Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/QofgAcQ6rB9Y_geRWmdZW8lcuqc.roa
File: QofgAcQ6rB9Y_geRWmdZW8lcuqc.roa (raw, json)
Hash identifier: /J/c4HKYjpFM0/N/PdvgakhM2YXf1vanLf0hw+8Wkxo=
Subject key identifier: 42:87:E0:01:C4:3A:AC:1F:58:FE:07:91:5A:67:59:5B:C9:5C:BA:A7
Certificate issuer: /CN=622dd3789c7a68e577fed8ba490bdf752a812652
Certificate serial: 019F236916CF4B5BBF8402E505C81B5F981B
Authority key identifier: 62:2D:D3:78:9C:7A:68:E5:77:FE:D8:BA:49:0B:DF:75:2A:81:26:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi3TeJx6aOV3_ti6SQvfdSqBJlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/QofgAcQ6rB9Y_geRWmdZW8lcuqc.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48416
IP address blocks: 46.32.64.0/22 maxlen: 22
46.32.68.0/22 maxlen: 22
46.32.72.0/22 maxlen: 22
46.32.76.0/22 maxlen: 22
46.32.80.0/22 maxlen: 22
46.32.84.0/22 maxlen: 22
46.32.88.0/22 maxlen: 22
46.32.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/Yi3TeJx6aOV3_ti6SQvfdSqBJlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/Yi3TeJx6aOV3_ti6SQvfdSqBJlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi3TeJx6aOV3_ti6SQvfdSqBJlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:cf:4b:5b:bf:84:02:e5:05:c8:1b:5f:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622dd3789c7a68e577fed8ba490bdf752a812652
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4287e001c43aac1f58fe07915a67595bc95cbaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:00:3e:87:b6:4e:eb:81:43:67:c6:d1:96:
4b:a6:84:e0:49:42:17:90:b3:1f:54:c9:67:8e:ed:
a1:83:4e:f2:1a:82:4d:73:15:60:a2:4e:14:f7:21:
f3:ce:05:54:76:f7:a5:f6:53:7a:51:98:88:be:b6:
e2:7c:63:f0:6c:61:e2:56:8c:da:f4:a6:97:2c:e3:
42:33:2c:e0:92:44:bc:b4:35:e8:fb:53:d3:26:83:
ba:53:35:07:83:89:60:ba:8c:c8:f5:9a:5e:48:fb:
33:9f:2a:e7:08:cf:f6:71:13:da:d4:d3:85:be:26:
e2:80:e3:71:5b:18:8f:db:2b:3c:05:16:86:fa:90:
e8:ac:4e:47:7b:7f:fa:ee:19:99:1a:9a:72:89:be:
1d:a7:91:f0:33:5d:4b:eb:36:8f:d8:84:61:5a:5e:
4a:eb:69:e4:f6:3e:11:b5:5d:47:21:ef:ea:8b:eb:
fa:fa:68:2b:6a:1c:4a:ef:24:99:fc:b4:cc:17:e8:
c9:84:75:f0:6c:89:c0:9c:c8:f4:bd:13:12:ff:44:
fc:25:4f:33:d7:e5:c3:56:08:4b:48:fb:0a:fd:3a:
78:a7:1f:e3:55:43:d8:26:91:e9:4b:53:c6:25:e1:
29:6d:c2:2c:3c:b9:15:78:9f:f7:a7:ec:66:7f:bf:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:E0:01:C4:3A:AC:1F:58:FE:07:91:5A:67:59:5B:C9:5C:BA:A7
X509v3 Authority Key Identifier:
keyid:62:2D:D3:78:9C:7A:68:E5:77:FE:D8:BA:49:0B:DF:75:2A:81:26:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi3TeJx6aOV3_ti6SQvfdSqBJlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/QofgAcQ6rB9Y_geRWmdZW8lcuqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/Yi3TeJx6aOV3_ti6SQvfdSqBJlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.64.0/19
