Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/d09V5eWhYv9aykbhDD8PZZhSkDY.roa
File: d09V5eWhYv9aykbhDD8PZZhSkDY.roa (raw, json)
Hash identifier: eCHaD+x218KDcdTbF1dK/1E4f55+dTQp2/AUHsT1heU=
Subject key identifier: 77:4F:55:E5:E5:A1:62:FF:5A:CA:46:E1:0C:3F:0F:65:98:52:90:36
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019FEA47F17E350A22C60ACCE0E22D6B49A9
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/d09V5eWhYv9aykbhDD8PZZhSkDY.roa
Signing time: Mon 10 Aug 2026 06:06:51 +0000
ROA not before: Mon 10 Aug 2026 06:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 46.183.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:47:f1:7e:35:0a:22:c6:0a:cc:e0:e2:2d:6b:49:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Aug 10 06:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=774f55e5e5a162ff5aca46e10c3f0f6598529036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:da:20:68:d4:9d:f9:0e:3a:89:66:cc:b4:
56:e7:b7:fb:51:4a:be:3d:59:5e:f8:0e:2b:28:37:
b4:1a:8c:5c:5a:f7:b2:c2:1b:5f:54:72:bd:7d:6e:
2c:d8:2c:cd:ee:46:fa:d4:df:25:63:1e:43:0a:9f:
d0:06:e4:a3:67:f8:57:73:0e:78:b8:b3:8b:29:5f:
5d:87:db:51:3f:36:1b:e7:e9:3f:dc:ee:21:1a:ba:
dc:1a:25:04:db:6f:83:61:41:43:77:34:3a:46:ea:
de:d8:9e:ef:40:d7:20:ae:d2:ed:e6:d2:b5:21:89:
e1:d3:f4:ab:82:07:0a:86:89:3b:99:2e:ff:5b:32:
25:c2:0f:a2:6f:3a:9d:4a:8e:6b:77:eb:bd:d2:85:
7e:f6:8b:e7:a5:59:ec:b2:e5:96:9c:30:d2:6b:68:
44:78:42:f0:9f:66:0b:c8:c6:28:f4:74:fe:dd:96:
fd:82:b5:25:1f:6f:c4:22:48:29:1e:e0:27:8d:38:
6c:d3:36:40:ca:da:6b:c5:ab:c2:82:79:4e:19:0a:
ce:9b:8b:fa:3e:6c:9f:d3:eb:ae:a3:88:f1:8c:06:
7a:2e:6f:fc:9b:86:38:1e:b8:34:1f:5a:5a:43:61:
de:6d:d8:82:b7:79:73:28:12:3b:08:3a:1a:40:25:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4F:55:E5:E5:A1:62:FF:5A:CA:46:E1:0C:3F:0F:65:98:52:90:36
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/d09V5eWhYv9aykbhDD8PZZhSkDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.22.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bd:13:1b:a8:2d:6e:28:f6:0d:f7:c0:ab:80:e1:49:fa:42:
19:f0:32:eb:59:09:90:0e:c2:4b:f8:bf:10:17:b3:f7:1f:42:
88:6d:c4:0d:cd:d6:94:67:38:c8:7c:d4:81:cf:bc:56:3e:0c:
e9:04:18:2d:31:78:51:b2:98:e2:51:cc:4b:b6:5a:76:d3:34:
e7:9b:ea:ae:48:88:94:31:71:4f:79:b3:c1:b8:6b:cc:12:3d:
ad:fd:38:4c:34:a5:69:3b:79:16:9d:89:cc:80:04:7d:bb:64:
e1:b2:fe:37:5a:a3:4a:9a:90:6e:c9:eb:73:f9:a6:b4:cb:00:
7a:67:ca:67:12:7d:fb:32:41:50:d3:48:f0:c1:b7:f5:da:41:
3e:01:48:b3:c0:53:8b:36:cc:a1:75:48:c4:40:41:c5:0a:1a:
5f:58:72:12:c2:d8:75:3e:97:57:b6:35:cb:76:a3:4b:f3:7a:
23:97:dc:c8:c2:40:6b:81:24:90:f3:86:b9:34:00:6c:00:64:
bc:97:f5:69:42:34:95:bc:59:92:61:c6:14:e6:78:1f:0e:53:
02:68:66:96:60:2a:73:71:46:8c:c7:f9:d4:38:ea:90:e2:f0:
44:bc:a1:2b:d3:39:c5:02:ac:f2:68:bc:6f:a8:a7:ba:9b:55:
96:26:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:37 2026 by rpki-client