Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dV5lx5IuGIVmQTgFAk-L297n3W0.roa
File: dV5lx5IuGIVmQTgFAk-L297n3W0.roa (raw, json)
Hash identifier: DifUNUt/dVa3QdxzcupKlj2HfnDjM6iyfsFAPSsTAiQ=
Subject key identifier: 75:5E:65:C7:92:2E:18:85:66:41:38:05:02:4F:8B:DB:DE:E7:DD:6D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F02D3B48C77C74886BE9283816C27641F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dV5lx5IuGIVmQTgFAk-L297n3W0.roa
Signing time: Fri 26 Jun 2026 07:27:36 +0000
ROA not before: Fri 26 Jun 2026 07:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154368
IP address blocks: 46.37.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:d3:b4:8c:77:c7:48:86:be:92:83:81:6c:27:64:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 26 07:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=755e65c7922e188566413805024f8bdbdee7dd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:2a:2b:11:0c:1c:14:7e:03:a6:af:1d:e2:
3d:a2:93:90:f3:31:ea:7d:b5:85:71:79:79:c9:ad:
f1:c0:bf:52:71:b9:5d:f8:ea:d0:65:1f:6e:42:5b:
be:30:15:d9:60:4e:22:11:5e:b3:ff:76:07:d8:b0:
64:e3:9a:09:fa:3e:61:22:c0:c1:5a:f0:24:be:1b:
66:58:f3:04:bf:e0:ec:f1:2f:eb:f6:8d:d7:0f:e4:
bc:0f:71:c8:55:d8:97:92:3d:0f:3f:f0:c1:6e:78:
15:78:f0:f7:14:07:dd:98:f1:f1:a4:3c:84:28:a9:
94:51:8f:9a:08:3b:40:e4:ab:9e:18:46:6f:db:97:
ce:85:74:66:91:31:a2:22:34:41:b3:e7:0b:0c:df:
ac:db:86:0b:8f:4a:83:1a:77:8b:03:55:eb:ba:dd:
c5:bf:aa:a8:fa:72:b9:ee:23:c1:45:16:1f:5c:f3:
59:5b:fe:61:23:0e:1c:c1:fd:56:ee:fb:eb:16:42:
a1:a3:33:dc:7f:53:b6:b7:55:8f:6c:57:2b:b6:30:
65:3f:ce:0c:f8:dc:47:19:6c:98:e1:63:f4:4e:e1:
17:37:5c:3b:ec:39:bd:20:bd:00:a0:62:c0:1e:e1:
c5:ff:9f:77:e8:f7:ee:10:cf:eb:30:56:34:24:84:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:65:C7:92:2E:18:85:66:41:38:05:02:4F:8B:DB:DE:E7:DD:6D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/dV5lx5IuGIVmQTgFAk-L297n3W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f4:89:47:6f:93:c7:bc:fe:68:ef:95:b2:9d:c0:69:61:f9:
7f:33:d1:9e:88:b7:ec:8d:f5:96:b9:7c:be:dc:2f:4e:af:96:
b2:74:30:99:59:1f:05:1b:87:7b:d3:8a:5f:46:bf:e6:41:b8:
15:4d:ec:a8:07:72:2d:62:a3:19:03:e6:3a:a7:72:6c:c3:d1:
f4:f0:78:ad:52:40:f6:c2:e1:2c:8a:79:84:b0:b4:76:dc:c5:
bb:93:c0:48:aa:01:35:ea:49:a3:f8:06:1e:10:2d:65:67:81:
a0:0e:40:c2:a5:7a:b9:98:27:1d:9f:26:87:5b:d6:7f:60:fb:
f0:3e:d3:b8:f2:d9:c5:39:08:f9:f1:60:30:e9:89:dc:6e:53:
20:31:f5:ba:27:c0:b8:1c:56:71:95:3d:18:e0:17:e5:3f:e6:
f9:ca:59:2f:16:35:a8:11:91:2c:10:1f:cb:40:e5:d5:de:19:
c1:3e:a3:9c:93:49:5f:12:8d:5b:da:58:7c:8e:d0:f1:24:7c:
55:23:5d:a6:d4:b3:25:24:a8:af:4b:ee:70:9c:7d:7d:70:61:
78:e1:ae:1e:e2:d9:21:32:7d:b4:e3:df:9b:cb:4a:f8:02:dd:
f4:00:85:cf:3c:fe:b8:52:8d:81:4f:f8:e5:c6:d3:91:ff:41:
63:69:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 19:23:26 2026 by rpki-client