Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nKoWcXFyd6Av2A5Pn3r0sx81sxg.roa
File: nKoWcXFyd6Av2A5Pn3r0sx81sxg.roa (raw, json)
Hash identifier: NmzglX/esYoeaUFk+87SAqti3jusy2njG3Was6QTtak=
Subject key identifier: 9C:AA:16:71:71:72:77:A0:2F:D8:0E:4F:9F:7A:F4:B3:1F:35:B3:18
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A0D816E73C15F58AA6414F92DA6BD013E2
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nKoWcXFyd6Av2A5Pn3r0sx81sxg.roa
Signing time: Fri 25 Sep 2026 10:22:54 +0000
ROA not before: Fri 25 Sep 2026 10:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.99.0/24 maxlen: 24
46.37.111.0/24 maxlen: 24
46.37.112.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:16:e7:3c:15:f5:8a:a6:41:4f:92:da:6b:d0:13:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 25 10:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9caa1671717277a02fd80e4f9f7af4b31f35b318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:f3:59:e2:9f:bd:5e:0f:ca:87:7e:59:21:
38:54:09:9a:28:0a:7c:f9:11:ea:2a:af:d2:72:b1:
94:58:c1:c4:df:ed:d7:67:cc:da:b4:94:c9:31:bd:
1f:ac:76:c9:12:a3:22:26:94:e6:02:d1:6a:62:d8:
a3:b7:92:b8:0f:46:22:26:14:99:2c:26:53:77:f5:
cc:21:0c:a1:7e:a2:12:c9:61:45:82:6d:1d:0e:88:
31:12:86:bc:63:05:ce:cf:26:a0:ec:6f:49:7a:79:
a6:95:69:7b:9a:cf:b0:bd:a6:de:02:47:c3:9a:87:
81:6e:31:13:59:b9:c8:4b:8c:08:ef:09:54:d0:54:
eb:a3:54:44:39:4c:e1:4c:92:5c:f7:ca:da:2a:a2:
47:87:5c:77:1f:31:79:00:c7:03:e1:70:96:e9:6e:
fd:74:f6:29:e6:d5:37:51:35:fd:e6:a2:28:23:ad:
dd:33:67:fb:34:ac:26:19:1f:28:d5:de:aa:96:49:
21:19:2e:24:77:15:12:43:19:fd:4d:db:1c:8a:6f:
81:7e:25:33:33:25:2d:e6:0d:03:f7:82:ea:ae:bd:
c7:02:0f:e5:dc:20:c0:68:94:39:97:33:9a:3a:e5:
bf:5a:9d:50:a2:b0:17:43:0f:fa:0a:48:01:b3:d0:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:16:71:71:72:77:A0:2F:D8:0E:4F:9F:7A:F4:B3:1F:35:B3:18
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nKoWcXFyd6Av2A5Pn3r0sx81sxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/23
46.37.111.0-46.37.112.255
46.37.121.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d0:c8:01:12:43:74:db:59:19:a3:ce:a6:9b:35:42:45:10:
b9:a2:cf:a9:7b:b4:df:ed:f3:15:e2:83:51:e3:42:88:b8:c1:
12:32:24:88:d5:cd:52:3e:99:9b:31:bf:3f:8d:1f:62:30:45:
f7:d6:bf:b5:c0:7e:40:d6:c3:ab:f0:de:f6:b4:f1:12:93:22:
59:fa:ca:5d:be:32:5f:32:87:cf:16:a9:b1:4f:5d:77:06:36:
27:44:62:89:8b:11:9c:f2:62:c9:a8:a9:22:34:50:05:6a:55:
e5:7a:5e:50:f0:a2:5d:e8:f3:9e:77:bf:fa:60:bc:83:de:bf:
2f:40:be:1c:3d:b6:a6:8b:28:f4:9d:45:ef:70:f2:1b:8c:be:
1c:1a:78:26:7c:29:88:db:a8:d9:fe:20:27:9a:3e:47:e3:4f:
ce:0f:7d:9c:f4:5b:e9:18:fe:f9:90:da:d3:8a:f2:0e:26:cc:
5e:79:d5:10:2f:60:ca:c9:d7:97:09:7c:79:d9:60:f3:61:7e:
42:13:41:9b:da:71:eb:bb:b5:aa:de:dc:c8:39:f1:79:c3:fb:
8d:db:58:ef:8a:67:eb:f6:1e:33:17:8f:91:f2:0c:9a:6d:34:
34:bb:72:7b:b5:f3:03:61:89:83:de:8c:c9:ae:bd:ec:31:d8:
22:d7:07:0a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaDYFuc8FfWKpkFPktpr0BPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjYwOTI1MTAyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2FhMTY3MTcxNzI3N2EwMmZkODBlNGY5ZjdhZjRiMzFmMzViMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oXzWeKfvV4Pyod+WSE4VAmaKAp8
+RHqKq/ScrGUWMHE3+3XZ8zatJTJMb0frHbJEqMiJpTmAtFqYtijt5K4D0YiJhSZ
LCZTd/XMIQyhfqISyWFFgm0dDogxEoa8YwXOzyag7G9JenmmlWl7ms+wvabeAkfD
moeBbjETWbnIS4wI7wlU0FTro1REOUzhTJJc98raKqJHh1x3HzF5AMcD4XCW6W79
dPYp5tU3UTX95qIoI63dM2f7NKwmGR8o1d6qlkkhGS4kdxUSQxn9Tdscim+BfiUz
MyUt5g0D94Lqrr3HAg/l3CDAaJQ5lzOaOuW/Wp1QorAXQw/6CkgBs9Bu7QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJyqFnFxcnegL9gOT5969LMfNbMYMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvbktvV2NYRnlkNkF2MkE1UG4zcjBzeDgxc3hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALiVgAwQB
LiViMAwDBAAuJW8DBAAuJXADBAAuJXkDBAC5XC4wDQYJKoZIhvcNAQELBQADggEB
AFzQyAESQ3TbWRmjzqabNUJFELmiz6l7tN/t8xXig1HjQoi4wRIyJIjVzVI+mZsx
vz+NH2IwRffWv7XAfkDWw6vw3va08RKTIln6yl2+Ml8yh88WqbFPXXcGNidEYomL
EZzyYsmoqSI0UAVqVeV6XlDwol3o8553v/pgvIPevy9Avhw9tqaLKPSdRe9w8huM
vhwaeCZ8KYjbqNn+ICeaPkfjT84PfZz0W+kY/vmQ2tOK8g4mzF551RAvYMrJ15cJ
fHnZYPNhfkITQZvaceu7tare3Mg58XnD+43bWO+KZ+v2HjMXj5HyDJptNDS7cnu1
8wNhiYPejMmuvewx2CLXBwo=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:17 2026 by rpki-client