Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa
File: AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa (raw, json)
Hash identifier: EVb7Mj3OG5H0UMytTB6DQ5yOP2z+yP5zkMEJ8YGMA1I=
Subject key identifier: 01:91:92:7E:F5:45:D9:A0:52:0D:19:FF:8A:1C:DC:21:67:E9:75:C4
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685FF51A7A8A442A7D0BEBAB9A01E5
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60095
IP address blocks: 46.191.156.0/22 maxlen: 22
46.191.156.0/23 maxlen: 23
46.191.156.0/24 maxlen: 24
46.191.157.0/24 maxlen: 24
46.191.158.0/23 maxlen: 23
46.191.158.0/24 maxlen: 24
46.191.159.0/24 maxlen: 24
93.157.252.0/22 maxlen: 22
93.157.252.0/23 maxlen: 23
93.157.252.0/24 maxlen: 24
93.157.253.0/24 maxlen: 24
93.157.254.0/23 maxlen: 23
93.157.254.0/24 maxlen: 24
93.157.255.0/24 maxlen: 24
136.169.204.0/22 maxlen: 22
136.169.204.0/23 maxlen: 23
136.169.204.0/24 maxlen: 24
136.169.205.0/24 maxlen: 24
136.169.206.0/23 maxlen: 23
136.169.206.0/24 maxlen: 24
136.169.207.0/24 maxlen: 24
136.169.212.0/22 maxlen: 22
136.169.212.0/23 maxlen: 23
136.169.212.0/24 maxlen: 24
136.169.213.0/24 maxlen: 24
136.169.214.0/23 maxlen: 23
136.169.214.0/24 maxlen: 24
136.169.215.0/24 maxlen: 24
185.44.8.0/22 maxlen: 22
185.44.8.0/23 maxlen: 23
185.44.8.0/24 maxlen: 24
185.44.9.0/24 maxlen: 24
185.44.10.0/23 maxlen: 23
185.44.10.0/24 maxlen: 24
185.44.11.0/24 maxlen: 24
2a02:1c8:a::/48 maxlen: 48
2a02:1c8:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5f:f5:1a:7a:8a:44:2a:7d:0b:eb:ab:9a:01:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0191927ef545d9a0520d19ff8a1cdc2167e975c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:0b:9b:a5:84:7d:fd:b4:9e:aa:65:89:6e:
02:06:04:13:09:10:3b:90:09:0e:5d:f9:48:93:1f:
e5:0a:79:b0:6b:f1:09:e9:5d:11:54:68:94:4c:82:
72:78:a1:bd:ef:8e:7a:e7:1d:0e:de:a4:50:81:fb:
ab:5a:a0:68:84:29:5c:f3:2a:8f:e8:ef:a4:a4:3c:
b8:7c:d3:bb:8f:53:58:f8:c7:bb:ff:84:02:71:a1:
46:96:bf:b8:1f:27:3e:63:96:7d:57:34:9e:4c:f1:
26:8a:b9:55:13:64:68:1c:a6:82:97:e1:b4:40:f0:
ac:43:af:a1:d4:25:70:4d:e6:17:04:a4:3e:89:b5:
85:cc:d1:31:f5:a2:19:5e:31:de:ff:3b:a5:c1:6f:
17:aa:e9:c2:75:16:b6:71:39:1e:4c:e9:2a:46:78:
0f:74:b2:3b:33:7a:2f:fa:4f:a4:d9:9e:06:d5:aa:
51:19:26:fd:f7:7a:cb:0a:0f:80:7b:6c:ba:65:17:
9d:7f:73:05:5e:41:48:71:93:3e:8e:1f:2e:c0:15:
ff:b6:24:de:b0:37:d8:81:88:04:ac:ee:6b:bd:aa:
57:48:10:a3:bc:07:d7:6f:d9:d1:37:43:79:c0:58:
92:2f:86:2c:3c:32:35:f6:a7:d1:f2:73:b6:27:ed:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:91:92:7E:F5:45:D9:A0:52:0D:19:FF:8A:1C:DC:21:67:E9:75:C4
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.156.0/22
93.157.252.0/22
136.169.204.0/22
136.169.212.0/22
185.44.8.0/22
IPv6:
2a02:1c8:a::/48
2a02:1c8:40::/44
Signature Algorithm: sha256WithRSAEncryption
8a:32:e3:d6:45:96:75:1e:b8:5e:6c:16:1e:d9:fd:cf:30:ba:
90:8c:04:a4:ca:15:73:31:ba:45:a9:dd:68:c2:cf:5a:37:d1:
fc:95:ca:c3:ca:7c:e7:cd:33:f9:f9:c5:66:a7:1e:32:7c:cf:
65:5a:4a:df:10:66:b8:3f:fe:94:70:2b:f3:11:03:68:92:3c:
3a:5e:e8:8f:2c:c4:71:8d:35:09:fb:dc:b7:da:54:94:d5:d6:
4b:28:f1:26:24:fc:10:08:55:76:d7:23:87:ba:c7:65:05:22:
b2:1c:6f:61:75:2f:42:d7:fe:e9:25:28:cf:bb:e9:82:af:40:
9a:aa:b6:16:42:f0:b7:78:d2:2a:d1:f3:23:aa:6f:d6:a8:23:
01:80:33:3f:41:13:b1:36:25:bf:05:c7:fe:44:b5:d3:5f:6b:
69:04:3c:6f:ca:c4:5d:a9:d5:53:c7:53:9c:e1:4c:e6:59:80:
67:78:cf:14:01:b0:68:74:c4:ea:ea:cd:3f:f9:43:45:85:0e:
63:6b:bf:47:4e:95:7c:95:ac:15:64:2d:16:46:f5:3a:b1:70:
64:96:a1:a3:6a:2a:f1:d3:6f:84:74:9f:42:95:3d:b3:d7:e1:
12:b4:5f:f1:89:61:f1:ab:92:84:74:51:08:28:fb:d4:41:4c:
22:f1:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:51 2026 by rpki-client