Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/bR37DnenWx1rEQmioevSL7wYG5s.roa
File: bR37DnenWx1rEQmioevSL7wYG5s.roa (raw, json)
Hash identifier: ayZGBp8DGvJ1hkIfs0Ou2WRbIpc0G/PLWWzE22MPsfE=
Subject key identifier: 6D:1D:FB:0E:77:A7:5B:1D:6B:11:09:A2:A1:EB:D2:2F:BC:18:1B:9B
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A165500CE2AC5FE22B623502A6A422205F
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/bR37DnenWx1rEQmioevSL7wYG5s.roa
Signing time: Thu 22 Oct 2026 20:31:47 +0000
ROA not before: Thu 22 Oct 2026 20:31:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218372
IP address blocks: 46.20.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:50:0c:e2:ac:5f:e2:2b:62:35:02:a6:a4:22:20:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 22 20:31:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d1dfb0e77a75b1d6b1109a2a1ebd22fbc181b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:39:aa:10:46:2a:cf:8c:13:eb:df:f3:9b:
bc:91:84:3d:81:07:24:4a:8b:f9:50:ac:f7:26:ac:
24:e2:74:3b:58:f2:85:3d:49:f8:c4:34:6e:26:44:
4f:4a:52:0d:d9:04:a4:3f:c7:dc:af:1f:d7:22:36:
1a:5b:89:62:7e:12:34:28:d7:e8:bc:76:c0:1c:5a:
2b:49:50:fb:2b:12:fc:df:3c:fd:22:05:d5:d9:39:
61:30:bb:80:19:82:26:18:2d:7f:da:62:f8:92:4a:
4f:1e:f3:de:94:50:6b:f9:54:74:e1:b1:9f:e9:a6:
05:16:cb:2f:a3:4f:d2:96:6b:bf:b4:6a:58:40:75:
15:c5:94:05:8c:12:09:54:2d:44:12:ca:be:db:6e:
92:c4:81:c8:e3:8b:a0:55:0e:c7:17:c9:fc:d2:f2:
8e:d1:60:0d:41:72:03:87:aa:24:5e:4e:80:f7:02:
ae:83:33:f5:c1:d2:16:04:e0:5c:12:90:4c:ed:a9:
15:5d:9e:5a:9a:c9:d3:e4:5e:5e:f4:cc:16:b5:d8:
33:9f:1e:1e:6d:01:af:51:ba:62:d5:ff:6b:2e:bd:
3a:ff:c9:06:e3:1f:0c:09:0c:8e:15:64:84:7b:9b:
a3:43:bc:0e:c7:80:33:dd:01:c4:00:ab:a0:c3:ee:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:FB:0E:77:A7:5B:1D:6B:11:09:A2:A1:EB:D2:2F:BC:18:1B:9B
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/bR37DnenWx1rEQmioevSL7wYG5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d6:e4:56:1c:ba:49:e4:7b:2f:57:f3:63:5d:ea:ef:7a:f0:
6b:5c:fa:5d:bb:42:f8:d9:ed:68:7d:8e:fa:9b:b8:01:33:20:
be:27:c9:ed:3c:cc:23:02:2a:e8:e5:aa:07:77:d0:63:52:bb:
f7:7c:8f:29:04:9b:e9:85:d1:9d:07:6b:79:39:18:dc:0d:9a:
c2:50:c5:12:bd:44:11:a5:49:23:e0:9b:72:a9:e1:8f:19:f6:
fc:34:00:4d:43:78:45:84:a6:46:51:20:90:b8:80:8f:6c:e6:
7e:c6:6b:af:9c:26:26:66:ec:3d:26:bd:85:f8:cc:4e:be:03:
d2:88:d3:c1:53:f8:76:aa:7e:70:4b:fb:1d:39:ef:03:7d:85:
db:4d:40:79:e3:6d:6d:f7:9c:c8:ed:7d:f3:2c:1a:73:37:84:
85:24:1a:ed:f0:91:3f:80:7b:38:62:f0:dc:17:14:85:8e:de:
3e:42:33:90:24:55:4d:82:fd:f5:08:f2:30:2e:3e:eb:51:8e:
26:96:03:ee:74:bb:77:61:e2:6b:2b:2d:31:51:2a:b9:fd:12:
9c:50:09:6e:91:93:a4:12:52:45:a3:a8:c5:25:da:c0:f0:94:
f5:56:8c:e9:b5:5a:24:dc:70:4d:40:cb:53:b6:08:c5:75:dd:
0d:5d:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:42 2026 by rpki-client