Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/0s37A0cK8GhfaRV7R-rZcnuJ7EA.roa
File: 0s37A0cK8GhfaRV7R-rZcnuJ7EA.roa (raw, json)
Hash identifier: FQXgINP+yDeHcu1/D0Aa2xkh/SD7CyCblgaT1beV5YQ=
Subject key identifier: D2:CD:FB:03:47:0A:F0:68:5F:69:15:7B:47:EA:D9:72:7B:89:EC:40
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A01E7B8AE57E7C733260633043E68ACD39
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/0s37A0cK8GhfaRV7R-rZcnuJ7EA.roa
Signing time: Thu 20 Aug 2026 09:23:28 +0000
ROA not before: Thu 20 Aug 2026 09:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211273
IP address blocks: 46.8.100.0/24 maxlen: 32
46.8.101.0/24 maxlen: 32
46.8.102.0/24 maxlen: 32
46.8.103.0/24 maxlen: 32
95.182.80.0/24 maxlen: 24
95.182.81.0/24 maxlen: 24
95.182.82.0/24 maxlen: 24
95.182.83.0/24 maxlen: 24
95.182.84.0/24 maxlen: 24
95.182.85.0/24 maxlen: 24
95.182.86.0/24 maxlen: 24
95.182.87.0/24 maxlen: 24
95.182.88.0/24 maxlen: 24
95.182.89.0/24 maxlen: 24
95.182.90.0/24 maxlen: 24
95.182.91.0/24 maxlen: 24
95.182.92.0/24 maxlen: 24
95.182.93.0/24 maxlen: 24
95.182.94.0/24 maxlen: 24
95.182.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:7b:8a:e5:7e:7c:73:32:60:63:30:43:e6:8a:cd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 20 09:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2cdfb03470af0685f69157b47ead9727b89ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:04:c8:72:d6:00:c4:43:e1:69:85:14:dc:
94:44:51:b6:3d:9e:de:89:8e:c9:82:50:8b:11:af:
25:0f:1d:a7:71:6d:78:15:d2:0a:40:70:61:cc:79:
d2:1c:fb:ce:d4:50:b7:2f:02:dd:cd:86:dd:2f:bd:
40:8e:d8:04:92:de:1c:a1:b8:da:23:37:45:ab:19:
72:3d:b4:7a:03:e5:08:ee:27:33:5d:66:41:0c:fe:
98:27:ab:e7:1d:fb:37:48:c6:b7:54:63:7b:b6:03:
08:03:47:cf:e1:43:2f:f0:05:ea:7c:d3:9d:1f:16:
02:bc:7c:5d:ef:9b:81:13:cd:1a:d2:7a:12:5d:ab:
50:8a:7a:08:bb:a3:33:24:e3:dc:f7:e8:8d:c8:f2:
09:c9:17:44:a5:7e:8c:f1:82:aa:fe:d1:00:fb:bb:
71:69:32:56:55:b0:d9:25:83:84:65:e3:2a:64:4a:
88:1f:34:08:61:a0:32:bf:b6:00:7a:51:51:b3:78:
d0:10:f6:e4:e0:4b:c8:c7:58:a0:24:27:da:fd:6a:
d1:d0:a1:2a:9b:3d:75:8c:0f:dd:51:ff:c3:18:7d:
ba:19:da:6f:9d:f6:e9:da:18:c9:a6:84:c6:1f:ba:
b2:06:eb:13:54:69:6a:e4:13:75:fe:c3:14:cf:ec:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:FB:03:47:0A:F0:68:5F:69:15:7B:47:EA:D9:72:7B:89:EC:40
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/0s37A0cK8GhfaRV7R-rZcnuJ7EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
95.182.80.0/20
Signature Algorithm: sha256WithRSAEncryption
42:83:3c:2e:97:fd:9e:c6:09:aa:44:03:68:a2:6d:39:be:38:
ee:99:8a:33:9f:2c:f8:f1:d5:2d:9c:43:cf:31:8a:93:ed:a0:
9f:77:5e:d8:e4:40:9b:ed:7b:52:76:b9:5f:0d:b4:26:d3:65:
81:6c:3c:f8:97:5c:d1:6c:5d:e9:99:8e:1f:20:d2:a4:68:4e:
69:c8:1d:89:ff:92:91:4c:17:7e:10:6f:87:7f:7d:e2:99:52:
ea:6e:a1:6b:b1:85:a1:e4:8d:b3:54:25:d0:73:3b:e9:1a:a3:
9a:40:2a:85:5b:be:27:d5:c2:07:8b:01:b7:37:15:59:f3:0f:
09:08:f2:3f:f6:e2:3a:d3:31:4a:40:c4:56:b1:68:1a:d0:ab:
ed:53:d2:8a:1f:cb:c9:d2:af:45:45:cb:54:a7:72:eb:95:b5:
6e:60:1d:8f:27:0d:9a:e1:b0:d3:aa:7b:e1:37:b5:a4:c9:2d:
45:2c:2e:11:db:6d:b4:28:0d:fe:07:79:61:54:43:a8:3d:e6:
96:0b:c9:f5:2f:d7:5d:46:46:c2:10:ca:41:bb:4c:7e:c9:47:
b1:c2:ea:ed:0f:e5:78:68:6c:dd:ae:a2:b4:cc:5a:ce:cf:cd:
ca:46:6c:14:61:2d:a2:0c:ce:75:02:dc:12:5f:5c:73:38:df:
79:71:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:32 2026 by rpki-client