlen: 23
185.122.228.0/24 maxlen: 24
2a03:8480::/32 maxlen: 32
2a03:8480::/33 maxlen: 33
2a03:8480:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:98:0a:43:73:7e:29:1c:f6:80:cf:16:8d:2c:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Nov 13 15:47:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b7a067b6981efbbbf56613c8b67bc0f4a72ac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:a7:15:d3:5b:6b:cf:99:43:b6:cb:68:ed:
f6:4a:2a:93:d5:76:f9:f9:a6:9f:3d:8b:f6:52:0f:
9e:ff:e5:cf:88:31:64:7b:bb:38:60:a2:a1:f1:89:
9c:d2:e2:58:be:f0:fb:7a:54:20:eb:34:d1:c5:ce:
16:1b:98:d2:25:91:59:e6:3a:80:d6:ee:af:c2:a7:
7f:ae:bd:86:eb:77:9b:a7:d7:12:08:54:4d:6a:81:
80:2b:4e:c3:cd:2f:f1:3b:87:7b:89:8a:e8:fb:da:
91:db:36:5f:75:23:7d:2f:10:2a:79:73:96:84:45:
32:08:99:0a:64:ee:cd:82:7b:15:bf:38:f3:e6:b4:
e6:bc:e5:3a:0b:ad:f5:c3:a8:a0:1a:9e:95:41:e2:
38:59:e6:e0:e1:37:43:9b:b8:00:54:b6:43:e8:7f:
82:70:88:74:71:77:28:5f:2f:9e:86:77:64:7d:e5:
91:7b:bb:4b:21:1c:f9:f6:4d:7b:f8:d6:0a:a7:16:
3a:37:9e:03:d3:6b:60:a4:34:d9:35:c3:63:56:d9:
6d:bc:70:4e:f6:1e:8c:db:d9:7b:19:d5:95:6b:f4:
f2:50:88:91:c1:70:5e:dc:9f:d7:55:1f:5e:bf:30:
ba:b7:3a:de:16:f9:31:0d:1f:3b:84:cc:9f:d4:db:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:06:7B:69:81:EF:BB:BF:56:61:3C:8B:67:BC:0F:4A:72:AC:3D
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/m3oGe2mB77u_VmE8i2e8D0pyrD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
93.159.196.0/22
95.107.128.0-95.107.148.255
95.107.150.0/23
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
109.69.162.0-109.69.167.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
46:70:c4:c1:ae:d5:c7:2d:4d:cc:23:99:33:18:ef:11:5b:c0:
76:34:29:67:9d:ab:a5:d9:44:c7:32:e8:80:e5:35:05:5c:f7:
41:6e:aa:d9:5d:d5:b0:01:54:e0:d9:19:d2:d1:22:35:d1:fc:
c6:64:98:f6:7e:a6:4d:c8:a3:cd:c9:17:24:be:78:84:c0:b9:
c2:ab:26:b6:98:c7:6b:3b:a9:58:cd:a9:2f:31:01:87:41:02:
cf:b4:c3:e7:aa:7e:72:e7:e4:51:90:5c:f1:1f:38:03:81:b3:
1e:3a:4a:f7:cd:75:43:62:7a:1f:98:45:5a:4b:af:ba:28:d1:
ef:0f:ec:23:b0:3b:b1:23:5c:44:b5:3c:20:29:b6:77:04:ef:
79:be:c7:18:5c:26:e2:8c:c3:86:03:c2:80:c4:e8:4f:b5:f8:
05:99:7e:0d:c3:ef:40:52:ce:28:86:12:a3:9a:55:3c:ab:b6:
ae:2f:28:2a:ba:8a:c1:77:d6:81:1e:ff:6a:40:c6:22:e9:78:
67:82:33:e7:84:e0:82:4a:e0:1f:10:7d:cc:63:4d:32:cf:bd:
46:d4:db:50:f6:91:f1:a7:a0:a3:0a:19:8d:fb:c9:9e:fb:58:
e8:9d:cd:ba:a6:52:ea:80:d5:e0:c0:64:3d:dd:4f:46:57:7a:
5a:14:16:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:59 2026 by rpki-client