Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/foy3rmrTvDgjTDIvhlnm9qcAC-0.roa
File: foy3rmrTvDgjTDIvhlnm9qcAC-0.roa (raw, json)
Hash identifier: d3xSjhKSrxDttilu81KtUtjLRHSZdD9mi/Rkqyd0zhw=
Subject key identifier: 7E:8C:B7:AE:6A:D3:BC:38:23:4C:32:2F:86:59:E6:F6:A7:00:0B:ED
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23686067972925F693F1262189D73C6C
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/foy3rmrTvDgjTDIvhlnm9qcAC-0.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60192
IP address blocks: 46.191.152.0/22 maxlen: 22
46.191.152.0/23 maxlen: 23
46.191.152.0/24 maxlen: 24
46.191.153.0/24 maxlen: 24
46.191.154.0/23 maxlen: 23
46.191.154.0/24 maxlen: 24
46.191.155.0/24 maxlen: 24
95.105.24.0/22 maxlen: 22
95.105.24.0/23 maxlen: 23
95.105.24.0/24 maxlen: 24
95.105.25.0/24 maxlen: 24
95.105.26.0/23 maxlen: 23
95.105.26.0/24 maxlen: 24
95.105.27.0/24 maxlen: 24
95.105.80.0/22 maxlen: 22
95.105.80.0/23 maxlen: 23
95.105.80.0/24 maxlen: 24
95.105.81.0/24 maxlen: 24
95.105.82.0/23 maxlen: 23
95.105.82.0/24 maxlen: 24
95.105.83.0/24 maxlen: 24
185.162.32.0/22 maxlen: 22
185.162.32.0/23 maxlen: 23
185.162.32.0/24 maxlen: 24
185.162.33.0/24 maxlen: 24
185.162.34.0/23 maxlen: 23
185.162.34.0/24 maxlen: 24
185.162.35.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:60:67:97:29:25:f6:93:f1:26:21:89:d7:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e8cb7ae6ad3bc38234c322f8659e6f6a7000bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:2c:01:5c:48:af:20:ba:f6:87:4b:2a:a6:
de:30:98:5c:05:01:8e:04:57:07:d2:e6:cb:6e:3d:
2e:65:1e:bd:c9:6f:69:39:96:e0:5f:b4:a4:93:d2:
5d:c4:8a:2a:e1:5b:63:a3:a5:02:7c:cf:35:44:a2:
38:dd:fc:bc:9a:ea:ad:e3:77:49:3c:ce:39:2b:e8:
cb:f1:09:bd:b2:ec:21:12:5d:45:ca:6c:97:e1:81:
62:db:a1:6a:4f:b0:0d:62:da:01:8d:24:bc:59:1c:
fd:dc:03:3a:2c:27:68:3a:a5:0f:51:a9:ea:08:e0:
fc:69:a4:05:07:16:e0:93:84:cc:00:71:54:72:ed:
9e:d4:d8:0a:45:f8:5b:f3:2b:b8:d9:3e:f9:c9:b2:
4c:8c:96:41:e0:1e:5d:8b:ae:80:ed:ea:f5:f6:77:
59:14:04:4d:74:07:34:aa:37:35:34:81:cd:d6:32:
2b:44:b5:fb:0e:3c:9d:14:85:ea:3b:bd:2c:0a:c4:
95:b2:75:47:df:66:d6:04:91:e2:80:85:b5:54:ca:
57:2e:db:cb:82:1b:95:47:66:80:dd:5f:e6:da:1a:
cc:a8:2c:b1:ae:bc:08:53:b3:ee:cf:9a:17:7a:c4:
f0:a4:be:86:b5:8b:ac:89:dd:ca:c5:e1:7a:ee:56:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:B7:AE:6A:D3:BC:38:23:4C:32:2F:86:59:E6:F6:A7:00:0B:ED
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/foy3rmrTvDgjTDIvhlnm9qcAC-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.152.0/22
95.105.24.0/22
95.105.80.0/22
185.162.32.0/22
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3b:d7:3e:e1:a0:99:f8:74:33:56:1d:c0:92:1d:5a:e0:90:
a6:04:23:06:1f:4e:0a:42:74:ec:e1:5c:58:1b:22:d7:45:ec:
c0:58:78:2e:07:e9:f8:c0:ca:56:8a:d1:6f:92:a8:f2:12:bc:
1a:70:4a:9f:b6:8d:69:0a:b5:da:73:d3:38:f2:34:0a:10:6f:
91:1b:b4:64:ef:9e:4b:51:35:61:c7:65:98:a4:ec:7c:17:4c:
e7:a3:b9:cf:8d:b5:61:76:4c:c6:ee:58:c4:92:15:3c:4b:f0:
7e:0c:df:21:5f:5c:86:c8:39:5b:0f:40:2f:0e:ac:62:2c:11:
31:8b:d0:0f:fe:ef:3b:41:ff:3e:ac:87:85:51:20:16:50:fb:
f5:80:bf:98:32:2e:4f:b4:bb:26:cb:fc:da:33:eb:33:23:fb:
be:b4:93:1b:d7:5c:ae:0e:c4:fa:5c:07:0f:0a:cf:93:b5:5a:
b2:48:20:cb:6d:8e:8e:cd:13:f6:b1:d0:52:fc:7c:fc:70:6e:
f8:67:23:4c:9e:43:b6:c5:83:1b:31:3f:6a:2e:72:19:ef:d6:
f1:65:72:1b:4a:10:c5:4a:32:71:0e:6d:1c:82:c2:98:4c:cc:
07:a8:0b:b2:fc:36:a7:92:dd:c7:42:ec:df:af:cf:c7:d0:35:
f2:35:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:11 2026 by rpki-client