Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/onFAIFk9bJny6Cfl4U5g4Q53sq4.roa
File: onFAIFk9bJny6Cfl4U5g4Q53sq4.roa (raw, json)
Hash identifier: 9TKHGO7OW9t6JUCrV9bJaE5Y0DMDjwJkmhhlKy0N/2c=
Subject key identifier: A2:71:40:20:59:3D:6C:99:F2:E8:27:E5:E1:4E:60:E1:0E:77:B2:AE
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A058940D3FC4C174A88D6974E6E00F8BC0
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/onFAIFk9bJny6Cfl4U5g4Q53sq4.roa
Signing time: Mon 31 Aug 2026 16:08:12 +0000
ROA not before: Mon 31 Aug 2026 16:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 46.37.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:94:0d:3f:c4:c1:74:a8:8d:69:74:e6:e0:0f:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 31 16:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2714020593d6c99f2e827e5e14e60e10e77b2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:bd:5e:54:7a:8d:44:7e:2d:28:3b:8f:c2:
21:c7:67:75:06:17:64:3a:21:77:c6:82:47:d0:1d:
09:7b:d7:fe:d4:b2:77:5a:49:54:81:bc:09:4c:5f:
87:17:ce:cd:12:60:03:59:46:27:c0:77:0b:1a:9d:
e7:fe:0c:d8:7c:39:6d:a4:b4:b6:8f:43:0a:db:d5:
7c:ef:03:5f:d4:52:28:13:af:44:cb:73:84:89:2e:
4d:4a:1a:21:3e:53:44:81:8c:2b:f1:ae:a2:60:9b:
a1:48:34:90:ec:93:68:d9:04:75:52:d3:39:43:0a:
3a:3f:3e:2d:5f:2e:18:69:14:ad:2a:84:7e:31:a1:
94:30:f3:c2:5f:59:bb:b5:e7:89:ef:74:7c:38:a1:
ff:12:97:3f:fe:a8:05:40:09:ea:ca:aa:ec:d8:d7:
21:4a:04:0a:d0:85:67:f0:39:23:97:d2:43:dd:0b:
a0:a4:af:93:61:d2:ac:39:cd:01:e6:28:c9:fd:7a:
8c:54:0c:7e:f4:4a:c9:30:8f:da:27:ab:0e:81:1b:
29:d5:fc:e9:17:f9:a4:72:15:ea:31:63:e0:98:0e:
f6:41:32:c2:2d:0e:f2:df:f1:87:b1:97:41:7a:74:
c4:78:52:11:02:b8:18:84:0e:f2:a2:3a:b0:3d:1a:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:71:40:20:59:3D:6C:99:F2:E8:27:E5:E1:4E:60:E1:0E:77:B2:AE
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/onFAIFk9bJny6Cfl4U5g4Q53sq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ab:6c:41:7e:3a:08:10:b8:b0:9f:91:19:de:c7:91:fb:72:
b5:41:aa:f5:28:4e:cf:2f:0b:96:ca:96:06:cb:2c:00:56:f1:
fd:52:19:c0:4a:4a:5d:df:c9:d1:8c:94:b5:02:2c:2a:3a:32:
63:7f:d8:63:ca:7d:f3:38:1a:cd:89:37:de:61:35:ac:84:de:
27:b2:af:3a:ca:08:61:50:50:89:8e:7a:30:34:f4:9f:34:25:
f6:fa:7b:90:d9:10:92:72:aa:db:9f:a0:6d:10:78:07:f7:13:
ae:c8:fc:cb:a2:2b:cc:c3:83:b8:1a:3f:30:e0:c7:f6:2a:4b:
4d:3c:a0:a5:1c:cd:4d:47:13:d0:6e:4b:1c:44:88:9f:44:ab:
34:6f:d8:0d:a0:9b:aa:8b:9d:6b:71:2e:ee:1d:86:0f:91:b1:
48:e3:33:ba:a4:3a:32:70:fd:7f:e8:ef:6c:ba:66:3a:e5:d9:
c0:37:b8:14:1f:98:a9:e8:86:de:3d:4c:7b:41:95:bc:83:3f:
dc:92:33:42:9d:ea:1a:44:24:fd:a1:9b:c8:c2:bd:15:0c:e0:
92:5c:ef:57:be:21:23:cd:9d:33:14:fe:e4:c2:b8:db:3e:bd:
f5:a5:62:5a:53:9d:5a:f1:f3:f9:49:b3:a7:b9:1f:38:bd:ee:
ce:a6:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:33 2026 by rpki-client