Signature Algorithm: sha256WithRSAEncryption
32:73:88:91:ed:54:a8:fa:96:50:91:17:51:76:03:aa:20:0c:
e1:db:b2:61:80:4b:e1:53:cd:ec:23:28:57:d4:c4:3d:75:ff:
30:9b:d9:d9:88:1f:07:23:71:e9:3a:c0:0c:c9:03:a2:9a:31:
1c:0c:76:11:b5:eb:ce:cc:88:96:69:49:65:e4:52:a8:e9:40:
dc:6b:5b:17:3c:0a:3f:14:1e:24:61:87:2e:8a:0f:57:b3:d7:
fc:30:f6:8e:6e:2c:ab:e6:d6:55:55:56:14:13:01:fd:1e:32:
9a:22:69:e6:95:dc:08:b1:02:1a:db:34:de:82:79:35:5c:92:
19:9d:23:48:82:b7:9f:4c:7c:ca:30:76:f9:0d:7c:7e:0b:dc:
de:a9:95:09:e0:bb:d1:64:b0:c7:f0:0b:dc:47:80:b1:51:0d:
d6:52:b1:ad:c7:b4:45:69:bc:e4:ab:ea:39:fc:16:4d:0d:07:
e4:85:c6:3a:3a:13:59:8f:6d:a6:95:4e:dd:96:5b:45:6e:38:
bd:e6:a6:b2:01:39:46:10:20:49:f6:4f:92:f0:43:ec:0d:62:
d4:05:ef:d9:a3:18:74:cc:37:2c:ef:d1:c7:04:a1:a7:3f:cc:
32:cb:52:52:a3:c9:aa:e4:b2:b2:5e:c0:61:9a:a1:38:b2:0f:
90:30:3e:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRbPS1u/hALlBcgbX5gbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmRkMzc4OWM3YTY4ZTU3N2ZlZDhiYTQ5MGJkZjc1MmE4
MTI2NTIwHhcNMjYwNzAyMTUxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjg3ZTAwMWM0M2FhYzFmNThmZTA3OTE1YTY3NTk1YmM5NWNiYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDYAPoe2TuuBQ2fG0ZZLpoTgSUIX
kLMfVMlnju2hg07yGoJNcxVgok4U9yHzzgVUdvel9lN6UZiIvrbifGPwbGHiVoza
9KaXLONCMyzgkkS8tDXo+1PTJoO6UzUHg4lguozI9ZpeSPsznyrnCM/2cRPa1NOF
vibigONxWxiP2ys8BRaG+pDorE5He3/67hmZGppyib4dp5HwM11L6zaP2IRhWl5K
62nk9j4RtV1HIe/qi+v6+mgrahxK7ySZ/LTMF+jJhHXwbInAnMj0vRMS/0T8JU8z
1+XDVghLSPsK/Tp4px/jVUPYJpHpS1PGJeEpbcIsPLkVeJ/3p+xmf7/IgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKH4AHEOqwfWP4HkVpnWVvJXLqnMB8GA1UdIwQY
MBaAFGIt03icemjld/7YukkL33UqgSZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWkzVGVKeDZhT1YzX3RpNlNRdmZkU3FCSmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEt
YzI2NGI3NWI2Yjc4LzEvUW9mZ0FjUTZyQjlZX2dlUldtZFpXOGxjdXFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEtYzI2NGI3NWI2Yjc4
LzEvWWkzVGVKeDZhT1YzX3RpNlNRdmZkU3FCSmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLiBAMA0G
CSqGSIb3DQEBCwUAA4IBAQAyc4iR7VSo+pZQkRdRdgOqIAzh27JhgEvhU83sIyhX
1MQ9df8wm9nZiB8HI3HpOsAMyQOimjEcDHYRtevOzIiWaUll5FKo6UDca1sXPAo/
FB4kYYcuig9Xs9f8MPaObiyr5tZVVVYUEwH9HjKaImnmldwIsQIa2zTegnk1XJIZ
nSNIgrefTHzKMHb5DXx+C9zeqZUJ4LvRZLDH8AvcR4CxUQ3WUrGtx7RFabzkq+o5
/BZNDQfkhcY6OhNZj22mlU7dlltFbji95qayATlGECBJ9k+S8EPsDWLUBe/Zoxh0
zDcs79HHBKGnP8wyy1JSo8mq5LKyXsBhmqE4sg+QMD7l
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:11 2026 by rpki-client