Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ImLdsVbeltedb4_H6AH3Vde7_dI.roa
File: ImLdsVbeltedb4_H6AH3Vde7_dI.roa (raw, json)
Hash identifier: 6xNUApitHdOm10UYaXH+RfVpv3kcUSqZsFndUcuts2E=
Subject key identifier: 22:62:DD:B1:56:DE:96:D7:9D:6F:8F:C7:E8:01:F7:55:D7:BB:FD:D2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A058940CD0AB998467C4668054B3DCC84F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ImLdsVbeltedb4_H6AH3Vde7_dI.roa
Signing time: Mon 31 Aug 2026 16:08:12 +0000
ROA not before: Mon 31 Aug 2026 16:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.112.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:94:0c:d0:ab:99:84:67:c4:66:80:54:b3:dc:c8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 31 16:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2262ddb156de96d79d6f8fc7e801f755d7bbfdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:db:3e:10:4d:8e:44:e7:86:53:a6:bc:4c:
52:98:ce:75:aa:91:97:84:37:b3:a2:f6:9d:4c:3f:
78:fa:48:fe:3f:27:2a:7b:4e:36:a6:b2:c0:d5:42:
7b:e7:ee:0a:58:e3:74:66:00:9f:5f:c8:f3:92:3d:
b1:17:21:fe:a0:36:93:51:2f:13:bd:a2:bf:cd:43:
b0:c7:19:ac:92:95:29:7b:41:56:e2:72:c2:a3:b0:
bf:d4:48:19:ed:47:bd:62:16:21:71:99:42:01:bd:
cc:56:26:c2:b8:4c:14:18:0b:f2:97:0c:ad:ce:c5:
0f:10:0c:36:9f:63:44:3b:1d:2c:41:9d:ca:2c:7f:
77:d7:7d:90:57:0d:09:84:cd:3e:2e:f6:9f:33:71:
98:26:61:91:35:bf:fc:95:8a:db:f3:bb:75:9b:eb:
9f:2a:8e:af:fe:b8:6b:ec:83:bd:56:a5:b0:d6:20:
70:70:78:7b:d8:97:7c:d3:ac:4d:44:2b:9b:47:29:
7c:5f:28:d2:17:93:52:23:b2:5b:b3:59:27:ef:1f:
6c:e5:6d:e9:01:a5:cd:3f:f4:99:63:b5:cb:22:b1:
ca:9c:cf:49:f9:bd:ba:20:5d:4c:10:7a:48:0d:1f:
b5:2a:ef:01:8f:2a:e0:af:bd:8b:61:44:3e:6f:be:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:62:DD:B1:56:DE:96:D7:9D:6F:8F:C7:E8:01:F7:55:D7:BB:FD:D2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ImLdsVbeltedb4_H6AH3Vde7_dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.112.0/24
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
19:38:fd:13:a5:ec:a9:bc:4d:04:01:bd:40:d4:45:e1:66:77:
c5:e4:c3:45:44:9c:eb:a5:f5:d1:a4:9a:26:40:d6:f3:f1:71:
d5:57:a0:2a:07:53:f7:db:6a:89:08:e8:d1:5f:db:68:b2:80:
6b:71:46:e9:5b:b8:c2:a2:87:c4:a1:0c:41:5f:24:de:78:0b:
46:46:ff:dc:b9:db:a8:58:e8:bd:b6:50:d4:16:cd:50:3a:3b:
22:fa:9c:6c:53:e8:93:fd:47:e1:cf:c7:31:f4:22:b0:7e:5b:
10:c3:1f:b7:d2:7a:0e:1a:5d:ba:8c:ba:fa:90:34:5f:0f:60:
de:06:76:3a:42:4c:0c:52:ff:79:f4:ee:cb:b1:17:c0:4a:6b:
34:45:d9:19:f9:f4:32:54:ef:1c:5c:24:3c:f5:3a:0f:f0:71:
e7:8d:23:bb:05:01:ef:a3:d9:e4:d7:3b:8d:e1:ce:6f:ce:87:
15:04:b5:34:90:ab:be:7d:a3:ad:35:ad:b2:88:5f:d1:c0:00:
39:c1:51:86:f3:13:93:d5:72:73:69:74:82:7e:be:47:29:96:
4b:2a:4b:d9:ed:c9:c4:17:44:20:32:44:e1:8a:a1:8c:ad:94:
8c:29:71:df:13:50:bf:8c:fb:7a:47:70:4e:66:21:af:8d:ce:
10:08:22:18
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaBYlAzQq5mEZ8RmgFSz3MhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjYwODMxMTYwODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjYyZGRiMTU2ZGU5NmQ3OWQ2ZjhmYzdlODAxZjc1NWQ3YmJmZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPfbPhBNjkTnhlOmvExSmM51qpGX
hDezovadTD94+kj+Pycqe042prLA1UJ75+4KWON0ZgCfX8jzkj2xFyH+oDaTUS8T
vaK/zUOwxxmskpUpe0FW4nLCo7C/1EgZ7Ue9YhYhcZlCAb3MVibCuEwUGAvylwyt
zsUPEAw2n2NEOx0sQZ3KLH93132QVw0JhM0+LvafM3GYJmGRNb/8lYrb87t1m+uf
Ko6v/rhr7IO9VqWw1iBwcHh72Jd806xNRCubRyl8XyjSF5NSI7Jbs1kn7x9s5W3p
AaXNP/SZY7XLIrHKnM9J+b26IF1MEHpIDR+1Ku8Bjyrgr72LYUQ+b75mXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCJi3bFW3pbXnW+Px+gB91XXu/3SMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvSW1MZHNWYmVsdGVkYjRfSDZBSDNWZGU3X2RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALiViAwQA
LiVwAwQAW83kAwQAuVwuMA0GCSqGSIb3DQEBCwUAA4IBAQAZOP0TpeypvE0EAb1A
1EXhZnfF5MNFRJzrpfXRpJomQNbz8XHVV6AqB1P322qJCOjRX9tosoBrcUbpW7jC
oofEoQxBXyTeeAtGRv/cuduoWOi9tlDUFs1QOjsi+pxsU+iT/Ufhz8cx9CKwflsQ
wx+30noOGl26jLr6kDRfD2DeBnY6QkwMUv959O7LsRfASms0RdkZ+fQyVO8cXCQ8
9ToP8HHnjSO7BQHvo9nk1zuN4c5vzocVBLU0kKu+faOtNa2yiF/RwAA5wVGG8xOT
1XJzaXSCfr5HKZZLKkvZ7cnEF0QgMkThiqGMrZSMKXHfE1C/jPt6R3BOZiGvjc4Q
CCIY
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:22 2026 by rpki-client