Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V_Npxa8doOMDBGZhgUlqrnWHWhQ.roa
File: V_Npxa8doOMDBGZhgUlqrnWHWhQ.roa (raw, json)
Hash identifier: eLEluuvrB3D7fXIPF230vCPDCPPYjiu6yII4g3ny0TU=
Subject key identifier: 57:F3:69:C5:AF:1D:A0:E3:03:04:66:61:81:49:6A:AE:75:87:5A:14
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A0247DA088E5CBB53E5C72158B52084DBC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V_Npxa8doOMDBGZhgUlqrnWHWhQ.roa
Signing time: Fri 21 Aug 2026 13:23:27 +0000
ROA not before: Fri 21 Aug 2026 13:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218979
IP address blocks: 46.37.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:7d:a0:88:e5:cb:b5:3e:5c:72:15:8b:52:08:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 21 13:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57f369c5af1da0e30304666181496aae75875a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:94:ca:ba:30:31:00:c9:db:06:23:01:3a:
b1:64:57:3a:8b:4a:ba:d8:d5:45:49:3c:1a:29:bf:
c0:07:5f:fb:e8:a5:3f:87:ef:3f:5e:7e:ac:6e:95:
4d:3f:18:ec:a7:28:90:bb:3c:c9:a7:9d:48:3b:08:
1e:ee:11:4b:a6:95:90:a7:54:90:8a:6d:c5:fb:3c:
86:7a:b9:85:28:a9:67:2d:c8:37:53:38:3d:87:66:
a5:32:ec:d7:44:8c:8d:2f:85:0d:e5:55:ea:74:1a:
2a:a8:6f:c1:fb:00:9e:20:24:ed:b7:b9:b2:17:8b:
c3:ad:f2:7f:c7:33:dd:61:ad:7e:ed:37:47:26:73:
69:f6:b1:52:4d:35:d6:4c:bd:3e:89:42:56:3b:e5:
fc:1e:d6:82:d9:89:39:48:71:a4:88:c7:c4:88:9b:
0c:6d:ee:05:4a:5f:6d:41:47:cf:9d:98:ab:d8:0d:
4b:71:25:11:ed:15:cd:ae:f7:a1:a9:51:c4:57:f7:
f0:7c:05:76:b0:0b:f7:da:e7:50:a1:a6:52:8c:8e:
99:a0:02:44:70:be:14:63:1c:41:ee:68:3b:15:fd:
e8:6e:75:5f:25:23:85:2b:ab:fb:a5:7e:37:6d:e2:
2b:a2:b5:7b:75:44:56:ac:97:39:45:2e:f6:94:e5:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F3:69:C5:AF:1D:A0:E3:03:04:66:61:81:49:6A:AE:75:87:5A:14
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V_Npxa8doOMDBGZhgUlqrnWHWhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
01:12:3d:01:6e:80:c3:3f:42:d3:ea:7c:9f:ae:ef:15:ce:25:
cc:bd:82:27:36:33:1d:ba:d0:16:25:74:ca:d1:a4:9b:1f:80:
7f:87:c5:7e:2e:1d:c3:d7:2c:32:38:bd:a0:a1:85:43:56:45:
68:79:df:b6:ce:49:e4:d4:e5:81:1e:13:32:62:fb:50:11:5b:
ec:ff:21:b2:0c:f1:cc:56:9f:6a:77:36:a4:7b:09:fe:09:8a:
f3:31:df:84:65:7d:45:47:1d:ae:cb:40:c3:8a:1b:a4:e8:a1:
6c:1d:b8:7a:ba:61:3f:79:25:f9:96:4b:ba:2c:07:02:e1:98:
ed:07:16:fd:30:cc:d9:d4:56:46:2e:d4:18:f4:16:7e:1f:dd:
34:73:96:08:09:05:13:65:b2:e3:f4:48:ee:88:28:d5:0c:8b:
55:88:e5:9f:8b:98:c9:bb:7f:2f:29:47:8c:6d:33:3a:57:7c:
4d:ea:aa:fd:38:a3:cc:5e:51:d5:3e:44:df:2c:c7:7c:a3:c0:
8d:ca:8a:3d:a6:bb:1e:9c:75:00:73:95:7e:aa:33:6f:b4:9a:
58:51:9a:0e:22:92:fe:54:50:c1:c9:8a:e0:cf:94:01:67:11:
f3:42:8d:f6:37:9c:5f:e6:d7:74:97:1a:80:95:4c:14:ac:dc:
94:3e:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:35 2026 by rpki-client