Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JN5Xl2itZnfoN1-AHrSGf0M9a-A.roa
File: JN5Xl2itZnfoN1-AHrSGf0M9a-A.roa (raw, json)
Hash identifier: PeeO/UBb3bHdKEGFa7zXlFuiaEiMJi1ody98bu4CNSk=
Subject key identifier: 24:DE:57:97:68:AD:66:77:E8:37:5F:80:1E:B4:86:7F:43:3D:6B:E0
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019F12D4AF890284D375794D6BE9334F495F
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JN5Xl2itZnfoN1-AHrSGf0M9a-A.roa
Signing time: Mon 29 Jun 2026 10:02:36 +0000
ROA not before: Mon 29 Jun 2026 10:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203622
IP address blocks: 46.32.160.0/24 maxlen: 24
46.32.161.0/24 maxlen: 24
46.32.164.0/24 maxlen: 24
46.32.165.0/24 maxlen: 24
46.32.166.0/24 maxlen: 24
46.32.167.0/24 maxlen: 24
46.32.170.0/24 maxlen: 24
46.32.171.0/24 maxlen: 24
46.32.172.0/24 maxlen: 24
46.32.189.0/24 maxlen: 24
46.32.190.0/24 maxlen: 24
46.32.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d4:af:89:02:84:d3:75:79:4d:6b:e9:33:4f:49:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jun 29 10:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24de579768ad6677e8375f801eb4867f433d6be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:2c:37:8d:72:5f:07:b0:cf:fc:6b:ba:b7:
f7:dd:41:5e:a0:cc:17:8e:d7:f4:e2:d1:ed:6b:b1:
d7:d3:c0:51:11:e8:1c:54:0a:8e:52:4e:b6:db:bf:
1b:12:07:e9:c2:7a:e2:5b:7d:83:43:e4:94:1e:a1:
be:4a:04:05:67:35:bd:57:ff:c6:be:c6:6e:27:9e:
fd:67:bf:9c:59:da:10:0f:2f:f3:48:f6:48:83:23:
6f:03:6b:24:8d:44:c7:fc:9d:1d:6b:ab:5c:f6:55:
4a:f7:e0:53:18:53:ad:2e:76:58:40:d1:d7:4e:0d:
a9:ef:d6:e9:e3:38:35:f7:d2:11:0a:12:57:15:ce:
ae:83:b2:c2:09:bf:e0:1b:51:5c:f0:5c:5d:88:c1:
62:2c:be:5f:7f:2d:d6:51:88:05:39:ef:f1:bf:b9:
09:14:af:6e:70:28:92:e4:e3:40:64:8b:e9:19:9c:
33:7f:b8:80:ee:76:76:07:7c:8f:3f:0f:c0:d8:ee:
00:f4:6c:ac:2c:90:c0:c3:44:a4:02:ac:35:68:1c:
c9:2e:18:22:72:82:d1:e1:82:d1:5d:e2:c8:0c:30:
34:3a:4e:f5:de:e5:9b:c8:af:ce:ff:91:8e:8e:a1:
2c:2c:e5:30:25:b4:be:96:c7:80:c8:5b:89:d9:84:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:57:97:68:AD:66:77:E8:37:5F:80:1E:B4:86:7F:43:3D:6B:E0
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JN5Xl2itZnfoN1-AHrSGf0M9a-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.160.0/23
46.32.164.0/22
46.32.170.0-46.32.172.255
46.32.189.0-46.32.191.255
Signature Algorithm: sha256WithRSAEncryption
4c:2f:e2:0a:20:a3:2b:f1:09:ae:ad:20:b8:84:7b:40:5b:3d:
9e:60:05:88:b4:a2:53:b0:5b:4b:a1:69:f3:b4:d3:5f:91:8c:
a0:48:5b:7e:47:bc:a1:60:25:9c:4a:9d:d7:24:53:6c:10:22:
2b:81:21:fb:fa:cb:a2:b1:f5:66:49:a5:74:1a:33:e8:ae:2e:
88:4c:23:3a:6d:13:5c:43:c4:09:f6:9f:fb:a6:96:34:65:f3:
11:af:74:a5:77:3b:a9:2e:9b:86:30:50:be:f1:c1:1e:b4:25:
b1:07:7b:42:fe:71:fb:aa:c5:87:11:71:f6:dc:57:c6:57:7b:
47:a7:51:30:84:19:c5:c1:51:0e:07:84:33:91:ee:25:04:1a:
70:a7:1c:e6:61:76:fc:f1:ab:cb:a3:5b:a9:71:95:81:3d:f1:
93:27:07:9b:fb:2f:74:18:6e:22:1f:3d:d9:26:92:22:25:90:
fa:a2:dd:b8:57:d2:69:d1:41:8c:36:1b:a2:13:85:6b:21:cb:
0d:ae:2d:d0:fd:5d:05:8f:41:39:d2:d3:b6:2e:7f:84:c0:3f:
77:7a:f2:2c:4c:ec:b8:b8:03:e6:63:7d:26:8b:38:88:07:10:
9f:15:24:13:ed:e7:45:6e:a9:bf:04:46:24:20:1b:92:b0:84:
da:72:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:27:16 2026 by rpki-client