Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OcGkcDcc15k-OeJK7eJ6ufJufcc.roa
File: OcGkcDcc15k-OeJK7eJ6ufJufcc.roa (raw, json)
Hash identifier: VAI14z/hkI/DOYzrj8iQpPqsJjl05xUFa6nXMjwAxAE=
Subject key identifier: 39:C1:A4:70:37:1C:D7:99:3E:39:E2:4A:ED:E2:7A:B9:F2:6E:7D:C7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F62A1E105F9A9B8BC65E08E0A3C920362
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OcGkcDcc15k-OeJK7eJ6ufJufcc.roa
Signing time: Tue 14 Jul 2026 21:56:43 +0000
ROA not before: Tue 14 Jul 2026 21:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:a1:e1:05:f9:a9:b8:bc:65:e0:8e:0a:3c:92:03:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 14 21:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39c1a470371cd7993e39e24aede27ab9f26e7dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:ef:c8:ae:f7:c7:d0:74:e6:66:ca:27:1c:
04:00:b9:4a:7b:0f:4b:5b:d9:1f:52:a1:9d:61:9a:
e1:6c:8d:06:f0:dd:da:9b:70:a9:fe:2d:e0:30:07:
73:91:10:69:9f:d3:c9:99:9c:07:8f:79:2d:b8:42:
56:1c:4d:0f:1c:98:87:79:73:cd:d0:0c:bd:2a:2a:
cd:d1:65:e3:2b:4e:5b:fe:d8:e2:81:0e:2e:d5:b0:
4f:d0:c7:93:fc:69:1e:92:df:ea:e3:1c:d3:ff:3b:
d9:bb:a7:ac:d9:ca:e2:94:3f:8b:d1:9a:57:db:7f:
cb:22:0f:6b:c1:95:78:07:f1:21:af:81:83:36:4b:
dc:bf:d0:78:28:25:9b:91:d6:09:bc:95:a6:9d:af:
61:37:90:c6:e7:f8:3f:bf:2d:8e:44:9e:05:ca:ca:
2c:c7:d9:18:5f:56:d7:91:ae:0b:e4:7a:05:9e:0f:
02:9f:6d:3e:c9:10:79:a3:f1:fb:56:f7:4f:ef:c6:
44:e4:b3:a2:5b:70:59:28:6d:84:11:5b:2e:e7:3f:
cf:ab:18:6e:93:f2:22:06:c6:2e:24:09:ea:54:35:
85:c7:cc:2e:8a:cd:b7:b2:29:ed:45:cf:04:ea:af:
2b:b3:4d:73:db:45:af:e1:d8:c8:f0:70:ae:7f:70:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C1:A4:70:37:1C:D7:99:3E:39:E2:4A:ED:E2:7A:B9:F2:6E:7D:C7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OcGkcDcc15k-OeJK7eJ6ufJufcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c1:c6:19:e3:40:e3:6f:db:0b:13:2e:d2:06:b0:73:1e:e9:
31:8b:52:04:49:82:7b:9e:20:7c:00:4b:50:7f:b0:ce:9f:41:
3b:db:67:e9:34:66:9a:57:4e:46:bc:66:cd:0e:cc:88:ee:f3:
9b:5c:3b:8d:ca:25:32:51:9e:c9:11:ba:ae:1a:dc:65:80:56:
cc:45:56:6c:f7:22:61:c8:6a:c4:66:12:83:a1:d3:9a:08:61:
a4:ee:83:33:89:95:23:67:bd:67:67:e3:77:e5:3d:e0:ff:83:
83:15:31:40:23:b6:c1:1e:c8:58:4d:fa:a8:03:f7:76:04:1c:
6f:d5:b8:06:52:a9:6e:d5:91:53:e2:af:57:e3:35:0a:9a:bc:
99:44:22:8c:5a:7b:92:3a:a0:f5:60:df:8f:5f:31:aa:1f:74:
fb:81:53:56:0b:97:ad:08:81:82:15:a2:13:74:bb:79:46:71:
2b:85:f4:77:3e:82:21:c0:5e:c4:77:b7:95:8d:51:56:3b:d5:
de:9e:40:df:5f:7f:e9:64:b1:72:71:af:25:ad:dd:53:c3:f6:
57:a4:e9:29:60:36:12:84:ed:3b:87:5a:83:7f:67:b2:8c:40:
fb:04:ea:03:5b:e1:04:bf:e2:fc:e3:22:b7:a7:76:b8:57:0f:
90:13:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:25 2026 by rpki-client