Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kTAJ9UWyqjz3bygO2zqxEYPmn98.roa
File: kTAJ9UWyqjz3bygO2zqxEYPmn98.roa (raw, json)
Hash identifier: ZJiGZEYY5LrH+S9OVPNp2Cz7d/y5Df6fGDlsOfWRBS4=
Subject key identifier: 91:30:09:F5:45:B2:AA:3C:F7:6F:28:0E:DB:3A:B1:11:83:E6:9F:DF
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019FEBC78D4706A0EF487788FA141732F88A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kTAJ9UWyqjz3bygO2zqxEYPmn98.roa
Signing time: Mon 10 Aug 2026 13:05:51 +0000
ROA not before: Mon 10 Aug 2026 13:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:c7:8d:47:06:a0:ef:48:77:88:fa:14:17:32:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 10 13:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=913009f545b2aa3cf76f280edb3ab11183e69fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:56:48:dd:bb:19:63:ac:a0:cd:39:fc:d7:
a2:cf:16:f5:13:58:5f:bb:00:d0:35:00:f9:1e:ed:
7b:54:0b:dc:92:6b:ea:67:f6:3c:a8:d7:f3:bf:61:
cf:62:fb:74:95:c1:77:7b:85:b5:0e:68:01:b9:2d:
bd:fa:01:c8:9c:b8:80:ae:aa:5f:43:12:a9:d3:cb:
5d:ff:e5:82:87:15:46:f2:ec:fd:8b:a9:21:01:5f:
58:cf:ee:4e:15:21:ad:7d:e2:6e:01:6b:8f:29:b4:
6c:1d:38:07:b8:79:9b:e6:69:64:da:ab:bf:52:58:
1a:31:8f:ad:42:ff:71:e9:d4:ab:80:9a:4e:64:18:
09:80:c9:f4:3c:77:ab:81:2f:1d:e9:60:5f:b8:42:
9b:d5:83:76:a3:85:c4:68:49:52:ed:1b:f5:b2:52:
23:f5:82:fd:bb:0a:06:cb:64:af:61:36:c5:a9:28:
b0:44:cf:da:69:86:78:59:a2:b0:84:f5:27:48:99:
35:fa:1a:81:83:8b:43:1b:ed:f1:fe:e3:c5:f9:56:
34:22:73:7b:0e:50:b1:5b:7a:f9:00:c3:07:9a:00:
be:33:a4:55:12:b8:03:0a:0e:1a:6b:48:24:cf:b1:
45:3a:10:8b:68:d1:01:4e:53:9c:cf:a2:9f:fa:0e:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:30:09:F5:45:B2:AA:3C:F7:6F:28:0E:DB:3A:B1:11:83:E6:9F:DF
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kTAJ9UWyqjz3bygO2zqxEYPmn98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ed:44:92:55:da:53:2c:79:fd:f1:d5:50:42:20:21:bb:fb:
66:cd:06:3f:f2:f0:31:65:df:dc:7a:50:35:78:a0:58:bd:79:
b4:4b:c3:b7:7b:91:ac:db:36:ee:bb:ab:d5:76:3c:cf:3e:a5:
b3:5a:d3:f0:33:4f:b3:ea:bd:00:bb:ef:80:05:ce:42:88:ec:
63:bb:d4:cb:34:91:42:80:67:a1:69:f2:86:8c:76:22:95:48:
e5:99:fe:e9:e4:2e:8a:46:fb:00:45:05:7f:b3:18:2a:c8:fe:
39:c6:fc:cf:a3:17:d1:2c:58:9b:c9:42:84:54:13:0d:19:76:
68:f7:4e:e0:71:99:40:64:f0:00:45:b0:a6:de:85:ea:6f:ce:
43:4d:ad:51:db:3b:82:b2:17:f1:c4:ac:a0:58:a9:b2:e3:3e:
32:10:59:44:2e:ac:e3:14:e6:78:94:23:65:c3:5b:0e:d1:76:
40:79:e0:3c:14:f3:07:81:44:14:3d:39:cf:33:f3:aa:28:fd:
54:f2:07:cf:91:18:f7:e0:60:34:dd:a4:ae:db:38:79:24:7a:
68:a7:b0:3d:47:db:0f:1e:41:2b:92:66:c6:4a:5a:f9:00:52:
86:0f:d2:24:6d:c9:23:fd:e7:75:05:dc:f4:10:f1:01:89:9e:
41:eb:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:50:34 2026 by rpki-client