Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mYkzSPs4bdIDnwVUaRu-Jo2aLYw.roa
File: mYkzSPs4bdIDnwVUaRu-Jo2aLYw.roa (raw, json)
Hash identifier: TV4eKjR0OJx54wRJw1+R5H+m0UtVD7F7g/PWJoeSbVs=
Subject key identifier: 99:89:33:48:FB:38:6D:D2:03:9F:05:54:69:1B:BE:26:8D:9A:2D:8C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A13F96559D2BE3588DE7F1BFA123C44F63
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mYkzSPs4bdIDnwVUaRu-Jo2aLYw.roa
Signing time: Thu 15 Oct 2026 12:42:59 +0000
ROA not before: Thu 15 Oct 2026 12:42:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.99.0/24 maxlen: 24
46.37.112.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:96:55:9d:2b:e3:58:8d:e7:f1:bf:a1:23:c4:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 15 12:42:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99893348fb386dd2039f0554691bbe268d9a2d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:a7:88:9a:67:c5:03:68:d8:5f:de:4c:16:
cc:4a:1d:2b:a8:8c:0e:46:25:ef:62:8c:a5:73:c5:
b9:9a:ed:37:e6:fe:8b:b2:7d:65:c2:c1:f5:5f:b1:
e8:22:78:d3:11:af:c5:7a:2f:ef:97:05:cd:1e:81:
1f:84:80:54:7c:8d:a3:f1:ff:ac:27:80:36:17:56:
f4:5d:94:e7:f7:75:e4:b2:f2:b7:6d:e2:93:06:50:
79:21:eb:91:a4:74:1b:2c:37:10:d7:39:cf:92:ff:
0f:9a:40:b4:96:c7:32:bf:d0:90:6b:00:39:8d:f1:
c9:96:6d:26:46:57:ed:94:08:45:bf:20:ce:e2:5a:
f1:f1:c2:5e:31:0b:cd:4e:39:cb:1c:a8:d8:fc:e0:
7a:b5:ff:8d:12:e3:dd:b8:2b:6b:95:6a:74:9a:d7:
7a:0f:d3:8b:74:84:56:6e:17:08:bc:00:65:68:35:
23:85:46:71:25:7e:96:0a:32:23:02:fc:e6:be:1b:
1c:d3:d9:06:62:b9:e5:e0:21:09:22:ef:36:6b:c4:
fc:dc:d9:a4:80:4a:3c:6d:9a:b9:6c:88:e1:94:79:
75:ff:b0:c7:f7:cc:fd:7c:53:37:e6:f5:03:be:4b:
4f:06:61:ad:59:d5:9a:30:ce:3e:d0:24:11:a1:73:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:33:48:FB:38:6D:D2:03:9F:05:54:69:1B:BE:26:8D:9A:2D:8C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mYkzSPs4bdIDnwVUaRu-Jo2aLYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/23
46.37.112.0/24
46.37.121.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3a:2a:39:51:06:98:a2:0e:3d:1c:89:91:0f:f7:91:ca:c4:
31:d9:52:10:40:00:25:1b:44:96:91:07:48:9b:b0:80:f5:7b:
7a:69:53:6a:08:87:cb:c5:29:4b:eb:0c:2b:a3:66:ee:71:92:
f9:1b:2c:b8:b9:03:40:a4:a0:4c:d0:c4:e2:90:71:13:dc:3c:
e0:4a:41:2c:e2:1e:29:84:a4:87:6b:d5:d1:56:c4:e0:83:65:
97:8c:bd:44:b2:48:4e:4a:77:36:ad:ea:c8:4a:3f:63:fb:25:
4f:09:8d:30:8b:9d:54:ae:27:bd:0e:77:38:f7:f6:4d:dc:a6:
3a:e8:1d:21:97:d0:6d:b8:b4:39:28:a1:c5:a4:b4:e3:fe:ba:
a7:6c:e1:ed:ef:e5:a1:e4:a3:a2:66:ed:10:03:7a:69:bb:35:
1a:99:59:92:0a:05:b9:40:19:0c:a8:6c:b1:e8:f1:a9:03:71:
dd:c6:13:71:23:24:51:3d:8c:71:45:ba:a9:2c:fd:1c:47:43:
8d:06:44:3f:03:61:0a:33:8c:19:d9:57:d5:0f:32:0f:b3:1a:
30:06:65:a0:97:e4:40:b8:3b:2c:50:3d:b2:6b:43:10:71:94:
70:bf:60:2d:35:b4:12:2c:b5:d0:a4:f3:79:d8:06:66:e6:2e:
15:8f:66:d8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaE/llWdK+NYjefxv6EjxE9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjYxMDE1MTI0MjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg5MzM0OGZiMzg2ZGQyMDM5ZjA1NTQ2OTFiYmUyNjhkOWEyZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm+niJpnxQNo2F/eTBbMSh0rqIwO
RiXvYoylc8W5mu035v6Lsn1lwsH1X7HoInjTEa/Fei/vlwXNHoEfhIBUfI2j8f+s
J4A2F1b0XZTn93XksvK3beKTBlB5IeuRpHQbLDcQ1znPkv8PmkC0lscyv9CQawA5
jfHJlm0mRlftlAhFvyDO4lrx8cJeMQvNTjnLHKjY/OB6tf+NEuPduCtrlWp0mtd6
D9OLdIRWbhcIvABlaDUjhUZxJX6WCjIjAvzmvhsc09kGYrnl4CEJIu82a8T83Nmk
gEo8bZq5bIjhlHl1/7DH98z9fFM35vUDvktPBmGtWdWaMM4+0CQRoXN3vwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJmJM0j7OG3SA58FVGkbviaNmi2MMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvbVlrelNQczRiZElEbndWVWFSdS1KbzJhTFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALiVgAwQB
LiViAwQALiVwAwQALiV5AwQAuVwtMA0GCSqGSIb3DQEBCwUAA4IBAQCpOio5UQaY
og49HImRD/eRysQx2VIQQAAlG0SWkQdIm7CA9Xt6aVNqCIfLxSlL6wwro2bucZL5
Gyy4uQNApKBM0MTikHET3DzgSkEs4h4phKSHa9XRVsTgg2WXjL1EskhOSnc2rerI
Sj9j+yVPCY0wi51Urie9Dnc49/ZN3KY66B0hl9BtuLQ5KKHFpLTj/rqnbOHt7+Wh
5KOiZu0QA3ppuzUamVmSCgW5QBkMqGyx6PGpA3HdxhNxIyRRPYxxRbqpLP0cR0ON
BkQ/A2EKM4wZ2VfVDzIPsxowBmWgl+RAuDssUD2ya0MQcZRwv2AtNbQSLLXQpPN5
2AZm5i4Vj2bY
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:59 2026 by rpki-client