Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa
File: ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa (raw, json)
Hash identifier: dErc7vBkv+mz2i4cCcDjrz1Nr+sQb9Sm3cGcguldqVk=
Subject key identifier: 00:28:AA:EC:F5:27:7F:13:F0:ED:55:22:24:73:1E:06:55:9E:D9:6F
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685CBA69CC44B07BA5095B0757171D
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41704
IP address blocks: 46.191.184.0/21 maxlen: 21
46.191.184.0/23 maxlen: 23
46.191.184.0/24 maxlen: 24
46.191.185.0/24 maxlen: 24
46.191.186.0/23 maxlen: 23
46.191.186.0/24 maxlen: 24
46.191.187.0/24 maxlen: 24
46.191.188.0/23 maxlen: 23
46.191.188.0/24 maxlen: 24
46.191.189.0/24 maxlen: 24
46.191.190.0/23 maxlen: 23
46.191.190.0/24 maxlen: 24
46.191.191.0/24 maxlen: 24
46.191.240.0/20 maxlen: 20
46.191.240.0/22 maxlen: 22
46.191.244.0/22 maxlen: 22
46.191.248.0/22 maxlen: 22
46.191.248.0/24 maxlen: 24
46.191.249.0/24 maxlen: 24
46.191.250.0/24 maxlen: 24
46.191.251.0/24 maxlen: 24
46.191.252.0/22 maxlen: 22
79.140.16.0/20 maxlen: 20
79.140.16.0/22 maxlen: 22
79.140.16.0/24 maxlen: 24
79.140.17.0/24 maxlen: 24
79.140.18.0/24 maxlen: 24
79.140.19.0/24 maxlen: 24
79.140.20.0/22 maxlen: 22
79.140.20.0/23 maxlen: 23
79.140.20.0/24 maxlen: 24
79.140.21.0/24 maxlen: 24
79.140.22.0/24 maxlen: 24
79.140.23.0/24 maxlen: 24
79.140.24.0/22 maxlen: 22
79.140.24.0/24 maxlen: 24
79.140.25.0/24 maxlen: 24
79.140.26.0/24 maxlen: 24
79.140.27.0/24 maxlen: 24
79.140.28.0/22 maxlen: 22
79.140.28.0/24 maxlen: 24
79.140.29.0/24 maxlen: 24
79.140.30.0/24 maxlen: 24
79.140.31.0/24 maxlen: 24
84.39.248.0/22 maxlen: 22
84.39.248.0/24 maxlen: 24
84.39.249.0/24 maxlen: 24
84.39.250.0/24 maxlen: 24
84.39.251.0/24 maxlen: 24
84.39.252.0/22 maxlen: 22
84.39.252.0/24 maxlen: 24
84.39.253.0/24 maxlen: 24
84.39.254.0/24 maxlen: 24
84.39.255.0/24 maxlen: 24
94.41.128.0/20 maxlen: 20
94.41.128.0/22 maxlen: 22
94.41.128.0/24 maxlen: 24
94.41.132.0/22 maxlen: 22
94.41.134.0/24 maxlen: 24
94.41.135.0/24 maxlen: 24
94.41.136.0/22 maxlen: 22
94.41.140.0/22 maxlen: 22
94.41.140.0/24 maxlen: 24
94.41.141.0/24 maxlen: 24
94.41.160.0/19 maxlen: 19
94.41.160.0/21 maxlen: 21
94.41.160.0/22 maxlen: 22
94.41.164.0/22 maxlen: 22
94.41.168.0/22 maxlen: 22
94.41.171.0/24 maxlen: 24
94.41.172.0/22 maxlen: 22
94.41.172.0/24 maxlen: 24
94.41.173.0/24 maxlen: 24
94.41.174.0/24 maxlen: 24
94.41.175.0/24 maxlen: 24
94.41.176.0/22 maxlen: 22
94.41.176.0/24 maxlen: 24
94.41.180.0/22 maxlen: 22
94.41.184.0/22 maxlen: 22
94.41.188.0/22 maxlen: 22
