Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/dNvl41gDXbZfsDZ9RFpBvP6cYow.roa
File: dNvl41gDXbZfsDZ9RFpBvP6cYow.roa (raw, json)
Hash identifier: NaucFK+oQglGEexzweska9RmpWnDV2Wpe/l4R51xpK0=
Subject key identifier: 74:DB:E5:E3:58:03:5D:B6:5F:B0:36:7D:44:5A:41:BC:FE:9C:62:8C
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019F94029265D4D5AE04B504BE0264B5B2DF
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/dNvl41gDXbZfsDZ9RFpBvP6cYow.roa
Signing time: Fri 24 Jul 2026 12:03:44 +0000
ROA not before: Fri 24 Jul 2026 12:03:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44247
IP address blocks: 46.35.172.0/22 maxlen: 24
46.35.176.0/22 maxlen: 24
95.158.160.0/22 maxlen: 24
95.158.176.0/21 maxlen: 24
212.21.128.0/24 maxlen: 24
212.21.136.0/23 maxlen: 24
212.21.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:02:92:65:d4:d5:ae:04:b5:04:be:02:64:b5:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jul 24 12:03:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74dbe5e358035db65fb0367d445a41bcfe9c628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:7c:7e:a3:f1:4e:42:10:b5:b8:93:8e:03:
ec:94:65:f4:04:89:b5:e7:21:a9:74:c6:ad:0b:60:
bf:76:16:9e:27:c2:3c:97:38:3b:92:bb:1d:66:65:
c5:b9:ce:f9:f1:5d:7e:00:24:03:6c:6b:d4:68:cc:
19:ec:a7:85:c4:ca:4f:16:97:e0:4e:57:aa:e0:97:
40:c7:7c:bf:a2:f7:c5:1d:2c:7d:cb:01:33:01:2f:
51:36:5c:fa:e0:ab:68:08:c5:02:1f:f4:ed:f7:d7:
d4:66:e9:b8:bc:f3:e9:ab:61:24:92:7a:88:d0:90:
21:86:64:e4:e7:9d:a1:88:64:ec:28:e7:7c:67:76:
a6:d7:98:26:ee:97:88:ed:c7:87:4b:cc:3c:0a:64:
f5:f6:54:c9:3e:9d:60:b8:2a:fb:dd:6c:3a:f1:1c:
d7:aa:f9:2f:15:d7:78:90:4b:3f:1c:d3:72:3c:bf:
91:78:67:22:63:1d:5b:dc:a3:b6:8f:42:fd:3f:b3:
02:34:cd:d2:a1:5f:54:6f:4c:dc:19:f4:c3:d9:b0:
f3:29:1d:07:4a:b6:7b:8c:d0:83:05:9f:e2:97:59:
19:dd:c0:8c:84:17:6c:0e:4a:4e:72:d6:f5:3b:62:
85:7b:60:5d:97:1c:c8:6b:c4:80:b8:58:1d:56:09:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:E5:E3:58:03:5D:B6:5F:B0:36:7D:44:5A:41:BC:FE:9C:62:8C
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/dNvl41gDXbZfsDZ9RFpBvP6cYow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.172.0-46.35.179.255
95.158.160.0/22
95.158.176.0/21
212.21.128.0/24
212.21.136.0-212.21.138.255
Signature Algorithm: sha256WithRSAEncryption
af:d9:9b:14:0c:f3:d0:6e:cc:40:5a:de:15:8e:26:56:ac:0a:
0f:e3:54:d4:5a:25:7d:80:4a:91:60:f8:f4:2b:0a:24:f8:5e:
53:b0:36:d0:ba:bb:ea:0a:e3:b3:cf:f4:08:65:d1:66:72:87:
6f:d6:ac:eb:ae:fd:72:c2:12:2b:30:14:a8:62:1c:e0:24:20:
84:3d:2e:ac:fe:2b:c2:cc:55:ad:9d:c3:72:f3:72:be:ff:4d:
58:7f:4e:d5:a5:be:3d:21:2f:2f:db:8b:04:40:98:e6:68:13:
a6:09:e5:92:6c:ec:a2:d8:80:f1:39:8b:a5:84:65:ca:e9:dc:
d1:3a:7c:5e:a6:bb:07:da:bb:18:13:08:5b:f3:ca:9a:98:51:
19:b5:9f:1d:e3:54:0b:83:04:7c:f1:84:e6:90:73:8a:1b:81:
73:76:b0:46:f7:54:87:e2:a6:79:ad:5a:2e:41:d7:b2:a8:24:
a2:95:c2:57:4a:5f:fe:5b:4f:fe:99:8a:03:65:04:d3:70:00:
73:88:3a:b2:67:b7:04:73:8d:f0:75:51:9c:e0:0d:1a:2c:71:
1b:b2:b1:d7:55:64:63:dc:55:7b:21:c9:86:d4:2b:e5:04:cb:
17:13:2a:60:a4:31:fa:2c:1a:e9:5b:7a:ac:d1:45:e0:b1:28:
52:a5:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:07:05 2026 by rpki-client