Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/syoW9dmBrPQScEStsWIE7Y3xj7E.roa
File: syoW9dmBrPQScEStsWIE7Y3xj7E.roa (raw, json)
Hash identifier: 7MBJDw4Pca+UQjisSf8ek6epXNLQhKJ/t0Da7aSqre4=
Subject key identifier: B3:2A:16:F5:D9:81:AC:F4:12:70:44:AD:B1:62:04:ED:8D:F1:8F:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 019F881AA52F6FEB1232E5BAB2F6E8301972
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/syoW9dmBrPQScEStsWIE7Y3xj7E.roa
Signing time: Wed 22 Jul 2026 04:34:35 +0000
ROA not before: Wed 22 Jul 2026 04:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204106
IP address blocks: 46.20.202.0/23 maxlen: 23
46.20.202.0/24 maxlen: 24
46.20.203.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
109.74.72.0/24 maxlen: 24
2a13:1b00::/29 maxlen: 29
2a13:1b00:1::/48 maxlen: 48
2a13:1b00:1000::/48 maxlen: 48
2a13:1b00:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:1a:a5:2f:6f:eb:12:32:e5:ba:b2:f6:e8:30:19:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Jul 22 04:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b32a16f5d981acf4127044adb16204ed8df18fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:93:c2:2a:fd:0e:b6:25:d6:34:c8:c1:18:
3e:2f:f4:25:a4:21:4a:36:2e:b1:af:a2:bd:26:67:
be:f3:c9:a1:c2:ac:7b:34:28:49:49:ff:38:98:f9:
9a:15:49:8a:27:11:36:f7:3a:83:d4:fa:d7:5b:99:
2c:85:57:98:1b:eb:b3:cb:12:a7:0d:8a:4f:9b:5b:
e3:28:a7:7a:36:d3:1d:75:29:ff:b7:89:f9:e5:9e:
96:64:6f:d0:78:99:87:4b:13:95:37:cc:4c:a8:b2:
81:5a:f3:70:b3:6a:fb:fa:e8:4f:b9:2f:b6:5d:88:
3f:65:d3:9f:b9:88:c7:35:42:56:32:18:e6:f1:af:
97:2b:b4:fb:fa:fe:e9:87:31:0d:23:df:6a:1f:5c:
9b:d0:7d:72:0b:42:29:7d:86:32:5e:42:92:6c:ec:
e0:c7:ff:16:93:3e:b2:85:3a:ef:cf:6e:56:a0:65:
54:84:e8:9a:5a:e4:01:a5:3f:7d:d0:3b:6e:e2:8b:
90:de:c5:8a:7b:ae:88:42:28:9e:e8:c9:74:d4:0a:
b5:c7:41:b1:9a:d2:21:dd:30:72:ed:67:82:3a:ee:
14:fc:ca:82:31:87:80:b3:cc:4e:c6:60:33:19:f1:
19:3b:3b:bb:ed:51:1a:b1:e1:61:c4:1c:e6:75:bc:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:16:F5:D9:81:AC:F4:12:70:44:AD:B1:62:04:ED:8D:F1:8F:B1
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/syoW9dmBrPQScEStsWIE7Y3xj7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/23
77.247.198.0/24
109.74.72.0/24
IPv6:
2a13:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
75:d6:8a:87:30:29:be:d9:3e:4b:3a:dc:7c:63:06:27:a0:ad:
85:e8:a8:c0:3f:db:34:fb:94:67:84:e9:5c:60:c0:cc:7b:83:
4f:bd:2e:3a:92:3e:1f:16:77:d3:bc:91:d9:e2:da:4f:13:e4:
8a:10:de:4a:bc:50:52:49:ae:2d:11:94:c0:b7:7d:6a:10:43:
c8:3d:3f:8d:df:3b:47:19:58:72:19:62:b3:e0:49:17:7e:35:
e8:a7:dc:50:3c:cf:13:8b:77:eb:72:0b:60:4b:5c:b5:22:d9:
c4:5e:2a:5c:2d:04:d2:47:31:3a:f2:95:8f:60:40:49:a5:81:
da:b7:ed:fa:d0:3f:92:36:01:6f:ac:bf:51:9c:97:a9:2c:34:
ff:ba:98:2e:d0:6d:0b:7a:ad:dd:3e:87:c0:47:98:2a:40:0a:
61:f4:69:83:de:bf:d6:82:e6:27:c1:c3:c2:6c:7d:1c:c2:d2:
f8:b3:9c:a6:04:71:04:0f:a7:33:d3:fb:6b:a0:e0:d7:5e:75:
ec:17:b2:7a:2e:90:2a:59:16:9e:e0:42:0f:01:1f:46:f2:7f:
bc:30:95:ac:d0:17:92:3e:81:22:77:35:5b:3f:9a:84:03:c9:
dc:3b:1c:9b:c2:07:72:9d:6a:e9:b2:cb:74:74:db:30:86:4a:
03:19:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:29 2026 by rpki-client