Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/l9bRnqNItHZs5FPzHX-UwDZIY-Y.roa
File: l9bRnqNItHZs5FPzHX-UwDZIY-Y.roa (raw, json)
Hash identifier: GX1IqoI7oBfponz1zyedaP74wEIQFjMmP5j2wGHYX9k=
Subject key identifier: 97:D6:D1:9E:A3:48:B4:76:6C:E4:53:F3:1D:7F:94:C0:36:48:63:E6
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A13DF167EF566D67C5207CDD1D871B8E4E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/l9bRnqNItHZs5FPzHX-UwDZIY-Y.roa
Signing time: Thu 15 Oct 2026 05:03:13 +0000
ROA not before: Thu 15 Oct 2026 05:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 46.37.111.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:f1:67:ef:56:6d:67:c5:20:7c:dd:1d:87:1b:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 15 05:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97d6d19ea348b4766ce453f31d7f94c0364863e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:50:ab:11:c1:0c:02:e9:04:85:cf:7a:56:
04:42:2e:43:ca:34:6b:ad:93:6d:dc:cc:b4:29:e5:
8d:d7:c9:6f:58:e9:b0:77:0c:3d:90:40:b1:b0:05:
51:a5:fe:ad:f6:9d:ad:1d:c3:b6:84:ba:6a:72:b8:
da:2c:fd:d8:0a:cb:0b:35:98:35:62:15:fb:4d:23:
e0:f3:3e:83:3a:d6:2d:75:56:ee:23:24:de:16:01:
6d:45:21:73:11:27:cc:69:07:18:83:1a:e4:73:b2:
c2:9a:8d:18:86:39:3c:00:de:56:59:4b:73:70:ac:
d9:35:91:18:c2:31:78:d5:8e:bb:b0:7c:df:73:99:
cd:2e:6a:69:54:3d:22:e9:4e:4a:bf:b6:b8:93:58:
5d:5f:1f:49:1f:e2:30:a4:97:d4:05:e3:6f:be:8b:
3c:8b:4f:33:1e:00:cc:7a:4f:74:83:02:1d:b9:40:
4e:c7:e2:95:3a:cf:79:16:2a:6f:f2:70:db:86:5d:
c4:b4:5b:a6:5a:df:00:ec:d3:e2:6a:73:09:55:8e:
cf:94:77:b5:b1:f9:be:88:b4:af:95:05:ed:28:10:
7e:88:7b:b0:3f:6c:75:14:af:aa:d7:40:df:a7:96:
fd:db:a7:7c:ba:80:6c:4d:26:5f:38:fa:0f:4a:97:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:D1:9E:A3:48:B4:76:6C:E4:53:F3:1D:7F:94:C0:36:48:63:E6
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/l9bRnqNItHZs5FPzHX-UwDZIY-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c1:17:f3:9a:8a:9a:43:40:42:9e:67:b5:ce:18:4f:11:0d:
bd:2d:8f:72:44:69:7e:fb:0f:42:5c:14:af:25:55:85:40:30:
75:dd:2e:b7:b7:5d:17:ab:0d:ae:54:35:65:8b:49:96:f3:ba:
2c:eb:dd:f5:bf:ed:6e:d5:d1:35:59:a5:01:69:c3:9b:24:be:
03:35:77:56:3d:5f:61:80:ec:6f:56:d9:74:ab:77:bc:95:ec:
bb:c2:f0:0e:41:24:f7:b6:04:ea:69:01:3d:09:2d:9a:b3:10:
9d:6b:5e:ea:c4:e5:ab:78:e0:4b:7c:e0:eb:6a:be:15:67:19:
7c:c7:e1:57:59:bd:70:56:d3:78:e8:00:50:7d:37:7f:07:57:
cf:f1:de:68:e0:33:a3:c7:73:a2:7c:f5:32:23:32:80:a1:b0:
d8:aa:7c:ad:15:fa:19:2d:c6:9b:66:dc:fd:33:7c:bf:d8:d7:
2f:b7:af:b4:d3:ba:c7:f8:f0:9a:57:5a:7e:22:99:3f:68:c9:
b3:e9:dd:31:71:a6:cf:65:29:16:c3:5d:4b:27:00:aa:48:12:
9c:1d:26:39:02:16:6a:19:7f:0c:56:10:64:27:db:79:e5:ab:
3e:29:a2:70:c8:75:be:b8:a9:2d:bc:89:7f:30:13:41:e2:cd:
30:c5:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:20 2026 by rpki-client