Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/P-2u_kZ5Xsu50HBio1pkIePJa7k.roa
File: P-2u_kZ5Xsu50HBio1pkIePJa7k.roa (raw, json)
Hash identifier: gs3h93EAUbN1m/YbQyq1DvD4dvcskDmE1PICSsE/UpA=
Subject key identifier: 3F:ED:AE:FE:46:79:5E:CB:B9:D0:70:62:A3:5A:64:21:E3:C9:6B:B9
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019E28B69CE3468E43B229C865C88A5D8700
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/P-2u_kZ5Xsu50HBio1pkIePJa7k.roa
Signing time: Thu 14 May 2026 22:58:36 +0000
ROA not before: Thu 14 May 2026 22:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207023
IP address blocks: 37.97.116.0/22 maxlen: 24
46.173.246.0/23 maxlen: 23
46.173.248.0/22 maxlen: 22
46.173.254.0/23 maxlen: 23
91.229.147.0/24 maxlen: 24
91.232.18.0/24 maxlen: 24
91.234.122.0/23 maxlen: 24
91.246.180.0/22 maxlen: 22
94.232.96.0/22 maxlen: 22
176.116.238.0/23 maxlen: 24
176.118.200.0/22 maxlen: 22
176.118.204.0/22 maxlen: 22
192.162.186.0/23 maxlen: 24
194.33.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b6:9c:e3:46:8e:43:b2:29:c8:65:c8:8a:5d:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 14 22:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fedaefe46795ecbb9d07062a35a6421e3c96bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:a0:c7:7b:49:75:f8:0b:d9:1a:92:3d:d6:
cf:63:a2:8e:43:15:2a:a9:8d:f9:86:62:83:0a:49:
d6:5a:5e:c6:17:46:e5:55:0a:0b:fa:41:a7:94:7a:
d1:16:e3:9a:76:f3:45:62:b9:5c:9a:12:1f:df:ba:
78:c9:2b:ba:25:41:ff:bb:71:5f:56:14:57:76:d9:
1a:79:c8:93:49:4c:ea:d4:e1:5a:78:d8:5e:0d:06:
31:08:3e:a4:b1:c9:2f:3a:24:28:e6:61:b7:1c:dd:
da:e7:e9:d0:f2:1f:01:80:c4:1b:c4:31:5a:4b:f7:
65:3a:79:9c:74:f4:5a:76:9d:e6:43:98:00:76:ca:
e2:99:04:eb:f8:dc:b3:e1:3a:02:cc:d3:23:23:b6:
aa:88:3b:f9:36:80:66:59:b2:14:88:b5:84:11:63:
e7:f3:62:be:a9:74:d2:df:52:52:7a:f4:d7:21:e2:
6f:84:79:e0:0f:39:77:04:5c:f2:80:31:6f:b3:bd:
84:b3:3a:88:f7:1d:32:8a:aa:b8:39:a1:99:03:c1:
94:27:dc:32:e1:1b:f0:b8:36:0d:d4:db:11:26:a3:
7c:d3:8a:6f:e9:f6:79:1e:f6:de:02:b7:66:30:7a:
e9:ad:6f:2d:12:9a:ca:18:19:14:6b:84:22:70:d3:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:AE:FE:46:79:5E:CB:B9:D0:70:62:A3:5A:64:21:E3:C9:6B:B9
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/P-2u_kZ5Xsu50HBio1pkIePJa7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.116.0/22
46.173.246.0-46.173.251.255
46.173.254.0/23
91.229.147.0/24
91.232.18.0/24
91.234.122.0/23
91.246.180.0/22
94.232.96.0/22
176.116.238.0/23
176.118.200.0/21
192.162.186.0/23
194.33.64.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:69:84:97:fa:98:23:77:34:92:01:ce:ae:f6:10:d3:b6:2b:
a1:b4:bb:a1:a3:a4:3c:fd:59:65:19:6a:76:de:4d:af:9f:35:
19:97:ce:65:4c:1d:90:74:cb:88:7c:2b:d6:eb:26:54:54:7b:
ac:27:86:23:00:10:db:6e:1e:86:bb:aa:be:54:31:e9:c6:cf:
18:97:56:68:19:dd:50:05:c3:a8:52:31:ec:72:59:b6:d9:f8:
93:39:d4:31:1a:88:e6:42:b3:e1:02:20:29:bf:2a:18:42:6e:
0e:13:1d:1d:8f:19:84:a6:f1:12:30:38:1d:33:93:00:4d:37:
74:13:ab:b0:a4:f3:f4:6e:50:63:dd:76:67:50:db:32:43:c9:
43:6e:08:83:0c:6c:3e:52:39:f8:4e:f9:00:e9:89:f0:60:89:
9e:cd:88:59:fe:1a:02:71:29:2b:22:bc:22:5c:80:83:75:ca:
eb:00:53:16:57:19:20:4e:89:78:b0:fd:86:46:92:c7:b0:a6:
ab:4a:68:27:bb:20:27:3c:8d:0b:43:23:7c:1e:87:aa:31:fe:
24:da:33:c1:cc:34:b1:ef:c3:60:1f:8f:3a:05:7e:e4:4f:c6:
0f:39:8b:d5:d8:2f:a3:b6:bc:66:ec:bb:7e:d6:96:4d:a2:4d:
b2:6b:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:24 2026 by rpki-client