Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/B4CslqeFh_G7kj31dFxVS_tQHdk.roa
File: B4CslqeFh_G7kj31dFxVS_tQHdk.roa (raw, json)
Hash identifier: MrHNRAPoEgRUnj3uJCShn3/l5/jArte2wDeGYtIzlP0=
Subject key identifier: 07:80:AC:96:A7:85:87:F1:BB:92:3D:F5:74:5C:55:4B:FB:50:1D:D9
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 019F2368FC0AAE9D8F6A15D161F3266B4EFF
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/B4CslqeFh_G7kj31dFxVS_tQHdk.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31122
IP address blocks: 46.183.104.0/23 maxlen: 23
78.137.128.0/18 maxlen: 18
78.143.128.0/18 maxlen: 18
80.93.16.0/20 maxlen: 20
83.147.128.0/18 maxlen: 18
84.203.0.0/16 maxlen: 16
89.16.64.0/19 maxlen: 19
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
89.184.56.0/23 maxlen: 23
89.234.64.0/18 maxlen: 18
91.142.96.0/20 maxlen: 20
92.51.192.0/20 maxlen: 20
92.51.216.0/21 maxlen: 21
92.51.240.0/21 maxlen: 21
93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
109.106.96.0/20 maxlen: 20
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
176.52.216.0/22 maxlen: 22
176.52.220.0/23 maxlen: 23
185.47.144.0/22 maxlen: 22
185.53.32.0/24 maxlen: 24
185.53.35.0/24 maxlen: 24
185.182.72.0/22 maxlen: 22
185.205.228.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.242.236.0/23 maxlen: 23
212.126.32.0/19 maxlen: 19
212.126.60.0/22 maxlen: 22
217.78.0.0/20 maxlen: 20
2a00:15b8::/32 maxlen: 32
2a00:15b8:400::/40 maxlen: 40
2a01:258::/32 maxlen: 32
2a01:8aa0::/32 maxlen: 32
2a02:220::/32 maxlen: 32
2a0a:e780::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:0a:ae:9d:8f:6a:15:d1:61:f3:26:6b:4e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0780ac96a78587f1bb923df5745c554bfb501dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:8c:92:96:b8:54:96:f2:3f:83:03:95:98:
67:69:37:7e:ad:40:f7:08:c6:a4:d0:ca:85:6b:ab:
b3:26:c9:d7:02:94:74:0f:a9:e8:65:f0:78:88:51:
b9:ef:70:ac:5d:11:c3:0b:67:a0:6a:e5:e8:46:b2:
3b:88:18:99:85:00:1e:18:7a:9e:2a:eb:78:3c:74:
ba:59:ba:4b:01:a3:5e:61:f2:a9:97:75:11:45:b5:
94:bc:69:d4:be:0a:20:02:3d:08:4d:cc:ab:6c:62:
6b:48:53:74:0a:45:b4:1e:20:80:79:3d:68:c2:1d:
1f:fb:a1:5f:a0:dc:04:0a:40:98:b1:a8:be:80:34:
bf:0b:16:e2:a8:fb:e0:66:de:dc:9c:4c:b4:8a:ee:
1e:84:13:77:e1:d2:40:71:a4:29:f4:82:c9:5f:61:
a8:03:40:fe:3d:4b:69:7c:b9:c8:cc:7b:e4:88:f8:
d5:cc:20:07:a4:54:1c:f6:24:8a:a7:e5:42:cc:4f:
5e:9b:ad:9b:39:ee:b2:35:20:b8:dd:22:c5:ba:8a:
44:f0:43:63:f9:29:d1:73:bd:3f:2f:20:ed:fa:cd:
2c:35:7b:8f:b4:54:cb:84:7c:9a:d7:aa:7c:f7:eb:
2d:c7:2a:90:9f:f9:7f:eb:22:9f:9d:c4:8e:07:5e:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:AC:96:A7:85:87:F1:BB:92:3D:F5:74:5C:55:4B:FB:50:1D:D9
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/B4CslqeFh_G7kj31dFxVS_tQHdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
80.93.16.0/20
83.147.128.0/18
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/20
92.51.216.0/21
92.51.240.0/21
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.126.32.0/19
217.78.0.0/20
IPv6:
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
Signature Algorithm: sha256WithRSAEncryption
3a:d9:6f:62:17:3a:17:f4:4f:89:ac:98:3e:3e:61:81:8b:0d:
17:d7:14:50:8c:ce:71:db:df:49:ac:e2:e9:53:6c:0d:ce:d8:
63:2d:e7:fa:59:f8:c8:3d:f1:d2:0c:df:89:70:0b:ff:04:c2:
0e:51:78:a7:8d:6b:0f:95:ba:98:5c:87:72:1f:68:aa:dc:7f:
dd:94:ae:b6:9b:f1:ac:69:14:19:f2:d1:7e:d2:b9:c5:9b:e9:
ba:87:4a:60:cd:fb:41:78:6e:42:c6:ca:dc:ac:8c:fd:f1:6a:
d0:fa:3d:c2:67:56:53:e5:09:0b:bc:59:5a:07:3f:04:3f:50:
e4:6e:c3:f9:a3:7a:74:1a:16:fc:00:85:79:bc:d8:f5:31:bd:
38:42:78:e7:12:13:90:e9:ac:29:56:14:ac:c2:8e:56:96:b7:
80:ce:9b:04:e2:d1:b3:18:b4:24:21:5d:3d:45:3f:35:fe:f7:
ab:1e:29:f2:5d:89:1a:56:44:14:01:cd:00:95:cf:10:f3:64:
a9:49:97:62:5d:74:d2:bc:0c:22:20:97:90:6d:bf:6b:b8:12:
34:a9:d6:b0:3b:a7:c8:c2:4a:61:5a:ba:05:40:b0:d2:60:59:
b6:3e:9a:6f:b9:52:7c:61:77:0d:67:a7:f1:6b:58:97:fa:df:
d2:2b:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:25 2026 by rpki-client