Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/aoxpvJQp55z0b_A4747Hb-Vn3dc.roa
File: aoxpvJQp55z0b_A4747Hb-Vn3dc.roa (raw, json)
Hash identifier: KFOKBPs3AJlg/zbLl0vaUoAtOtEGw1Vqk5M7i3lMUY8=
Subject key identifier: 6A:8C:69:BC:94:29:E7:9C:F4:6F:F0:38:EF:8E:C7:6F:E5:67:DD:D7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A01AD78A330323A78589DEF0B545C37629
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/aoxpvJQp55z0b_A4747Hb-Vn3dc.roa
Signing time: Wed 19 Aug 2026 16:25:28 +0000
ROA not before: Wed 19 Aug 2026 16:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203446
IP address blocks: 46.37.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:d7:8a:33:03:23:a7:85:89:de:f0:b5:45:c3:76:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 19 16:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a8c69bc9429e79cf46ff038ef8ec76fe567ddd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:80:d9:56:95:f4:18:52:88:5f:2c:c9:f2:
96:4d:7e:82:b9:6b:bf:60:2c:a7:3a:0e:5d:26:f4:
2b:1e:96:12:84:5d:4b:d2:c5:51:9b:3f:e0:a5:71:
22:03:f4:cb:1a:83:4e:74:37:83:e8:0b:b3:8d:f3:
2a:a9:fd:03:5f:21:c5:7e:66:dd:85:bd:92:bf:ef:
d2:97:44:89:c5:2d:e5:76:4c:0a:a7:43:25:09:2b:
33:83:00:b8:a5:45:80:c0:e3:21:f7:ef:29:e3:f9:
a6:d8:a4:4c:c6:a8:74:39:8e:cd:d6:b2:ef:b5:2e:
76:41:98:4b:aa:74:c8:21:8a:4a:34:2e:36:c1:f1:
e3:5a:e6:cd:fe:4b:a0:bc:36:64:33:5a:a1:a4:7f:
bb:01:20:90:1c:e6:72:8f:df:2b:f1:0b:49:b1:7b:
18:a6:9d:e0:70:eb:87:0f:44:ba:e1:1a:5c:16:e9:
37:ab:9b:14:5d:ce:e5:18:02:28:c6:6b:b5:1d:0c:
2a:b2:7f:c8:a1:5b:b5:69:7c:6f:23:0e:11:d7:7d:
4f:45:91:9a:7f:2b:ff:b9:19:e0:86:b8:dd:11:1a:
27:96:02:3c:ff:aa:83:96:82:c0:3e:3f:9d:14:06:
13:c1:cb:37:15:dc:7d:34:89:fa:35:68:f6:46:19:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:69:BC:94:29:E7:9C:F4:6F:F0:38:EF:8E:C7:6F:E5:67:DD:D7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/aoxpvJQp55z0b_A4747Hb-Vn3dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a3:a5:5c:05:4f:31:df:9e:f2:38:0b:21:d4:8f:b2:a0:fe:
d9:ac:c6:ab:b8:31:90:b1:f7:2b:fe:01:b4:59:80:13:46:af:
0e:7c:8d:52:ff:29:eb:ef:bf:68:87:45:30:c9:ea:e6:b0:ec:
81:f7:28:9e:7f:49:c6:dc:b3:f5:9d:d4:c3:c7:3e:50:7a:15:
03:b5:8f:56:2a:f2:a8:49:bb:f0:02:8e:ce:29:87:13:68:6d:
e9:8a:89:bf:71:a1:17:d0:5c:9b:c7:2f:17:2a:d5:fb:88:d1:
86:3e:4e:21:2e:3d:6a:b1:8d:07:a0:47:ce:4b:20:17:eb:46:
01:ad:53:5d:24:e7:34:a1:12:6c:4c:c5:45:fb:0c:7c:53:2a:
b8:ed:48:fa:47:26:d2:1b:c2:a4:6d:a3:f8:1f:2b:62:4f:14:
a9:40:27:79:ad:05:b5:40:66:55:b8:40:e4:df:17:92:68:11:
c5:5a:ab:f7:f2:f5:77:b9:e0:52:f9:aa:41:67:da:61:a7:1c:
3a:b1:8b:50:e7:0a:8f:bc:c8:f8:cc:6c:f4:20:2c:d1:29:98:
c3:cb:19:03:0e:0f:f0:2f:e9:ad:c5:9a:46:74:eb:74:14:f0:
2f:35:50:0e:fb:7b:a2:7c:98:1c:35:f6:00:58:e9:68:70:8a:
8c:09:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:49 2026 by rpki-client