Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/RLXfsnA52ONvR-pVImnN9kg-ZDo.roa
File: RLXfsnA52ONvR-pVImnN9kg-ZDo.roa (raw, json)
Hash identifier: AdncPx8vuv15Amd8OjaWf0TvfsJR+bOBvzyP8SuK2Es=
Subject key identifier: 44:B5:DF:B2:70:39:D8:E3:6F:47:EA:55:22:69:CD:F6:48:3E:64:3A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019FEBC78CAFDDEAC3FE00FE3DE51A8E42EA
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/RLXfsnA52ONvR-pVImnN9kg-ZDo.roa
Signing time: Mon 10 Aug 2026 13:05:51 +0000
ROA not before: Mon 10 Aug 2026 13:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.111.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:c7:8c:af:dd:ea:c3:fe:00:fe:3d:e5:1a:8e:42:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 10 13:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44b5dfb27039d8e36f47ea552269cdf6483e643a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:6c:f8:30:a0:59:91:ec:7b:98:01:ef:92:
8d:4d:da:e2:9c:f3:28:ce:06:8f:af:33:b0:1f:ce:
6f:f4:3f:43:1d:49:80:2b:cb:72:8f:b7:1d:6c:82:
4a:2e:0d:20:14:4c:fd:5a:08:7b:f9:38:06:5d:86:
a2:42:5a:14:9c:bf:64:5e:de:19:10:4f:fc:6b:92:
92:a6:14:7f:ac:44:20:51:a1:8b:39:fd:dc:ed:e3:
81:12:03:bb:5f:31:d5:55:7c:98:86:95:a8:aa:df:
f2:43:d0:4a:46:62:85:23:eb:0d:97:1f:ff:11:e6:
80:56:91:59:50:40:35:ee:eb:43:67:b2:26:fc:05:
cb:11:34:67:4a:21:3a:b9:64:f4:2e:25:ce:46:77:
05:d0:98:26:6a:04:e8:66:97:bb:6a:8f:5c:46:17:
31:64:76:05:87:7a:48:14:e8:e0:8d:46:27:c4:a6:
da:4b:e4:bb:7b:bb:56:17:79:59:bc:1d:74:c3:41:
86:08:4b:1f:ad:19:5b:99:fd:bf:6e:b4:6a:e2:88:
70:85:0d:7c:10:14:0b:b3:2f:9e:9f:d0:e3:64:b8:
8e:3e:52:69:70:b7:9d:c1:1e:08:79:b4:80:44:cd:
26:31:e4:19:c2:c0:45:ae:26:4b:51:8c:79:d6:2e:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:DF:B2:70:39:D8:E3:6F:47:EA:55:22:69:CD:F6:48:3E:64:3A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/RLXfsnA52ONvR-pVImnN9kg-ZDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.101.0/24
46.37.111.0/24
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
85:20:5c:ef:1d:f3:7c:b2:14:e7:71:66:87:a2:62:93:87:9e:
24:a0:00:c9:0c:d9:9f:8d:be:5e:71:62:b9:72:44:ff:9d:ab:
65:f3:be:e4:84:35:08:12:59:45:87:4a:06:6c:ac:8e:a1:1b:
ce:45:c3:06:9e:ff:a5:c1:93:27:01:09:6d:9d:80:34:4c:64:
4f:97:97:10:fa:f5:69:ee:e2:07:62:03:78:b8:78:22:43:91:
69:ad:4b:92:34:81:18:ec:22:e4:20:11:d6:13:28:26:26:9c:
75:19:bf:1e:1d:5e:e5:be:3e:ea:6c:90:0e:54:d1:3e:ab:79:
4c:15:fd:06:cf:cc:0f:70:8a:02:1b:e9:3a:9c:45:f5:60:8c:
c3:05:bf:29:d5:3f:8b:8f:7a:d8:f4:f8:01:9f:14:d9:55:14:
f1:7d:fe:ec:12:1c:fa:88:01:b1:17:1b:e1:2e:9a:de:73:61:
9d:59:5c:31:38:2f:4e:03:29:d2:fb:7e:27:7e:41:be:c3:b0:
87:26:c8:36:36:83:09:84:be:7d:7b:db:2c:0f:e5:c7:c6:ee:
79:bd:1d:9e:86:b5:c7:f7:b4:48:3e:d9:d0:44:29:74:d7:e0:
34:7a:53:9e:0b:39:91:cc:53:58:5f:e6:e6:01:65:df:7b:c7:
58:ae:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:04 2026 by rpki-client