Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yGwWdZeAmEjrqTp5pHFHAX4-YVM.roa
File: yGwWdZeAmEjrqTp5pHFHAX4-YVM.roa (raw, json)
Hash identifier: dGDaSiujaLYID+b3Dbqt4Euk/v4410kvXzGgr4pTiYA=
Subject key identifier: C8:6C:16:75:97:80:98:48:EB:A9:3A:79:A4:71:47:01:7E:3E:61:53
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A119C951D56E60BD892D45E73099E8F84E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yGwWdZeAmEjrqTp5pHFHAX4-YVM.roa
Signing time: Thu 08 Oct 2026 04:33:06 +0000
ROA not before: Thu 08 Oct 2026 04:33:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 46.37.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:c9:51:d5:6e:60:bd:89:2d:45:e7:30:99:e8:f8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 8 04:33:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c86c167597809848eba93a79a47147017e3e6153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:f2:8f:46:5c:2d:50:f5:41:f9:23:3c:aa:
8d:32:be:88:71:c2:39:72:f1:38:b2:cb:34:fb:22:
a4:9e:1c:37:7a:92:2b:d7:8a:bc:8a:5d:07:be:c4:
14:87:01:46:b2:8b:58:80:07:5b:ce:c1:2c:1f:0b:
53:0a:ba:93:10:b4:0d:3c:73:51:c2:5b:d8:7b:1a:
a1:d0:33:f5:7e:3d:10:5e:e0:a6:16:ea:f5:6b:df:
23:63:31:c2:08:c4:f0:45:e1:e3:36:d5:a6:7a:4b:
18:c7:61:1e:27:b7:85:a1:83:b4:45:7d:c8:16:53:
66:e3:d7:f8:d1:8e:9c:4a:59:71:28:d4:78:e4:d2:
de:23:26:2b:7d:e2:fa:66:0c:b5:d6:70:25:5c:ed:
a4:32:05:f4:0b:1e:59:0b:98:ab:1b:65:5e:6d:31:
07:5c:78:c9:22:c8:2b:25:7c:20:9b:19:ac:86:cf:
e0:4b:83:73:62:94:9f:b5:90:25:cf:6d:9d:4f:ed:
fd:af:ff:4f:e5:07:e6:be:47:b3:27:f9:6f:ac:a1:
35:b6:18:27:e5:3a:8e:a3:9b:9a:e6:64:90:3a:48:
cd:42:e7:98:f1:2c:4b:b7:72:0b:9e:3e:f5:7e:bf:
a6:b0:67:c9:ee:9a:60:a2:d3:2b:33:fa:9d:2c:0f:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:16:75:97:80:98:48:EB:A9:3A:79:A4:71:47:01:7E:3E:61:53
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yGwWdZeAmEjrqTp5pHFHAX4-YVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:be:dc:bf:60:5a:4b:3a:f6:9d:df:71:78:e4:f5:1e:f8:8a:
cd:f9:03:e9:42:b5:24:0a:f2:74:0d:e7:15:f5:4a:dd:81:6f:
4b:50:10:31:ac:73:a5:7f:7d:a3:12:67:0b:e1:10:5c:b6:d1:
ad:ea:cc:db:2b:fc:46:03:02:30:1d:1f:7c:61:44:92:6a:76:
b2:55:44:bb:3a:bd:24:65:f1:9c:60:25:70:7c:d9:6b:47:48:
e4:e2:4b:63:21:e2:26:b6:53:f8:49:2c:94:1b:8f:f1:3c:f2:
74:4a:7c:4e:ef:d1:7e:89:02:07:3f:2d:b0:21:3d:45:3d:56:
90:72:2c:31:dc:89:a3:7b:a9:1a:12:a6:e6:6c:ce:4f:a3:de:
96:a2:1a:e4:fd:c0:b6:ec:45:bb:9c:d1:fd:e1:9a:68:a6:fc:
fe:51:80:75:03:12:39:06:9c:e6:39:2b:d2:c0:5f:65:db:b5:
47:ca:dc:0b:37:ef:4c:46:64:c8:12:65:3b:55:d7:5b:2e:c5:
2e:c9:4b:f8:49:69:8f:0e:88:22:3d:37:de:ef:97:50:95:89:
71:fa:9d:0f:f3:8a:80:c4:9d:6e:d7:c2:79:e9:45:4e:15:12:
2e:61:c7:ae:e9:4d:9b:f7:b8:1a:57:9c:37:1e:6d:5e:fc:32:
dd:96:ac:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEZyVHVbmC9iS1F5zCZ6PhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjYxMDA4MDQzMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODZjMTY3NTk3ODA5ODQ4ZWJhOTNhNzlhNDcxNDcwMTdlM2U2MTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15/yj0ZcLVD1QfkjPKqNMr6IccI5
cvE4sss0+yKknhw3epIr14q8il0HvsQUhwFGsotYgAdbzsEsHwtTCrqTELQNPHNR
wlvYexqh0DP1fj0QXuCmFur1a98jYzHCCMTwReHjNtWmeksYx2EeJ7eFoYO0RX3I
FlNm49f40Y6cSllxKNR45NLeIyYrfeL6Zgy11nAlXO2kMgX0Cx5ZC5irG2VebTEH
XHjJIsgrJXwgmxmshs/gS4NzYpSftZAlz22dT+39r/9P5QfmvkezJ/lvrKE1thgn
5TqOo5ua5mSQOkjNQueY8SxLt3ILnj71fr+msGfJ7ppgotMrM/qdLA9+xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhsFnWXgJhI66k6eaRxRwF+PmFTMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEveUd3V2RaZUFtRWpycVRwNXBIRkhBWDQtWVZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVvMA0G
CSqGSIb3DQEBCwUAA4IBAQBdvty/YFpLOvad33F45PUe+IrN+QPpQrUkCvJ0DecV
9UrdgW9LUBAxrHOlf32jEmcL4RBcttGt6szbK/xGAwIwHR98YUSSanayVUS7Or0k
ZfGcYCVwfNlrR0jk4ktjIeImtlP4SSyUG4/xPPJ0SnxO79F+iQIHPy2wIT1FPVaQ
ciwx3Imje6kaEqbmbM5Po96Wohrk/cC27EW7nNH94Zpopvz+UYB1AxI5BpzmOSvS
wF9l27VHytwLN+9MRmTIEmU7VddbLsUuyUv4SWmPDogiPTfe75dQlYlx+p0P84qA
xJ1u18J56UVOFRIuYceu6U2b97gaV5w3Hm1e/DLdlqyG
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:00 2026 by rpki-client