Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa
File: Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa (raw, json)
Hash identifier: zJlLvJZCYRH3Ky1xrz93dPbSl17QsTeAJvFBEc1Z8LA=
Subject key identifier: 5E:2C:75:81:0E:1E:7F:6B:87:60:9E:35:E7:D7:CE:3C:BD:D4:0C:8D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019E343176042E4A0762BF95AB28CD0EC329
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa
Signing time: Sun 17 May 2026 04:28:37 +0000
ROA not before: Sun 17 May 2026 04:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:31:76:04:2e:4a:07:62:bf:95:ab:28:cd:0e:c3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 17 04:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e2c75810e1e7f6b87609e35e7d7ce3cbdd40c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:e0:0d:11:1b:57:a7:22:4e:1d:54:a5:94:
68:41:7b:b7:82:d1:ed:f6:f4:91:f0:85:4e:3c:f9:
60:ef:13:e1:bf:ea:77:0b:9f:d1:6a:e3:9a:85:a8:
a6:53:dd:b4:bc:9a:ef:e5:40:bc:ec:99:02:9b:f5:
16:53:93:53:0a:bc:77:36:f3:bf:91:a5:d2:c3:35:
84:ce:b8:92:2d:d0:00:a1:90:02:d8:f6:74:31:3b:
1f:af:c7:49:02:b3:e9:dc:f8:a0:e0:ea:77:87:08:
93:6d:02:ec:f7:a1:47:bd:2f:c7:78:18:9d:af:b1:
c4:cb:c2:f3:1a:7b:de:b7:e9:dc:55:b0:86:b7:76:
bd:0f:24:6b:54:6f:54:0e:90:a9:3b:f9:16:70:8b:
8b:48:cc:c7:78:3f:45:32:f0:d0:e8:13:7f:83:de:
35:29:70:17:e9:61:3e:12:8e:f4:db:13:e8:f3:d5:
51:f7:07:64:f8:52:0b:44:b6:46:35:6f:0a:cf:b3:
0e:d1:48:ae:55:57:46:4f:35:91:46:89:c4:9c:ee:
be:0e:a4:82:b1:4a:ee:5e:48:65:71:b0:77:af:89:
f1:6b:54:76:59:7c:0d:2e:39:02:e8:49:af:9c:fc:
43:5f:e6:f9:b6:f2:a3:8c:9b:3e:26:39:08:f6:91:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:75:81:0E:1E:7F:6B:87:60:9E:35:E7:D7:CE:3C:BD:D4:0C:8D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0/24
46.37.102.0/24
46.37.105.0-46.37.106.255
46.37.109.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9e:ce:96:33:9d:4a:22:d4:da:b2:d9:ef:3e:91:8b:ce:38:
68:0a:99:9e:83:1d:01:17:8c:b2:e3:c9:36:8b:c9:11:ce:f6:
83:54:4d:8c:3b:56:94:d5:6a:0e:5f:b5:ad:95:03:4e:64:00:
83:36:38:f9:be:f9:39:4a:64:37:9b:b4:f4:91:be:63:38:89:
4d:16:00:42:f0:87:28:37:a9:f0:87:26:65:6b:25:24:1e:ea:
66:ed:74:f1:67:64:8a:d0:bd:7d:71:06:02:1c:e1:e4:ee:15:
c7:bf:17:d3:17:ac:ec:c4:98:bf:ae:2c:0d:ed:6e:ac:e2:86:
4a:dc:b5:e8:01:90:58:05:c3:15:75:02:83:05:95:ff:55:f8:
5e:86:ab:b2:15:c9:79:ae:f4:01:83:fb:58:b1:a5:a2:c4:89:
2b:96:c2:f9:5a:76:20:12:6c:6f:16:87:e2:67:27:66:0a:92:
ab:9a:c3:3e:32:49:76:5d:bb:4b:cf:8b:29:f3:ec:2b:3b:18:
e1:d4:9d:4c:4c:6f:8a:40:14:73:02:86:93:03:8c:49:30:13:
5d:bc:5f:fb:1a:b7:75:32:fd:e6:d4:aa:34:18:fb:f2:4b:2e:
6d:51:71:7d:2a:3d:9a:55:3f:cf:e8:f3:16:33:79:d4:49:f0:
1e:49:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 10:24:03 2026 by rpki-client