Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/dNRPSnfq_fz0h0Bx9FN48757K24.roa
File: dNRPSnfq_fz0h0Bx9FN48757K24.roa (raw, json)
Hash identifier: PQQSUXtMe+CSMqNhT22afSsgYKHVv8p7crL3JYYOlA0=
Subject key identifier: 74:D4:4F:4A:77:EA:FD:FC:F4:87:40:71:F4:53:78:F3:BE:7B:2B:6E
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019FC29A3B1D5334AA1203AAF57C82CD898A
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/dNRPSnfq_fz0h0Bx9FN48757K24.roa
Signing time: Sun 02 Aug 2026 13:11:55 +0000
ROA not before: Sun 02 Aug 2026 13:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 46.148.34.0/24 maxlen: 24
46.148.35.0/24 maxlen: 24
46.148.36.0/24 maxlen: 24
46.148.38.0/24 maxlen: 24
46.148.40.0/24 maxlen: 24
46.148.42.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.44.0/24 maxlen: 24
46.148.45.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
46.148.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:9a:3b:1d:53:34:aa:12:03:aa:f5:7c:82:cd:89:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Aug 2 13:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74d44f4a77eafdfcf4874071f45378f3be7b2b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:08:01:6a:b1:fd:79:a0:07:79:cc:30:81:
44:cd:28:83:7c:91:36:cc:9b:a6:04:85:d5:a0:91:
1b:c8:8d:df:7d:20:69:6e:2a:ce:59:f7:82:84:44:
ad:92:0d:5b:cf:8d:c6:49:97:30:38:40:cf:a4:aa:
57:47:5a:fe:c9:91:5c:a8:a3:53:e5:c7:25:8e:a6:
5b:55:db:24:a7:c3:ea:3d:37:83:42:f7:31:12:61:
77:44:31:a2:10:f1:3e:d2:53:7c:7d:7c:b5:f9:fa:
fc:5b:4b:b8:87:d7:e5:c3:3d:8f:c6:77:9a:93:d2:
f9:e8:eb:e6:49:a5:48:17:89:43:bf:6e:56:55:f8:
95:f7:a9:e9:0c:cb:08:16:3f:97:1a:91:2c:9f:67:
8b:2e:f7:51:a8:8a:11:ef:2a:b5:a0:9c:0a:c1:18:
bd:5c:c6:49:b4:3b:36:ad:c8:cb:4f:ed:d9:81:e9:
5c:93:4f:cc:c6:d1:d6:07:34:1d:40:b4:a8:65:54:
d4:68:75:b6:62:07:62:80:5a:86:9b:03:37:ab:c6:
ba:f6:0b:b6:45:22:77:37:1c:7c:16:b8:32:33:3a:
2f:fa:38:20:82:f7:f6:1f:78:a1:c3:85:ed:3b:d5:
4c:ee:47:b7:45:fb:cc:f9:97:1c:fd:02:79:2a:9c:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:4F:4A:77:EA:FD:FC:F4:87:40:71:F4:53:78:F3:BE:7B:2B:6E
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/dNRPSnfq_fz0h0Bx9FN48757K24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.34.0-46.148.36.255
46.148.38.0/24
46.148.40.0/24
46.148.42.0-46.148.47.255
Signature Algorithm: sha256WithRSAEncryption
11:b9:6a:4f:0f:18:45:9d:26:68:c1:99:f1:e6:1a:d1:53:7e:
51:fd:82:31:6e:58:14:3f:62:21:25:c6:3c:e3:fe:fc:b4:28:
af:ed:60:4b:04:74:ec:b1:fe:bf:12:4f:e4:05:fa:c4:f4:39:
75:0e:0d:34:65:07:49:0c:d7:7f:63:49:f4:5f:4c:24:f6:8f:
85:1c:d4:e1:8e:9e:2b:d7:05:23:e6:6b:2d:79:4b:9c:0e:1c:
00:7b:6d:bb:ca:41:f3:71:14:12:63:17:5c:81:43:72:8d:ae:
f6:b3:75:3a:2d:1d:38:9a:8f:a5:88:97:15:96:9d:82:98:00:
7b:32:11:f0:a7:ac:84:a7:62:6a:7a:32:c9:fc:6d:5a:83:35:
3e:a3:b4:b3:77:50:ab:13:88:fe:68:b7:f4:31:c8:81:b7:83:
21:a0:78:55:73:78:3a:3a:db:7e:0e:78:f7:61:ed:24:9b:29:
2c:64:18:1f:a1:a4:10:c7:68:04:ec:cb:ff:32:13:bf:59:36:
b4:0f:c0:fa:c2:bc:fe:c2:f0:f0:b2:a3:19:ac:b4:34:ae:e7:
da:ac:f0:54:19:3b:db:fd:aa:df:5a:bf:1c:c1:9c:f7:df:9e:
4d:61:0b:97:d0:d9:b1:d5:88:ca:eb:6a:95:9c:0d:07:c0:c0:
49:f3:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:57:16 2026 by rpki-client