Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dtofDYxNbSW5-ltCAtMHfg09GK4.roa
File: dtofDYxNbSW5-ltCAtMHfg09GK4.roa (raw, json)
Hash identifier: iuK+kVRyhCLi4SPpJ72YwpCbGPRMyN6nmB2B87hO1xI=
Subject key identifier: 76:DA:1F:0D:8C:4D:6D:25:B9:FA:5B:42:02:D3:07:7E:0D:3D:18:AE
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D1C84816AA3221A0999E53E2A54D805B6
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dtofDYxNbSW5-ltCAtMHfg09GK4.roa
Signing time: Mon 23 Mar 2026 21:05:39 +0000
ROA not before: Mon 23 Mar 2026 21:05:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210135
IP address blocks: 46.174.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:84:81:6a:a3:22:1a:09:99:e5:3e:2a:54:d8:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 23 21:05:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76da1f0d8c4d6d25b9fa5b4202d3077e0d3d18ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:68:c5:33:b2:6e:f2:14:96:77:27:23:ce:
ae:b5:1c:3f:b0:96:f0:ef:9c:01:19:58:04:27:5c:
97:be:f9:f2:bc:2e:c9:26:1a:a3:69:8a:b4:a1:e8:
8d:b6:8b:49:f7:71:3a:e2:a4:6b:df:57:88:84:3e:
f1:d7:da:a9:2f:ef:26:24:3a:fc:dd:2d:76:80:ec:
60:92:17:89:70:50:41:76:b8:af:4f:ab:b6:d5:01:
a2:fd:b1:dd:3b:b8:13:b4:0a:02:d1:57:af:c6:95:
2f:b9:0b:21:5f:45:ff:6b:5b:38:d2:80:d1:1f:2c:
21:94:5b:a1:24:7b:97:82:fb:76:c7:43:a7:33:ba:
61:2d:f9:2a:79:6b:6d:ca:65:c2:7a:b3:fe:e9:d4:
e1:3a:ca:aa:79:7e:c6:38:d5:1d:1a:ca:11:4e:61:
c9:61:be:7e:9d:af:6f:ed:c1:fe:68:b1:52:0f:39:
04:76:6f:bd:7a:9b:04:ee:b2:e6:be:d8:45:48:ff:
9b:cd:64:68:65:22:5e:69:77:01:0a:63:ce:ac:83:
5b:11:b1:20:9e:69:b0:03:dd:7f:23:0f:65:4b:fb:
fc:36:2c:df:30:aa:a7:3e:1b:21:3e:cc:95:5d:98:
75:30:b7:f3:af:50:b9:02:c9:19:98:19:9f:4d:16:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:1F:0D:8C:4D:6D:25:B9:FA:5B:42:02:D3:07:7E:0D:3D:18:AE
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dtofDYxNbSW5-ltCAtMHfg09GK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.198.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ae:07:b7:50:e3:3d:71:21:1d:c0:66:0c:b0:34:46:33:68:
73:81:3b:48:bb:2a:4c:4e:66:0a:4e:4e:42:5d:45:a2:e2:69:
48:fb:31:a1:06:22:d6:c3:3e:cc:df:2f:fd:88:a9:8e:56:79:
6e:8d:87:50:9d:53:fa:88:9e:90:04:b2:81:f8:85:b1:d1:f7:
01:61:2d:a9:d4:f8:89:0a:45:7b:60:f9:11:5b:8e:10:8d:f3:
f3:e8:05:75:23:a0:67:63:90:74:8c:28:75:ce:89:9b:12:14:
5f:14:2b:d3:26:31:f5:43:e3:76:d5:4b:c2:47:4e:72:be:5a:
fd:4e:c2:f1:23:03:e6:5a:2a:60:52:58:14:31:05:44:54:33:
15:7a:a1:57:01:a9:eb:8a:da:48:bb:12:fb:eb:ce:d4:1f:60:
db:eb:96:25:7c:44:b4:b4:f0:92:b1:0e:e6:f7:ea:6b:18:26:
b2:20:fc:db:55:99:e6:7c:3b:c0:f1:4b:93:c5:92:52:6b:67:
b1:86:57:69:c6:f1:c4:da:3e:5b:81:09:8f:e1:0d:50:7b:e9:
93:29:e7:ba:a4:18:69:20:04:e0:2b:d3:49:eb:f4:77:3e:38:
26:55:e9:fe:8e:3f:a3:b4:86:31:54:ff:81:86:2f:ae:08:73:
52:32:bf:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0chIFqoyIaCZnlPipU2AW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwMzIzMjEwNTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmRhMWYwZDhjNGQ2ZDI1YjlmYTViNDIwMmQzMDc3ZTBkM2QxOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vpoxTOybvIUlncnI86utRw/sJbw
75wBGVgEJ1yXvvnyvC7JJhqjaYq0oeiNtotJ93E64qRr31eIhD7x19qpL+8mJDr8
3S12gOxgkheJcFBBdrivT6u21QGi/bHdO7gTtAoC0VevxpUvuQshX0X/a1s40oDR
HywhlFuhJHuXgvt2x0OnM7phLfkqeWttymXCerP+6dThOsqqeX7GONUdGsoRTmHJ
Yb5+na9v7cH+aLFSDzkEdm+9epsE7rLmvthFSP+bzWRoZSJeaXcBCmPOrINbEbEg
nmmwA91/Iw9lS/v8NizfMKqnPhshPsyVXZh1MLfzr1C5AskZmBmfTRZ5iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbaHw2MTW0lufpbQgLTB34NPRiuMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvZHRvZkRZeE5iU1c1LWx0Q0F0TUhmZzA5R0s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALq7GMA0G
CSqGSIb3DQEBCwUAA4IBAQBirge3UOM9cSEdwGYMsDRGM2hzgTtIuypMTmYKTk5C
XUWi4mlI+zGhBiLWwz7M3y/9iKmOVnlujYdQnVP6iJ6QBLKB+IWx0fcBYS2p1PiJ
CkV7YPkRW44QjfPz6AV1I6BnY5B0jCh1zombEhRfFCvTJjH1Q+N21UvCR05yvlr9
TsLxIwPmWipgUlgUMQVEVDMVeqFXAanritpIuxL7687UH2Db65YlfES0tPCSsQ7m
9+prGCayIPzbVZnmfDvA8UuTxZJSa2exhldpxvHE2j5bgQmP4Q1Qe+mTKee6pBhp
IATgK9NJ6/R3PjgmVen+jj+jtIYxVP+Bhi+uCHNSMr+B
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:24:28 2026 by rpki-client