Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OUXOVX4ZwYpcYII06RIHHPvCyC8.roa
File: OUXOVX4ZwYpcYII06RIHHPvCyC8.roa (raw, json)
Hash identifier: H+nyalyzD20UhvUg0p3R08LevNAe9HuM/dHZvBKthbE=
Subject key identifier: 39:45:CE:55:7E:19:C1:8A:5C:60:82:34:E9:12:07:1C:FB:C2:C8:2F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F5540E372DD9F20650D00D70975B690EC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OUXOVX4ZwYpcYII06RIHHPvCyC8.roa
Signing time: Sun 12 Jul 2026 07:35:43 +0000
ROA not before: Sun 12 Jul 2026 07:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132335
IP address blocks: 46.37.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:40:e3:72:dd:9f:20:65:0d:00:d7:09:75:b6:90:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 12 07:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3945ce557e19c18a5c608234e912071cfbc2c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:34:0f:d8:db:71:1f:bc:56:1c:e0:70:c2:
40:79:b9:05:f7:81:05:60:9d:61:d5:8a:06:6a:dd:
ae:d7:29:b4:2d:cf:a2:4f:b4:3f:ba:53:41:93:06:
90:39:4b:d0:41:84:d6:6f:ed:8b:3e:37:e6:8c:cd:
8e:07:b1:e0:57:cf:12:a6:80:2b:a2:10:45:1f:39:
31:14:e5:a1:87:c3:41:8b:e7:a4:c8:eb:d3:62:75:
1c:f4:f1:72:19:71:b5:89:3b:54:46:aa:5e:7f:67:
11:e3:73:51:d0:78:13:7d:5f:bb:b0:18:be:c9:99:
81:0e:0a:59:5a:e4:74:fc:83:bd:5c:54:8d:a1:59:
26:8f:04:40:18:ad:7a:3f:ef:03:9c:2d:ed:a3:08:
b3:75:af:5c:b6:5e:88:63:27:54:36:50:f4:26:ef:
ec:db:e3:ca:a7:18:35:d9:21:24:5b:14:1d:a7:e9:
ec:c1:e7:7c:b5:b4:39:a1:26:95:9b:a8:ec:af:4a:
da:a2:c4:11:73:93:12:c3:32:8b:16:72:2d:b1:95:
bb:d2:dc:cc:26:be:6c:fc:0f:c0:9d:47:6c:64:9e:
07:b4:88:48:6e:bc:64:0e:1d:64:70:30:1e:8e:83:
7f:1f:2b:e0:ea:30:c5:7d:6d:e3:33:89:fb:35:61:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:CE:55:7E:19:C1:8A:5C:60:82:34:E9:12:07:1C:FB:C2:C8:2F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OUXOVX4ZwYpcYII06RIHHPvCyC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9e:ce:4b:20:f0:e7:64:b8:83:ee:f5:67:14:a5:f1:d4:83:
4f:87:20:61:9c:97:cf:e0:b6:c8:f1:58:5c:95:02:a7:6c:40:
40:0c:80:92:1b:c0:29:8e:0d:0b:fa:4b:a0:dc:70:fe:d0:d4:
6c:10:86:49:91:4f:43:7c:f3:76:f8:64:1d:e1:05:11:a1:77:
de:dc:e6:50:16:f2:9b:34:23:c6:34:34:0b:b3:0f:6b:a6:b2:
63:83:f4:1f:73:28:0b:19:c0:d2:5b:7d:8b:60:3f:3b:ee:b8:
ee:f5:56:7f:dd:74:d7:e7:3a:a9:fa:1d:db:81:f2:00:a1:e1:
f5:61:da:51:03:03:90:3f:ae:a7:b9:b4:8c:d8:b2:a6:94:31:
9b:2c:14:87:53:5c:ca:71:5f:06:08:6f:cb:2f:71:05:7a:8a:
6b:22:b4:01:00:1f:ff:c1:11:ea:74:a5:11:63:83:63:d7:8b:
24:c0:d7:da:6b:0e:1a:ca:2f:14:2e:9a:ba:e3:9c:c7:2f:f0:
36:f4:87:53:33:0a:ec:10:89:5f:a4:e6:ba:f3:54:9b:b4:f1:
6a:c7:72:2a:2e:cf:c9:0e:81:a1:59:31:59:90:b5:15:55:92:
b3:49:04:ab:d2:3d:9f:be:18:32:24:f7:43:7d:ef:db:4b:5d:
4c:3a:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:56 2026 by rpki-client