Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/uA-waARm5JZjm1RSOdEWi8gtdhw.roa
File: uA-waARm5JZjm1RSOdEWi8gtdhw.roa (raw, json)
Hash identifier: q2jhBOEKA13+Gi8bblMPwqRhwin9tcNd6S6FnjZqGkU=
Subject key identifier: B8:0F:B0:68:04:66:E4:96:63:9B:54:52:39:D1:16:8B:C8:2D:76:1C
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685E8A3B769FB824E95F16871BE5AE
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/uA-waARm5JZjm1RSOdEWi8gtdhw.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57128
IP address blocks: 46.191.224.0/22 maxlen: 22
46.191.224.0/23 maxlen: 23
46.191.224.0/24 maxlen: 24
46.191.225.0/24 maxlen: 24
46.191.226.0/23 maxlen: 23
46.191.226.0/24 maxlen: 24
46.191.227.0/24 maxlen: 24
77.79.156.0/22 maxlen: 22
77.79.156.0/23 maxlen: 23
77.79.156.0/24 maxlen: 24
77.79.157.0/24 maxlen: 24
77.79.158.0/23 maxlen: 23
77.79.158.0/24 maxlen: 24
77.79.159.0/24 maxlen: 24
84.39.244.0/22 maxlen: 22
84.39.244.0/23 maxlen: 23
84.39.244.0/24 maxlen: 24
84.39.245.0/24 maxlen: 24
84.39.246.0/23 maxlen: 23
84.39.246.0/24 maxlen: 24
84.39.247.0/24 maxlen: 24
93.157.248.0/22 maxlen: 22
93.157.248.0/23 maxlen: 23
93.157.248.0/24 maxlen: 24
93.157.249.0/24 maxlen: 24
93.157.250.0/23 maxlen: 23
93.157.250.0/24 maxlen: 24
93.157.251.0/24 maxlen: 24
95.105.0.0/20 maxlen: 20
95.105.0.0/22 maxlen: 22
95.105.0.0/23 maxlen: 23
95.105.0.0/24 maxlen: 24
95.105.1.0/24 maxlen: 24
95.105.2.0/23 maxlen: 23
95.105.2.0/24 maxlen: 24
95.105.3.0/24 maxlen: 24
95.105.4.0/22 maxlen: 22
95.105.4.0/23 maxlen: 23
95.105.4.0/24 maxlen: 24
95.105.5.0/24 maxlen: 24
95.105.6.0/23 maxlen: 23
95.105.6.0/24 maxlen: 24
95.105.7.0/24 maxlen: 24
95.105.8.0/22 maxlen: 22
95.105.8.0/23 maxlen: 23
95.105.8.0/24 maxlen: 24
95.105.9.0/24 maxlen: 24
95.105.10.0/23 maxlen: 23
95.105.10.0/24 maxlen: 24
95.105.11.0/24 maxlen: 24
95.105.12.0/22 maxlen: 22
95.105.12.0/23 maxlen: 23
95.105.12.0/24 maxlen: 24
95.105.13.0/24 maxlen: 24
95.105.14.0/23 maxlen: 23
95.105.14.0/24 maxlen: 24
95.105.15.0/24 maxlen: 24
95.105.64.0/20 maxlen: 20
95.105.64.0/22 maxlen: 22
95.105.64.0/23 maxlen: 23
95.105.64.0/24 maxlen: 24
95.105.65.0/24 maxlen: 24
95.105.66.0/23 maxlen: 23
95.105.66.0/24 maxlen: 24
95.105.67.0/24 maxlen: 24
95.105.68.0/22 maxlen: 22
95.105.68.0/23 maxlen: 23
95.105.68.0/24 maxlen: 24
95.105.69.0/24 maxlen: 24
95.105.70.0/23 maxlen: 23
95.105.70.0/24 maxlen: 24
95.105.71.0/24 maxlen: 24
95.105.72.0/22 maxlen: 22
95.105.72.0/23 maxlen: 23
95.105.72.0/24 maxlen: 24
95.105.73.0/24 maxlen: 24
95.105.74.0/23 maxlen: 23
