Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rZ_OY6LuxzKqsQlfQjflH7Mh1wo.roa
File: rZ_OY6LuxzKqsQlfQjflH7Mh1wo.roa (raw, json)
Hash identifier: USzA/HeY4NErgh6WdT1Cmei1/Amj2lzmU2yelJcVVOE=
Subject key identifier: AD:9F:CE:63:A2:EE:C7:32:AA:B1:09:5F:42:37:E5:1F:B3:21:D7:0A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019EFA630C58401C73B02C314AD30FA95BF1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rZ_OY6LuxzKqsQlfQjflH7Mh1wo.roa
Signing time: Wed 24 Jun 2026 16:07:35 +0000
ROA not before: Wed 24 Jun 2026 16:07:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401650
IP address blocks: 46.37.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:63:0c:58:40:1c:73:b0:2c:31:4a:d3:0f:a9:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 24 16:07:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad9fce63a2eec732aab1095f4237e51fb321d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:31:28:6a:0d:5a:e5:73:08:0a:9f:74:5e:
4b:80:8d:67:34:a8:14:94:64:6a:37:3c:a5:d6:43:
91:9b:02:64:62:e5:ef:bd:85:fa:a3:e8:dd:0a:ed:
a3:7e:b6:a5:f6:40:7e:29:08:37:b8:6e:ce:86:cf:
c1:36:64:90:8a:f9:37:71:55:d1:19:6f:8e:30:c1:
99:c9:c5:05:3c:6a:84:c4:59:51:4b:b6:77:1f:fc:
95:03:a2:31:19:46:cd:d8:fa:6b:d6:11:56:04:d2:
07:ff:34:9c:59:1c:d7:6d:33:58:cf:e0:06:87:0b:
51:55:50:c3:cb:83:24:4d:c4:d8:66:81:31:61:4e:
32:00:16:71:d0:5f:48:5d:5f:31:5e:d3:1e:4a:d2:
42:9a:b2:98:fb:c6:fa:7d:2a:28:d5:02:e5:b8:b5:
3c:4c:1c:d0:56:db:b8:c7:55:44:a0:8f:0a:af:35:
1d:d8:71:e4:b0:8a:de:5a:6b:eb:10:d6:f2:64:f9:
a6:b2:5e:51:6a:17:02:45:4b:0a:e2:cf:4c:aa:1c:
96:bb:12:32:8c:10:e3:14:75:6d:c9:33:d6:af:7b:
3c:c7:0c:8d:6a:5f:39:52:ab:67:a8:6a:17:0e:0f:
46:ea:27:07:0d:15:ab:eb:36:10:40:06:c4:69:86:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:CE:63:A2:EE:C7:32:AA:B1:09:5F:42:37:E5:1F:B3:21:D7:0A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rZ_OY6LuxzKqsQlfQjflH7Mh1wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ec:93:16:0c:86:3c:c0:b2:79:d4:5a:86:23:c0:5b:28:63:
e1:04:c0:e6:bc:1e:87:b5:f3:d6:f0:f3:53:49:e5:a2:e2:9e:
44:b9:c0:9a:a6:07:92:19:80:1b:d5:e5:40:6a:e8:09:60:0f:
7c:84:9f:f2:10:8b:6b:b5:9e:cf:9b:99:24:33:f3:0a:9e:8c:
27:2c:7d:0d:75:4b:70:72:13:6e:28:86:c4:3f:54:90:b8:cf:
5a:41:b8:06:c7:36:79:3f:ee:13:67:50:4e:5f:a2:2a:0a:69:
09:f5:5b:5b:05:29:7c:ac:54:03:1a:17:d3:0b:44:f8:4f:c3:
04:af:90:68:b4:f8:af:84:58:3c:41:f0:e0:ae:24:65:8e:64:
ee:6d:e2:c6:b5:8b:6b:ce:ef:60:e7:1a:d8:a4:f5:59:2d:3d:
02:79:cb:38:32:73:33:9b:63:c9:ef:ca:c2:89:d3:c1:fc:34:
5e:30:4e:7d:4a:e4:de:92:3b:a9:54:fc:5c:39:47:e0:7b:43:
bd:fe:2f:f9:01:57:f3:c0:3a:f5:25:f4:0d:1a:70:69:07:5c:
0a:bd:d7:5e:b7:b3:e9:9b:08:99:2f:a7:cd:3d:51:f8:70:aa:
a4:1b:f0:21:03:51:d7:19:81:91:11:a4:cc:52:4b:93:ac:a2:
5e:9a:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:19 2026 by rpki-client