Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/rxeHCgbEEAr72Cn-7K_YK3JmOA0.roa
File: rxeHCgbEEAr72Cn-7K_YK3JmOA0.roa (raw, json)
Hash identifier: blL9+R95hFKXE5Y28tXQI9fJJTn42KVDOuX566lUJHM=
Subject key identifier: AF:17:87:0A:06:C4:10:0A:FB:D8:29:FE:EC:AF:D8:2B:72:66:38:0D
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019F818A544A53F40498572758EF12123CAA
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/rxeHCgbEEAr72Cn-7K_YK3JmOA0.roa
Signing time: Mon 20 Jul 2026 21:59:14 +0000
ROA not before: Mon 20 Jul 2026 21:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203639
IP address blocks: 46.21.23.0/24 maxlen: 24
46.21.28.0/24 maxlen: 24
46.21.30.0/24 maxlen: 24
46.21.31.0/24 maxlen: 24
185.155.184.0/24 maxlen: 24
185.155.185.0/24 maxlen: 24
185.155.186.0/24 maxlen: 24
185.155.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:8a:54:4a:53:f4:04:98:57:27:58:ef:12:12:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Jul 20 21:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af17870a06c4100afbd829feecafd82b7266380d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:08:5d:4b:45:03:3e:85:04:e8:ef:1a:70:
9b:1d:5d:fc:b0:2c:34:36:a2:c9:4c:bd:32:ae:e4:
41:15:c8:94:26:15:e9:55:36:97:35:f1:62:87:d2:
4f:b1:33:4d:37:0d:2b:c2:33:eb:5c:bc:b3:56:06:
b7:60:43:bb:f3:79:73:bc:95:01:38:ad:e9:87:27:
73:fd:11:8e:0e:9d:79:67:f6:d9:59:e9:ba:88:29:
ed:86:c6:7c:2a:c1:0d:f8:b4:ef:d6:00:78:6e:71:
67:5d:ca:e3:d5:50:9b:f4:6c:3a:73:a0:55:81:95:
76:42:4a:40:40:97:f7:90:67:b3:6b:44:5a:b7:da:
55:cd:ad:f7:7c:f3:b2:8e:ce:46:e5:43:2d:f1:fb:
42:29:bc:69:b8:c1:19:27:47:cb:01:23:83:92:85:
e5:54:3b:30:06:00:46:fe:87:9f:2b:02:bc:77:90:
77:e8:a8:3d:98:13:89:fa:0b:07:69:f6:81:75:37:
a3:86:1b:b4:9b:64:b7:91:74:34:8d:14:bb:c4:d9:
e8:72:8f:37:e0:b0:6f:80:c1:6c:17:31:4b:71:87:
1a:fd:4f:62:9c:d1:00:f5:f0:11:8a:c3:3c:fc:61:
a0:ad:29:d7:64:f1:c4:d3:3b:fa:c6:c4:af:91:17:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:17:87:0A:06:C4:10:0A:FB:D8:29:FE:EC:AF:D8:2B:72:66:38:0D
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/rxeHCgbEEAr72Cn-7K_YK3JmOA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.23.0/24
46.21.28.0/24
46.21.30.0/23
185.155.184.0/22
Signature Algorithm: sha256WithRSAEncryption
30:9e:60:85:7c:0f:fd:5d:24:8b:ef:37:9a:44:7e:cf:c2:52:
87:47:fc:63:3b:a2:f2:82:63:8c:b0:15:3e:e0:c5:f4:b2:36:
9e:2b:25:9d:da:a0:eb:ed:c2:91:5b:c1:2c:38:c0:e2:44:ec:
d8:5f:99:85:3a:c4:0f:9e:f9:d1:76:0e:ff:0f:b4:32:48:c9:
68:b6:e9:ff:77:d2:dd:b0:6e:b5:86:a6:ed:89:cb:61:0c:b3:
19:7f:71:4e:6a:31:d3:89:1a:97:b3:45:79:ec:70:bf:17:a7:
26:f4:50:e1:57:9f:d4:20:37:45:a3:c7:86:52:ec:61:78:12:
d6:bf:f6:00:91:04:c3:90:c2:fc:4a:f8:bd:e9:01:6b:f2:cb:
cd:b1:0d:d4:7e:66:2c:f8:c2:b9:b7:0a:48:e0:fb:9c:99:85:
de:01:dc:05:46:c7:dd:09:62:d1:5f:25:48:10:39:46:ec:71:
ea:a7:85:bc:ed:7a:41:bf:64:46:24:44:0c:bd:1e:43:71:a2:
87:a2:89:94:a1:32:39:19:af:c9:de:c6:79:8e:71:ff:a0:a6:
c8:9d:30:f9:04:3a:58:bb:68:71:c2:8a:b9:45:8b:04:1c:5b:
69:bd:85:6e:4e:6d:a5:ec:a7:82:76:bb:c1:7e:10:fa:e1:74:
b2:83:5a:88
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+BilRKU/QEmFcnWO8SEjyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0
YmI0MWYwHhcNMjYwNzIwMjE1OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjE3ODcwYTA2YzQxMDBhZmJkODI5ZmVlY2FmZDgyYjcyNjYzODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb4IXUtFAz6FBOjvGnCbHV38sCw0
NqLJTL0yruRBFciUJhXpVTaXNfFih9JPsTNNNw0rwjPrXLyzVga3YEO783lzvJUB
OK3phydz/RGODp15Z/bZWem6iCnthsZ8KsEN+LTv1gB4bnFnXcrj1VCb9Gw6c6BV
gZV2QkpAQJf3kGeza0Rat9pVza33fPOyjs5G5UMt8ftCKbxpuMEZJ0fLASODkoXl
VDswBgBG/oefKwK8d5B36Kg9mBOJ+gsHafaBdTejhhu0m2S3kXQ0jRS7xNnoco83
4LBvgMFsFzFLcYca/U9inNEA9fARisM8/GGgrSnXZPHE0zv6xsSvkReQ4QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK8XhwoGxBAK+9gp/uyv2CtyZjgNMB8GA1UdIwQY
MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt
OWIyNmNhYjc5NDUxLzEvcnhlSENnYkVFQXI3MkNuLTdLX1lLM0ptT0EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx
LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALhUXAwQA
LhUcAwQBLhUeAwQCuZu4MA0GCSqGSIb3DQEBCwUAA4IBAQAwnmCFfA/9XSSL7zea
RH7PwlKHR/xjO6LygmOMsBU+4MX0sjaeKyWd2qDr7cKRW8EsOMDiROzYX5mFOsQP
nvnRdg7/D7QySMlotun/d9LdsG61hqbticthDLMZf3FOajHTiRqXs0V57HC/F6cm
9FDhV5/UIDdFo8eGUuxheBLWv/YAkQTDkML8Svi96QFr8svNsQ3UfmYs+MK5twpI
4PucmYXeAdwFRsfdCWLRXyVIEDlG7HHqp4W87XpBv2RGJEQMvR5DcaKHoomUoTI5
Ga/J3sZ5jnH/oKbInTD5BDpYu2hxwoq5RYsEHFtpvYVuTm2l7KeCdrvBfhD64XSy
g1qI
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:57 2026 by rpki-client