Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/0R8JegqJS72TSxgps8LkSaZO93M.roa
File: 0R8JegqJS72TSxgps8LkSaZO93M.roa (raw, json)
Hash identifier: bzPHmYAxh9zxsAi7FMhRtpwbiOeWUj0UvZqNZEFvXuM=
Subject key identifier: D1:1F:09:7A:0A:89:4B:BD:93:4B:18:29:B3:C2:E4:49:A6:4E:F7:73
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685C0AC3C89D11B9FF68E499652E2D
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/0R8JegqJS72TSxgps8LkSaZO93M.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39593
IP address blocks: 46.191.180.0/22 maxlen: 22
46.191.180.0/23 maxlen: 23
46.191.180.0/24 maxlen: 24
46.191.181.0/24 maxlen: 24
46.191.182.0/23 maxlen: 23
46.191.182.0/24 maxlen: 24
46.191.183.0/24 maxlen: 24
95.105.16.0/22 maxlen: 22
95.105.16.0/23 maxlen: 23
95.105.16.0/24 maxlen: 24
95.105.17.0/24 maxlen: 24
95.105.18.0/23 maxlen: 23
95.105.18.0/24 maxlen: 24
95.105.19.0/24 maxlen: 24
95.105.20.0/22 maxlen: 22
95.105.20.0/23 maxlen: 23
95.105.20.0/24 maxlen: 24
95.105.21.0/24 maxlen: 24
95.105.22.0/23 maxlen: 23
95.105.22.0/24 maxlen: 24
95.105.23.0/24 maxlen: 24
95.105.84.0/22 maxlen: 22
95.105.84.0/23 maxlen: 23
95.105.84.0/24 maxlen: 24
95.105.85.0/24 maxlen: 24
95.105.86.0/23 maxlen: 23
95.105.86.0/24 maxlen: 24
95.105.87.0/24 maxlen: 24
136.169.208.0/22 maxlen: 22
136.169.208.0/23 maxlen: 23
136.169.208.0/24 maxlen: 24
136.169.209.0/24 maxlen: 24
136.169.210.0/23 maxlen: 23
136.169.210.0/24 maxlen: 24
136.169.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5c:0a:c3:c8:9d:11:b9:ff:68:e4:99:65:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d11f097a0a894bbd934b1829b3c2e449a64ef773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:da:d4:aa:39:e5:f1:c9:8d:c1:46:7c:8a:
dd:ee:ab:9b:1a:70:2e:e3:11:eb:9e:c8:f4:b5:aa:
3b:b5:ba:02:f4:76:ba:00:92:06:ce:be:78:30:c7:
12:1c:b4:22:a0:c8:63:95:2f:3f:74:03:a8:27:db:
07:03:c6:cd:59:07:1b:51:2e:75:b8:44:6e:3a:5d:
59:ef:6c:c6:76:cf:5c:88:97:8c:f8:ba:d3:ae:09:
59:d6:89:a7:ae:06:17:ea:3f:fe:ed:e6:c7:49:37:
2d:36:3f:60:84:5f:05:23:cf:25:82:ee:b5:f5:65:
5e:bd:6e:c6:87:0d:3f:86:6f:7f:22:ea:ed:34:ec:
ba:c8:ea:f4:96:1c:6f:15:df:04:19:8b:ff:ce:2b:
42:4b:c4:48:e1:d7:2e:26:ae:39:51:c6:58:45:97:
08:d6:ef:bb:4e:7e:ca:04:9b:15:e1:d0:35:9e:8d:
ac:83:06:7f:93:78:1e:d7:3d:54:bf:7e:d8:11:ec:
58:6c:94:57:9d:64:e5:ca:b3:60:0a:f3:62:2a:3c:
ab:d5:33:fc:2e:f7:18:56:ed:03:69:81:49:dd:ff:
d9:9b:1c:64:bc:ed:c4:73:ad:a5:32:1a:45:22:76:
60:19:a4:cf:36:04:1f:fd:2a:85:f7:dd:23:f3:5a:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1F:09:7A:0A:89:4B:BD:93:4B:18:29:B3:C2:E4:49:A6:4E:F7:73
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/0R8JegqJS72TSxgps8LkSaZO93M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.180.0/22
95.105.16.0/21
95.105.84.0/22
136.169.208.0/22
Signature Algorithm: sha256WithRSAEncryption
39:7e:f0:26:57:7f:20:66:c9:22:1f:e2:fe:fb:4e:fb:5b:68:
9e:7d:87:8e:39:49:a2:0b:21:cb:51:1f:09:b1:67:9a:b2:b8:
b2:ed:e3:cd:5f:70:4c:e9:a5:6f:62:f4:3c:aa:fb:3a:53:cc:
c4:1b:58:93:48:44:71:57:5f:c6:fd:b2:aa:cc:26:31:9b:4b:
68:1f:80:24:f4:f5:92:b7:ad:bd:b3:0b:37:87:bb:8f:e3:c9:
35:d8:d5:65:05:01:69:94:d4:01:4b:9e:ee:f6:78:6d:00:98:
21:c8:49:f4:31:95:5b:ad:40:64:67:ec:f1:5a:c0:ad:83:a6:
ac:d2:4b:be:0b:39:3c:19:69:60:8f:5b:44:49:52:b3:b2:b1:
5c:74:e7:fe:6b:05:aa:64:57:5f:b6:82:57:dd:d8:0d:5b:f1:
be:d2:18:a9:df:a3:64:58:f2:20:70:52:36:f8:d0:95:e8:01:
dd:ef:ed:0f:01:29:3d:fa:c7:3f:34:cd:16:10:e7:a4:05:9f:
de:6f:a4:ee:e7:93:9e:db:be:09:67:15:00:7b:f3:5c:de:81:
78:cd:91:f9:58:cb:e1:93:b7:2a:f4:91:bf:ec:87:47:37:fe:
96:6c:af:33:3a:1a:b4:5d:56:11:4b:63:b6:d0:cf:14:14:0f:
dc:53:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:13 2026 by rpki-client