Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d02Rkw0nFy8s2Eh6GwXg8Zz0K6o.roa
File: d02Rkw0nFy8s2Eh6GwXg8Zz0K6o.roa (raw, json)
Hash identifier: NKguqncBIJ4MECJZTFm+IUxM0oQ4TcCO9jUlHnfTSFE=
Subject key identifier: 77:4D:91:93:0D:27:17:2F:2C:D8:48:7A:1B:05:E0:F1:9C:F4:2B:AA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019E364D9F7C9A232CD8164DA430E335292A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d02Rkw0nFy8s2Eh6GwXg8Zz0K6o.roa
Signing time: Sun 17 May 2026 14:18:37 +0000
ROA not before: Sun 17 May 2026 14:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 46.37.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:36:4d:9f:7c:9a:23:2c:d8:16:4d:a4:30:e3:35:29:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 17 14:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=774d91930d27172f2cd8487a1b05e0f19cf42baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:eb:dd:8f:ab:2e:af:b1:62:ae:e6:4d:4c:
33:6e:74:b8:be:bc:56:5e:40:8a:aa:ea:0a:6b:97:
bb:7c:e6:b3:a1:9a:6d:c0:45:8a:c6:3f:d0:f0:d4:
ab:01:da:27:c6:cb:05:9c:85:41:35:bd:ab:16:4d:
95:6c:55:81:ae:c3:e7:82:47:ef:c6:e5:d0:34:fc:
6a:92:77:48:21:de:68:02:cf:ee:b5:38:da:64:8c:
c2:91:cd:2b:be:14:fe:8c:73:8b:fd:f7:50:cd:89:
a1:85:17:ea:27:b4:71:5d:cc:f7:89:96:21:7f:59:
9e:a4:8a:fa:57:45:4e:98:40:df:bb:44:82:7e:80:
a0:60:48:7b:cc:bb:96:65:2f:2e:5c:23:5a:c3:9f:
bd:1e:5e:ba:4e:56:1b:41:8d:ef:fe:a7:26:25:60:
9d:5c:97:19:b2:09:60:3d:19:93:7a:57:bd:0a:2f:
80:2c:0c:8f:d9:c7:ca:a6:1a:4f:6b:a7:63:2d:9b:
ea:41:ea:4c:9d:3e:33:68:71:d0:20:ea:c2:d5:51:
23:c3:50:60:2b:2a:b7:71:11:61:73:10:55:8f:af:
f8:e3:ae:d1:10:65:57:49:68:9e:90:cf:b7:0f:ee:
8b:9c:cf:a2:d7:b7:50:a4:76:8a:42:fb:53:d6:7f:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4D:91:93:0D:27:17:2F:2C:D8:48:7A:1B:05:E0:F1:9C:F4:2B:AA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d02Rkw0nFy8s2Eh6GwXg8Zz0K6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c2:95:fd:2f:48:80:ef:37:c5:ca:dd:f5:57:1c:e5:e1:b4:
3c:93:c8:74:a9:a0:45:d9:68:11:a9:8b:be:fd:ef:af:5f:ed:
1b:f2:3c:fd:e7:5c:ca:25:3a:c3:e9:3f:18:09:04:cf:44:b9:
34:10:34:52:3f:a8:c3:cf:88:5d:61:05:7c:ff:a1:76:c8:37:
a1:65:3c:b9:52:85:9d:ad:5b:b3:b9:83:38:bd:d5:d5:6a:16:
86:b7:62:dd:60:0c:b3:f5:fa:de:2a:25:13:d6:bf:07:78:60:
54:c2:33:f7:e2:ab:fa:96:cc:1c:27:57:e7:d7:8b:91:66:a3:
e8:47:6b:98:f8:15:86:25:f2:fa:14:16:ab:ab:1a:b5:7f:9e:
39:af:65:59:fd:ca:6f:62:ac:6b:6e:b8:d5:e8:3e:35:0b:50:
c8:6d:f2:15:d3:4e:8f:42:29:41:0c:a1:81:86:80:52:91:ff:
6f:f7:ce:43:c0:15:33:16:c1:a0:6f:c4:09:d7:84:b7:78:81:
66:2d:3c:8f:92:7e:85:75:88:41:fd:4d:fd:c2:d4:fd:a6:2e:
77:fb:a9:ac:b8:07:63:26:83:50:51:66:5e:23:22:df:5d:a5:
26:49:f3:c2:5d:2e:1c:b6:ba:25:96:7b:22:ce:a0:ed:98:cf:
e7:b2:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:10 2026 by rpki-client