Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/P376G4ux9pN80ycinW61fwUFrYM.roa
File: P376G4ux9pN80ycinW61fwUFrYM.roa (raw, json)
Hash identifier: TzJLYkPRxQAGhP7KlleLpxkjOvqUqS3AYvAObGZIOew=
Subject key identifier: 3F:7E:FA:1B:8B:B1:F6:93:7C:D3:27:22:9D:6E:B5:7F:05:05:AD:83
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01A0F5068318471AE75F914340DE201415F8
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/P376G4ux9pN80ycinW61fwUFrYM.roa
Signing time: Thu 01 Oct 2026 01:13:59 +0000
ROA not before: Thu 01 Oct 2026 01:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58325
IP address blocks: 46.231.167.0/24 maxlen: 24
69.5.172.0/24 maxlen: 24
69.5.174.0/24 maxlen: 24
93.118.40.0/22 maxlen: 24
94.177.17.0/24 maxlen: 24
2a01:4020:40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:06:83:18:47:1a:e7:5f:91:43:40:de:20:14:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Oct 1 01:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f7efa1b8bb1f6937cd327229d6eb57f0505ad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:5e:02:91:a8:31:d7:98:f6:ab:6d:4d:19:
bb:60:e4:55:05:3f:8a:82:96:30:8b:95:5f:71:76:
92:0e:11:3d:62:5d:fa:87:c1:b2:34:6d:91:38:55:
7a:0f:20:2a:f1:ea:d0:89:70:de:1b:71:31:dc:27:
e4:4e:93:52:e5:28:1c:87:18:db:3c:99:a9:80:b9:
d6:c0:60:81:34:48:35:51:78:f1:b7:ed:aa:24:94:
21:67:70:d1:cc:5b:b2:4e:7f:0f:39:07:7a:3e:7e:
c4:0b:17:fb:cb:11:2e:f0:0d:78:d9:d3:5e:a3:73:
34:2b:6a:cc:5f:4f:d6:20:9e:bf:1d:56:bc:cf:d7:
d7:79:9d:14:d5:b2:e6:a1:ef:5f:c1:43:33:e8:45:
8f:b4:05:78:85:bc:c0:e9:00:ff:93:e0:36:7a:f8:
20:5c:7a:d5:f6:74:f1:cd:50:65:52:43:14:b5:d0:
49:3e:66:e5:cf:c6:30:ac:cf:7c:d5:be:c7:60:af:
ff:ba:b3:1b:52:3f:d6:72:3d:11:bb:fd:16:f4:69:
31:61:e3:e2:02:25:cc:1d:b8:00:6e:6b:9f:66:c0:
41:5a:95:fa:14:3c:02:8c:16:8d:53:d6:e5:8c:45:
f4:27:c1:9e:1a:bb:26:4e:c3:e5:87:91:da:11:26:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7E:FA:1B:8B:B1:F6:93:7C:D3:27:22:9D:6E:B5:7F:05:05:AD:83
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/P376G4ux9pN80ycinW61fwUFrYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.167.0/24
69.5.172.0/24
69.5.174.0/24
93.118.40.0/22
94.177.17.0/24
IPv6:
2a01:4020:40::/44
Signature Algorithm: sha256WithRSAEncryption
4d:08:c0:31:f1:b7:a7:12:02:de:91:84:e8:5d:b5:2d:c7:dc:
e7:79:bc:08:d4:50:a5:2e:a7:fa:54:ca:45:12:1f:b6:22:8c:
64:ee:5e:38:5b:a5:a3:85:9c:99:73:90:5b:4e:b6:8c:f2:f2:
72:72:3b:84:e9:c7:f8:9d:01:76:e5:b3:c3:2c:ed:ac:1d:d4:
39:dd:6c:20:36:c1:a0:50:9b:92:30:84:09:bf:f6:95:07:fe:
13:55:d1:ef:28:37:43:0d:1e:ba:64:81:5a:2e:9a:42:63:8e:
f2:39:b8:6c:d9:2d:62:6e:52:50:27:c2:a7:7c:44:71:e3:ce:
86:68:81:8f:b4:89:1e:52:77:14:12:f2:46:45:8c:26:fa:4d:
d6:28:2f:ad:e4:c7:e4:96:c6:2a:50:89:14:22:46:23:da:94:
87:a9:de:8d:e2:de:65:d4:e8:9e:1c:9e:7e:4f:b6:0f:64:b3:
96:d7:31:fd:91:ee:af:b4:91:5a:ce:0c:24:1c:7d:6e:26:af:
e9:08:a4:19:af:81:dd:18:31:c0:76:94:50:20:c1:87:01:9c:
03:28:36:fb:05:88:c2:0b:df:00:55:a7:05:6f:05:74:b3:e4:
3e:50:89:77:bc:f1:39:d4:e0:62:41:73:c4:13:bb:10:25:ef:
2e:8f:dc:ac
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAaD1BoMYRxrnX5FDQN4gFBX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYxMDAxMDExMzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjdlZmExYjhiYjFmNjkzN2NkMzI3MjI5ZDZlYjU3ZjA1MDVhZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJheApGoMdeY9qttTRm7YORVBT+K
gpYwi5VfcXaSDhE9Yl36h8GyNG2ROFV6DyAq8erQiXDeG3Ex3CfkTpNS5Sgchxjb
PJmpgLnWwGCBNEg1UXjxt+2qJJQhZ3DRzFuyTn8POQd6Pn7ECxf7yxEu8A142dNe
o3M0K2rMX0/WIJ6/HVa8z9fXeZ0U1bLmoe9fwUMz6EWPtAV4hbzA6QD/k+A2evgg
XHrV9nTxzVBlUkMUtdBJPmblz8YwrM981b7HYK//urMbUj/Wcj0Ru/0W9GkxYePi
AiXMHbgAbmufZsBBWpX6FDwCjBaNU9bljEX0J8GeGrsmTsPlh5HaESYJHwIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFD9++huLsfaTfNMnIp1utX8FBa2DMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvUDM3Nkc0dXg5cE44MHljaW5XNjFmd1VGcllNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQALuenAwQA
RQWsAwQARQWuAwQCXXYoAwQAXrERMA8EAgACMAkDBwQqAUAgAEAwDQYJKoZIhvcN
AQELBQADggEBAE0IwDHxt6cSAt6RhOhdtS3H3Od5vAjUUKUup/pUykUSH7YijGTu
XjhbpaOFnJlzkFtOtozy8nJyO4Tpx/idAXbls8Ms7awd1DndbCA2waBQm5IwhAm/
9pUH/hNV0e8oN0MNHrpkgVoumkJjjvI5uGzZLWJuUlAnwqd8RHHjzoZogY+0iR5S
dxQS8kZFjCb6TdYoL63kx+SWxipQiRQiRiPalIep3o3i3mXU6J4cnn5Ptg9ks5bX
Mf2R7q+0kVrODCQcfW4mr+kIpBmvgd0YMcB2lFAgwYcBnAMoNvsFiMIL3wBVpwVv
BXSz5D5QiXe88TnU4GJBc8QTuxAl7y6P3Kw=
-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:13 2026 by rpki-client