95.105.74.0/24 maxlen: 24
95.105.75.0/24 maxlen: 24
95.105.76.0/22 maxlen: 22
95.105.76.0/23 maxlen: 23
95.105.76.0/24 maxlen: 24
95.105.77.0/24 maxlen: 24
95.105.78.0/23 maxlen: 23
95.105.78.0/24 maxlen: 24
95.105.79.0/24 maxlen: 24
2a02:1c8:9::/48 maxlen: 48
2a02:1c8:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:8a:3b:76:9f:b8:24:e9:5f:16:87:1b:e5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b80fb0680466e496639b545239d1168bc82d761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:06:9d:bd:c5:f5:a3:25:c9:88:ea:13:d8:
5d:14:8c:51:0a:11:68:30:a2:6b:ca:38:6b:82:a8:
6b:09:d2:88:03:ff:be:52:b5:43:1f:a2:ea:dc:f8:
93:a6:2b:a3:82:1a:99:0c:7b:e5:c7:b8:d9:23:c4:
74:72:9f:a7:ff:58:34:4d:44:d5:f5:3b:76:89:bc:
8f:6d:e2:2a:24:a6:fd:3e:bd:57:a7:e2:45:f4:a4:
98:a9:bd:ad:5d:d8:28:21:e5:b8:7e:cb:2d:e8:f1:
ba:da:c5:9b:3f:fe:da:c4:c5:23:5f:c4:57:04:22:
a2:99:ce:b5:83:3e:2e:e2:81:16:0f:20:f9:64:fb:
46:5b:03:9a:53:6a:f8:e9:79:da:2c:90:4e:0f:a4:
93:b1:f1:49:1c:43:ca:a6:5c:53:b5:a8:4a:48:49:
67:78:1c:f5:fe:48:57:1b:91:95:51:4e:ff:13:e1:
3e:97:b5:60:77:57:22:c0:11:58:7a:d2:1f:08:0e:
08:8b:69:f6:86:95:0f:62:22:63:18:c4:f1:88:33:
24:df:68:a6:90:d6:a5:e9:70:fc:d2:0c:1e:c7:dd:
ba:58:6b:f8:6a:64:32:41:e8:e0:30:f0:bc:8c:73:
78:cd:59:33:e6:c0:7f:11:92:9e:d4:29:f6:ac:ec:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:B0:68:04:66:E4:96:63:9B:54:52:39:D1:16:8B:C8:2D:76:1C
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/uA-waARm5JZjm1RSOdEWi8gtdhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.224.0/22
77.79.156.0/22
84.39.244.0/22
93.157.248.0/22
95.105.0.0/20
95.105.64.0/20
IPv6:
2a02:1c8:9::/48
2a02:1c8:30::/44
Signature Algorithm: sha256WithRSAEncryption
42:08:07:fd:2f:5b:8c:96:7a:8c:0c:a1:b1:bf:e5:c8:83:6e:
8f:73:ee:bb:59:c5:3b:5c:20:b7:cd:74:b5:0c:ee:dd:44:ad:
d5:9f:cf:17:1a:5b:3a:5a:50:1e:7a:0c:2b:cf:52:6d:e3:09:
e1:32:43:1e:cf:12:0b:39:f8:3e:41:57:94:12:df:9f:a8:d0:
cd:36:c4:a5:e7:10:d1:76:eb:ac:9b:4f:b0:59:4c:94:df:36:
73:a5:f6:40:86:51:0e:86:18:1b:0e:c4:62:1f:4b:73:b8:47:
97:32:7d:f7:5c:41:fb:0a:4c:cc:3a:d2:bb:71:1f:91:4e:76:
fa:0b:65:bd:31:73:f4:c7:87:16:b7:2b:73:91:dd:e6:46:61:
2a:89:8e:b0:69:b3:13:2a:44:46:a9:30:a6:25:51:60:56:27:
03:31:55:d0:5f:3c:05:cf:0c:21:6c:5b:a5:d6:64:30:e4:eb:
0b:ea:3d:44:40:df:6b:57:39:1e:c3:ff:fc:57:da:c0:36:22:
a6:c5:23:6e:13:56:ea:26:3b:ef:4b:2c:5f:16:f2:1a:45:87:
c9:81:4c:80:cb:c5:19:84:76:54:4a:0e:5f:bb:f2:3e:82:01:
89:46:42:7e:4d:81:46:48:63:d5:bb:26:73:9d:5e:50:a8:d4:
d4:08:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:33 2026 by rpki-client