Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/SPpspv0U8zVaGU4TeknTZsHQYOU.roa
File: SPpspv0U8zVaGU4TeknTZsHQYOU.roa (raw, json)
Hash identifier: jWw4v/J9P+IR26L3cXzqerTmo1lnbwhHoYp3Q0Zu4Ok=
Subject key identifier: 48:FA:6C:A6:FD:14:F3:35:5A:19:4E:13:7A:49:D3:66:C1:D0:60:E5
Certificate issuer: /CN=afb0cdd58c635a2163d5e8aa04a3bdd2e2806b46
Certificate serial: 019F23682C99ED40BEFA3A1B7E0EDF3A554B
Authority key identifier: AF:B0:CD:D5:8C:63:5A:21:63:D5:E8:AA:04:A3:BD:D2:E2:80:6B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7DN1YxjWiFj1eiqBKO90uKAa0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/SPpspv0U8zVaGU4TeknTZsHQYOU.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207707
IP address blocks: 46.31.72.0/24 maxlen: 24
46.31.73.0/24 maxlen: 24
46.31.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7DN1YxjWiFj1eiqBKO90uKAa0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2c:99:ed:40:be:fa:3a:1b:7e:0e:df:3a:55:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb0cdd58c635a2163d5e8aa04a3bdd2e2806b46
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48fa6ca6fd14f3355a194e137a49d366c1d060e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:32:9f:ab:0a:58:fb:62:c2:8d:cc:b8:c8:
ab:2f:aa:2d:f8:3e:5b:b4:7c:e8:96:99:b5:8c:27:
88:0c:45:da:32:7a:fc:bf:f1:37:d0:27:f0:3d:e5:
b7:d1:db:44:f5:bf:74:99:c6:5f:2b:3e:2c:22:a9:
72:d6:92:e3:74:95:df:a7:93:b7:74:3f:4d:a5:be:
59:ad:fa:bd:bf:1c:c0:a9:f3:f9:f3:1f:23:1f:a5:
e8:a4:d7:47:c4:0e:df:72:ca:85:62:6f:b2:b8:3f:
24:15:31:d1:8a:7b:2d:bf:54:5a:ce:7e:3f:76:9f:
8e:75:28:a6:cc:2e:d5:5b:70:c0:6c:51:fb:d5:7c:
44:c6:16:b9:f3:fc:e4:96:db:82:58:a2:50:0e:98:
69:20:3e:cb:f9:b6:f2:7e:a9:96:61:d1:f6:fa:9f:
bf:91:32:19:dc:13:e7:2d:b3:e5:7f:29:6c:9d:20:
67:80:6e:30:cd:2a:6d:4c:26:ec:8f:bb:16:85:50:
83:de:62:95:4c:b4:68:70:78:36:39:25:6d:1a:4a:
49:7f:ad:aa:01:4b:4f:92:8b:bd:b5:0c:4f:b4:6f:
e7:f7:78:d2:fc:29:6c:4d:b4:ac:b4:d7:75:45:be:
67:bf:6f:30:4c:19:7b:cb:02:16:69:2b:d2:14:88:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:6C:A6:FD:14:F3:35:5A:19:4E:13:7A:49:D3:66:C1:D0:60:E5
X509v3 Authority Key Identifier:
keyid:AF:B0:CD:D5:8C:63:5A:21:63:D5:E8:AA:04:A3:BD:D2:E2:80:6B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7DN1YxjWiFj1eiqBKO90uKAa0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/SPpspv0U8zVaGU4TeknTZsHQYOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/r7DN1YxjWiFj1eiqBKO90uKAa0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.72.0-46.31.74.255
Signature Algorithm: sha256WithRSAEncryption
19:af:eb:7b:3d:1c:ba:30:50:5f:f7:94:58:5f:13:c9:21:0d:
8b:71:23:83:49:4f:55:90:c6:99:22:93:ae:7b:ac:25:7d:3e:
ec:7b:1d:bf:8c:4e:f1:48:cb:0a:85:6a:50:0c:d5:86:a4:77:
4b:04:b6:b2:5b:79:5e:ca:07:85:5e:69:3d:ac:3f:a1:ea:1d:
42:c9:f6:4d:9f:54:f6:fa:66:60:f8:d7:f0:15:de:2c:40:3b:
86:76:a9:b0:d6:cc:0d:24:76:ab:cb:2e:7e:71:bf:ef:3d:34:
ef:4d:d2:d9:53:e4:3c:bd:04:de:82:67:b1:5f:ca:ee:6e:f5:
9a:85:8e:fe:6a:6e:7c:7f:46:bc:13:14:c0:c7:3d:e7:29:58:
4b:7d:95:d1:52:4b:76:42:ad:de:71:40:2b:05:a2:c6:46:a7:
83:3e:27:ef:6f:97:4d:0d:7c:a5:9b:3a:65:1f:96:b9:15:a5:
df:67:6a:14:1a:15:f9:71:c1:b3:ac:fe:f3:7f:ae:95:a1:f3:
a0:06:dd:38:40:4b:34:c3:0c:fc:6f:0b:e1:01:35:9b:7f:c9:
84:19:12:ca:f7:1c:74:99:6a:2b:d9:c7:f1:0e:54:fd:96:8d:
32:94:30:64:cc:25:fb:83:2a:96:1d:fa:3b:60:be:12:30:15:
ec:3d:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:50 2026 by rpki-client