95.105.96.0/19 maxlen: 19
95.105.96.0/22 maxlen: 22
95.105.100.0/22 maxlen: 22
95.105.100.0/23 maxlen: 23
95.105.102.0/23 maxlen: 23
95.105.102.0/24 maxlen: 24
95.105.104.0/22 maxlen: 22
95.105.104.0/24 maxlen: 24
95.105.105.0/24 maxlen: 24
95.105.106.0/23 maxlen: 23
95.105.108.0/22 maxlen: 22
95.105.112.0/22 maxlen: 22
95.105.112.0/24 maxlen: 24
95.105.113.0/24 maxlen: 24
95.105.114.0/24 maxlen: 24
95.105.115.0/24 maxlen: 24
95.105.116.0/22 maxlen: 22
95.105.116.0/24 maxlen: 24
95.105.117.0/24 maxlen: 24
95.105.118.0/24 maxlen: 24
95.105.119.0/24 maxlen: 24
95.105.120.0/22 maxlen: 22
95.105.120.0/24 maxlen: 24
95.105.124.0/22 maxlen: 22
95.105.124.0/24 maxlen: 24
95.105.125.0/24 maxlen: 24
95.105.126.0/24 maxlen: 24
95.105.127.0/24 maxlen: 24
136.169.240.0/20 maxlen: 20
136.169.240.0/22 maxlen: 22
136.169.240.0/24 maxlen: 24
136.169.241.0/24 maxlen: 24
136.169.242.0/24 maxlen: 24
136.169.243.0/24 maxlen: 24
136.169.244.0/22 maxlen: 22
136.169.248.0/22 maxlen: 22
136.169.252.0/22 maxlen: 22
136.169.252.0/24 maxlen: 24
136.169.253.0/24 maxlen: 24
136.169.254.0/24 maxlen: 24
136.169.255.0/24 maxlen: 24
145.255.16.0/21 maxlen: 21
145.255.16.0/22 maxlen: 22
145.255.18.0/24 maxlen: 24
145.255.19.0/24 maxlen: 24
145.255.20.0/22 maxlen: 22
145.255.20.0/24 maxlen: 24
145.255.21.0/24 maxlen: 24
145.255.22.0/24 maxlen: 24
145.255.23.0/24 maxlen: 24
2a02:1c8:7::/48 maxlen: 48
2a02:1c8:700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5c:ba:69:cc:44:b0:7b:a5:09:5b:07:57:17:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0028aaecf5277f13f0ed552224731e06559ed96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:6f:2c:6b:15:47:90:2e:e4:a8:fc:17:b6:
53:47:c2:1b:f6:a3:eb:4d:e8:54:1e:9b:33:fe:c7:
15:13:5d:a6:9e:96:b3:3b:14:07:00:08:79:95:b4:
96:20:0b:50:c2:8d:44:de:70:f8:f7:e1:f5:3b:5c:
6d:71:9a:a4:ce:77:53:84:ec:38:bb:0e:6e:c6:2a:
28:33:00:e4:67:8f:cc:1e:97:17:8a:7f:78:8b:f9:
14:f7:d0:b3:1f:76:e8:fd:1f:c0:a0:20:5d:3e:9b:
86:b0:88:1f:14:26:12:f8:89:27:88:e4:75:16:c4:
0a:c4:ce:41:a6:58:7e:ec:07:b3:32:d2:e1:6c:cc:
d7:4d:07:c4:ff:74:ef:f5:01:3a:de:3f:5b:a8:2c:
cc:13:74:d1:20:bb:7b:b7:14:9c:75:fe:6b:db:7e:
5a:53:ae:bf:f6:a9:30:7b:84:67:d1:be:c9:0a:fc:
58:a1:f5:a8:e8:a3:07:ef:05:71:39:70:20:0b:b9:
57:68:f3:bb:22:41:85:ed:94:3c:b1:60:42:b6:52:
bd:da:4b:14:89:f3:0d:24:15:06:69:71:ee:2c:61:
d1:25:8a:6f:d4:50:25:31:2a:24:56:e8:09:b5:7b:
2a:67:31:4e:76:d8:f7:ec:3c:1a:81:e6:cc:fc:0b:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:28:AA:EC:F5:27:7F:13:F0:ED:55:22:24:73:1E:06:55:9E:D9:6F
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
