Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/l0swrNMXi-svMS6jjkRAvcnX76U.roa
File: l0swrNMXi-svMS6jjkRAvcnX76U.roa (raw, json)
Hash identifier: 2xAo3OhindkFVmMyaDAlULhUowyucvC4rF7Yokpv8MQ=
Subject key identifier: 97:4B:30:AC:D3:17:8B:EB:2F:31:2E:A3:8E:44:40:BD:C9:D7:EF:A5
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A17F0DFD7287CC335BF69106E5FCF5A97E
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/l0swrNMXi-svMS6jjkRAvcnX76U.roa
Signing time: Tue 27 Oct 2026 20:29:45 +0000
ROA not before: Tue 27 Oct 2026 20:29:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 185.105.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:0d:fd:72:87:cc:33:5b:f6:91:06:e5:fc:f5:a9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Oct 27 20:29:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=974b30acd3178beb2f312ea38e4440bdc9d7efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:de:72:38:b8:6b:4d:6d:e4:8d:20:06:9d:
b0:11:c5:d2:0a:7c:65:1c:25:1c:16:b3:22:2c:46:
40:06:72:6e:fe:31:59:cf:fd:dc:71:ec:67:2d:bc:
f7:b5:3e:81:7a:57:ae:bb:fa:52:12:c0:8c:fc:90:
12:c6:9b:c0:94:ba:7c:0c:bd:cb:0c:a8:e7:82:cf:
07:94:4e:9e:a9:3e:34:03:95:33:bf:1c:c5:27:55:
0b:b9:d8:2a:ce:2d:0b:ad:f4:31:d2:3d:f4:11:55:
33:6a:3b:32:d3:ca:eb:c7:19:d7:a9:74:a1:16:0a:
16:b1:a2:32:2c:9d:b5:23:d5:66:99:1a:40:2e:56:
ff:d2:2c:46:05:ad:ba:da:ee:36:96:a0:19:57:82:
74:37:06:c9:e2:22:5d:47:52:36:a0:e4:96:c9:cd:
90:fd:8a:2a:b1:63:eb:9c:5d:1f:0a:6f:50:13:8f:
e1:ae:bb:e2:e3:bc:e7:fb:92:84:9e:c2:7e:d2:0c:
33:dd:6c:4c:f4:9b:ad:fc:f2:5f:c2:39:fb:b3:a4:
0a:69:88:ae:d3:e9:ea:15:9d:1f:f0:56:b8:e7:03:
b5:84:f1:4c:85:11:70:0e:f7:e6:34:27:bd:b5:88:
50:d1:cc:c7:de:dc:1e:38:f3:15:57:be:7c:cb:fe:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:30:AC:D3:17:8B:EB:2F:31:2E:A3:8E:44:40:BD:C9:D7:EF:A5
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/l0swrNMXi-svMS6jjkRAvcnX76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.46.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cc:46:d3:08:66:db:92:ed:f4:14:3e:3e:77:28:a9:5a:e9:
6f:7c:de:fd:da:ef:ad:43:42:76:da:f1:22:1e:ff:bf:66:5e:
93:f6:99:de:fa:5b:ad:3f:66:a1:0d:ec:72:66:28:7b:23:ed:
30:86:22:ca:68:c8:b7:a6:c5:ad:96:74:7b:9e:58:03:6a:da:
92:29:9f:09:07:f6:74:2e:bd:e2:ba:07:6e:c9:a1:4f:9c:01:
49:70:6a:56:8e:53:26:25:20:32:96:10:4e:16:e1:fe:3b:74:
47:6f:f3:15:e1:cc:c2:5e:7d:e9:6f:84:d3:bd:24:eb:e1:21:
26:0e:91:52:a1:46:72:f4:ca:43:2a:80:83:15:1a:d0:2c:21:
36:62:e5:f1:d2:97:a3:da:0a:ea:34:31:99:37:e4:cc:3e:62:
37:f7:7e:b1:5a:57:be:a5:02:71:fb:04:8c:6f:8c:75:da:80:
f1:ef:4a:29:6c:6c:9e:32:bf:25:cd:bc:65:79:ed:23:fb:19:
fd:e5:4e:c2:51:b8:18:68:cc:bb:a6:f0:24:48:41:8d:45:ac:
20:06:8b:7f:58:c5:45:c5:2f:1a:95:4d:53:d1:89:f8:68:9e:
5a:f4:9c:fe:61:8a:e3:07:25:ef:b1:b6:fd:8b:ad:75:83:50:
96:41:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:36 2026 by rpki-client