Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ub1JwIs6UXEDGZabSi7Fd0e0suM.roa
File: ub1JwIs6UXEDGZabSi7Fd0e0suM.roa (raw, json)
Hash identifier: 01snnsE9Og6yq6oRZR527da9p5okImvN5IFPSwrhZyk=
Subject key identifier: B9:BD:49:C0:8B:3A:51:71:03:19:96:9B:4A:2E:C5:77:47:B4:B2:E3
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F34574AE4C3108463125C4A46A82BBAF0
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ub1JwIs6UXEDGZabSi7Fd0e0suM.roa
Signing time: Sun 05 Jul 2026 22:12:43 +0000
ROA not before: Sun 05 Jul 2026 22:12:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 46.37.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:57:4a:e4:c3:10:84:63:12:5c:4a:46:a8:2b:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 5 22:12:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9bd49c08b3a51710319969b4a2ec57747b4b2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:23:04:85:96:5f:23:f4:67:d8:b8:8e:95:
ce:b0:ed:95:11:83:25:5a:b2:bb:27:a7:d6:92:51:
dc:86:be:9e:be:78:bf:5e:0f:b5:29:bc:8d:6c:d6:
30:47:70:c8:30:c0:bf:57:9d:3d:4c:53:48:ac:30:
ec:e0:18:79:ce:33:5d:ea:38:f2:18:32:77:e2:e6:
c0:93:74:bf:67:7e:e3:52:09:3c:e7:3c:ea:da:a4:
d2:db:0f:61:f8:04:6b:d8:d8:3a:92:64:5d:d3:c9:
37:0a:76:69:d7:68:ba:de:60:9a:04:cd:3d:48:07:
53:de:8c:b6:c1:79:4d:0c:13:e7:a0:3c:e8:fe:27:
9f:e9:72:79:20:f2:ca:62:dd:ce:0e:5e:ba:8f:1a:
42:97:b2:ac:86:a9:4a:6b:91:f3:3f:3f:2c:9d:c2:
cc:26:b3:9d:b8:88:ac:bd:72:17:67:6a:0c:be:08:
5b:45:fb:c7:73:a4:d4:ad:86:7b:de:60:8f:87:5c:
af:73:5e:1e:a9:5a:2f:df:83:3a:6a:3c:7f:b9:32:
04:b1:a6:4d:cf:43:83:3f:8c:fd:9d:74:e6:7a:e4:
55:17:97:b8:aa:d8:ca:d0:b7:95:36:12:25:db:36:
af:46:34:a5:ca:66:b9:d9:53:84:cd:51:25:42:60:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:49:C0:8B:3A:51:71:03:19:96:9B:4A:2E:C5:77:47:B4:B2:E3
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ub1JwIs6UXEDGZabSi7Fd0e0suM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9e:86:2e:d9:55:68:1f:7b:b4:c2:d1:b8:2a:67:2f:34:6c:
e6:34:c2:23:6b:a2:81:38:23:ab:f3:6b:7e:67:c2:15:63:e5:
bb:c3:14:56:fe:58:6e:e1:ea:8f:1b:08:c0:5b:75:f2:40:50:
2e:80:29:a8:11:88:23:d4:3b:1c:f9:65:83:09:32:ee:13:d6:
c4:80:29:3f:72:0e:1b:ee:a4:56:e3:6c:65:cf:e0:ca:53:a0:
8f:92:83:8f:33:20:0b:2e:ad:2d:66:97:c9:63:b9:20:e6:4b:
a4:23:b0:17:91:dc:97:70:61:d2:e4:dc:47:a8:4f:c6:c0:a5:
7e:84:6e:12:23:56:9b:28:4c:89:a1:f7:44:6a:31:e3:0f:e1:
0a:f5:0a:a4:f2:c5:1d:09:cf:09:de:2a:ec:26:ca:75:35:44:
43:ac:1b:d2:ad:06:50:f9:01:8e:aa:16:eb:6f:fb:74:0f:19:
b2:d6:df:03:85:28:40:31:42:12:44:bc:28:77:4a:29:e2:85:
70:19:e3:4d:8c:6d:99:d6:14:6f:ff:90:ae:bb:e5:ad:96:97:
b0:84:e5:70:ca:b8:cd:36:55:0a:69:38:6f:d2:41:e3:68:80:
ce:56:52:89:ca:1a:f5:9e:95:fa:8a:5b:9f:da:0c:bd:97:0a:
1b:b3:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:56 2026 by rpki-client