Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EF_U3I32Y5RdvbXqEmBTtMapEa8.roa
File: EF_U3I32Y5RdvbXqEmBTtMapEa8.roa (raw, json)
Hash identifier: sIzDhi/oGDul4JL44c5eU+5E68fjPASfb0dG/ED5Apo=
Subject key identifier: 10:5F:D4:DC:8D:F6:63:94:5D:BD:B5:EA:12:60:53:B4:C6:A9:11:AF
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019C694C491F154E8F7483A168035904C0E3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EF_U3I32Y5RdvbXqEmBTtMapEa8.roa
Signing time: Tue 17 Feb 2026 01:52:13 +0000
ROA not before: Tue 17 Feb 2026 01:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:69:4c:49:1f:15:4e:8f:74:83:a1:68:03:59:04:c0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 17 01:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=105fd4dc8df663945dbdb5ea126053b4c6a911af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:b5:65:e9:13:31:3c:e4:d5:9f:3c:49:27:
cd:d1:08:8e:94:91:e5:9e:53:4c:be:21:bb:0d:f9:
62:72:88:21:32:c3:7b:8d:59:e6:3c:26:fb:0f:f7:
d2:b5:37:45:57:3c:28:42:a1:11:f6:6f:58:c7:2b:
26:35:7e:75:93:57:ab:98:01:18:90:0b:7d:c9:93:
a4:5b:9e:25:0e:71:49:cb:a6:07:dd:21:5f:46:a6:
77:1b:12:1e:1a:1d:ab:e1:71:05:47:da:7b:0a:70:
cc:5d:b1:3a:66:c8:6d:ff:2c:a3:b4:af:d7:85:91:
83:1c:1f:5d:c5:8c:c3:d4:23:0c:93:b5:32:85:90:
ef:95:cd:75:a2:ae:4d:da:be:94:b9:3e:c1:e3:40:
57:e7:07:6c:ce:5f:1b:02:89:7b:59:e9:4f:8b:bb:
65:85:c4:1f:e5:95:4b:87:c2:9a:a2:f6:88:c4:b6:
2f:66:fb:8f:27:a1:a4:6b:7b:5c:70:0a:ce:08:0a:
86:1f:24:35:70:4e:8a:2f:c2:42:9e:e1:76:cc:9e:
7c:9c:67:61:a6:ac:bb:65:0f:09:0b:58:0b:3b:8b:
0a:44:3c:9d:1e:3c:2a:e2:0c:68:6b:25:ec:eb:9d:
88:2d:75:20:25:7a:c3:77:b5:2e:8a:21:bc:76:92:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:D4:DC:8D:F6:63:94:5D:BD:B5:EA:12:60:53:B4:C6:A9:11:AF
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EF_U3I32Y5RdvbXqEmBTtMapEa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:13:32:ec:a9:5a:03:61:53:45:9b:00:e4:15:49:60:21:4a:
db:0e:67:da:52:4d:b3:a1:a0:1a:7b:44:c4:70:db:76:b2:03:
b2:6c:64:23:19:c5:f8:6f:1a:83:46:c7:1b:44:8f:1c:db:fe:
c8:9e:9e:43:ea:41:dd:d9:5c:1c:e2:71:58:55:87:fb:04:6c:
34:e0:6f:d1:ef:72:c8:29:2f:47:c4:c3:69:ac:12:c0:f2:46:
0b:5b:8b:a0:d7:a3:84:62:0e:84:2f:a4:79:6e:1e:bd:6d:0b:
bd:e5:12:b0:b4:11:88:a0:bc:b8:80:35:e5:b5:04:2d:f1:61:
41:fd:5a:bd:29:ad:ac:d1:d5:86:a1:c6:57:a9:8f:ae:53:6c:
c3:9d:8a:15:df:e7:f5:74:6c:b7:59:c2:06:79:8d:82:9e:59:
67:da:f5:41:08:87:7f:19:99:3b:af:1d:62:56:55:7b:dd:52:
74:9c:83:6a:96:ea:35:0d:cd:1d:b2:ff:f0:88:94:20:ef:a8:
85:6b:7c:72:4b:4f:b2:d4:65:b1:74:7f:72:a8:9f:37:4d:92:
df:1f:46:6f:56:27:b9:5a:d7:21:78:2a:ba:7e:b0:ca:67:e8:
79:b9:2a:89:93:78:f9:c0:ed:65:91:33:ab:00:24:8f:7c:c8:
37:30:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:29:56 2026 by rpki-client