46.191.240.0/20
79.140.16.0/20
84.39.248.0/21
94.41.128.0/20
94.41.160.0/19
95.105.96.0/19
136.169.240.0/20
145.255.16.0/21
IPv6:
2a02:1c8:7::/48
2a02:1c8:700::/40
Signature Algorithm: sha256WithRSAEncryption
2c:75:76:3e:c4:a0:43:f3:00:6f:85:70:a6:7d:0e:ab:e4:19:
33:7f:ab:b5:75:0b:55:b9:18:1d:06:5b:76:51:17:3d:79:eb:
14:c1:1e:c8:76:2c:3d:f9:f0:2f:ec:14:f2:33:93:1a:38:d6:
2e:8f:8d:ef:a9:56:c7:2b:65:d7:73:74:a6:b0:84:ec:ff:2b:
67:ea:e6:53:f1:3c:8f:c6:d5:bc:1a:28:ab:b0:af:30:90:b0:
b8:9b:dd:1f:25:38:b6:de:71:0a:2a:6b:b2:5d:7a:aa:ff:b8:
71:40:23:ac:59:76:ca:70:be:f4:10:03:13:8f:d6:9e:fd:ef:
cb:cc:ef:06:f6:0d:03:6b:bb:86:a8:8e:ad:c3:3f:45:d7:9e:
85:ff:f3:e2:39:be:f4:52:14:76:39:5a:56:12:b3:68:0b:70:
df:8d:4f:df:6f:2f:89:6f:6c:1f:ca:e1:58:75:bd:bf:11:37:
b2:4d:fc:2d:f8:c5:e5:1c:ce:cb:8b:4e:a5:e3:31:8e:1b:a9:
76:64:a2:9d:b4:88:d9:43:96:6f:60:ac:81:fd:74:b9:cc:23:
e7:df:5c:bb:3d:94:3c:31:ac:d8:8e:e3:c2:b1:36:a9:c3:f3:
43:07:e8:1b:3e:e7:51:96:64:6f:a3:c5:04:a6:b8:5c:c9:fe:
96:dd:54:f9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZ8jaFy6acxEsHulCVsHVxcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZGYzOTkwNDRiMWYxY2M2MWNjNzcxZTg5YjQ5ZDIzODU4
MmMwN2QwHhcNMjYwNzAyMTUxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDI4YWFlY2Y1Mjc3ZjEzZjBlZDU1MjIyNDczMWUwNjU1OWVkOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqhvLGsVR5Au5Kj8F7ZTR8Ib9qPr
TehUHpsz/scVE12mnpazOxQHAAh5lbSWIAtQwo1E3nD49+H1O1xtcZqkzndThOw4
uw5uxiooMwDkZ4/MHpcXin94i/kU99CzH3bo/R/AoCBdPpuGsIgfFCYS+IkniOR1
FsQKxM5Bplh+7AezMtLhbMzXTQfE/3Tv9QE63j9bqCzME3TRILt7txScdf5r235a
U66/9qkwe4Rn0b7JCvxYofWo6KMH7wVxOXAgC7lXaPO7IkGF7ZQ8sWBCtlK92ksU
ifMNJBUGaXHuLGHRJYpv1FAlMSokVugJtXsqZzFOdtj37DwagebM/AsF1QIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFAAoquz1J38T8O1VIiRzHgZVntlvMB8GA1UdIwQY
MBaAFOvfOZBEsfHMYcx3Hom0nSOFgsB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvQUNpcTdQVW5meFB3N1ZVaUpITWVCbFdlMlc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzA8BAIAATA2AwQDLr+4AwQE
Lr/wAwQET4wQAwQDVCf4AwQEXimAAwQFXimgAwQFX2lgAwQEiKnwAwQDkf8QMBcE
AgACMBEDBwAqAgHIAAcDBgAqAgHIBzANBgkqhkiG9w0BAQsFAAOCAQEALHV2PsSg
Q/MAb4Vwpn0Oq+QZM3+rtXULVbkYHQZbdlEXPXnrFMEeyHYsPfnwL+wU8jOTGjjW
Lo+N76lWxytl13N0prCE7P8rZ+rmU/E8j8bVvBooq7CvMJCwuJvdHyU4tt5xCipr
sl16qv+4cUAjrFl2ynC+9BADE4/Wnv3vy8zvBvYNA2u7hqiOrcM/Rdeehf/z4jm+
9FIUdjlaVhKzaAtw341P328viW9sH8rhWHW9vxE3sk38LfjF5RzOy4tOpeMxjhup
dmSinbSI2UOWb2Csgf10ucwj599cuz2UPDGs2I7jwrE2qcPzQwfoGz7nUZZkb6PF
BKa4XMn+lt1U+Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:11 2026 by rpki-client