Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/r9RKCxC-bJSZP5eNLFlTH-P45J4.roa
File: r9RKCxC-bJSZP5eNLFlTH-P45J4.roa (raw, json)
Hash identifier: 7LAwVur+A67mmGnNZEsZn6jtCdt4Y9Ty6Li1zYtAdB4=
Subject key identifier: AF:D4:4A:0B:10:BE:6C:94:99:3F:97:8D:2C:59:53:1F:E3:F8:E4:9E
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019DAF807EB48AAFDD6E9A77A0930C81085C
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/r9RKCxC-bJSZP5eNLFlTH-P45J4.roa
Signing time: Tue 21 Apr 2026 10:05:27 +0000
ROA not before: Tue 21 Apr 2026 10:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 46.32.163.0/24 maxlen: 24
46.32.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:80:7e:b4:8a:af:dd:6e:9a:77:a0:93:0c:81:08:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 21 10:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afd44a0b10be6c94993f978d2c59531fe3f8e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:08:bb:1c:48:f9:99:61:53:05:cf:3e:ad:
93:01:b7:99:c5:05:17:c6:d5:b7:8b:bd:8c:6c:de:
3b:ca:ee:f8:e1:97:31:de:2d:10:fd:fd:d7:62:c0:
9b:f5:37:dd:14:94:1d:7a:bf:5f:b5:0e:3c:97:5e:
f5:79:71:8f:97:c3:9a:76:f7:33:58:84:de:61:ac:
c5:14:15:b8:ee:29:b2:13:56:80:b5:1e:48:34:dd:
d5:5a:83:df:4f:d3:2a:bd:0a:76:6d:ee:ad:b6:a2:
ce:09:fa:ec:f9:d6:23:aa:77:e6:36:42:68:b0:f5:
e8:ac:7c:97:33:85:a3:5b:9b:cc:4f:2b:1c:fa:7a:
75:ba:b3:bf:95:30:da:3a:a2:98:47:a8:1e:52:09:
8e:f5:57:e1:1e:1d:58:77:1f:11:b0:da:18:a8:ae:
8e:88:59:cb:fe:72:05:86:0a:2d:51:19:84:c9:b2:
39:5f:cf:ed:92:d8:69:32:7a:eb:30:51:c5:29:d9:
04:a3:1d:61:c0:4d:a1:8e:e4:e5:29:49:db:65:66:
1a:3a:3c:29:3f:de:2a:88:6e:15:7f:48:fc:f8:2b:
46:73:60:c8:5b:1f:1d:12:e3:a6:c2:70:b2:f3:07:
01:91:a3:7d:c7:bf:44:1e:f8:57:09:7e:2e:54:6b:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:4A:0B:10:BE:6C:94:99:3F:97:8D:2C:59:53:1F:E3:F8:E4:9E
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/r9RKCxC-bJSZP5eNLFlTH-P45J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.163.0/24
46.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:55:fe:1d:44:4e:8e:46:ef:72:29:c4:5e:22:83:ee:f1:38:
4a:9d:6a:72:af:f2:c1:c4:78:d9:57:d5:ff:f3:ab:ac:e4:b7:
c7:2e:52:64:bc:aa:91:25:19:4b:8a:17:9e:76:ca:6a:15:f6:
e8:a1:ff:e5:26:f9:d9:2f:8b:8b:70:ac:1a:ea:15:9a:b1:1c:
6e:7b:02:48:f8:4b:89:fd:a2:23:d3:29:60:b8:ca:c7:d7:33:
83:df:de:a0:e3:9a:0a:e6:2e:cc:c8:bd:3a:11:8e:12:e3:12:
32:e8:8c:46:24:c9:29:2e:1c:19:4b:69:80:74:bd:b7:a5:cb:
10:c9:c1:de:a9:79:db:60:ce:ac:fc:6d:40:9e:75:ab:36:56:
90:fa:9a:b7:a1:b2:f2:db:f2:cd:6e:56:11:80:2d:67:b6:47:
94:05:f6:db:51:73:eb:ab:42:ae:17:36:66:83:59:3c:31:a9:
01:19:61:c5:ed:3e:f6:b4:26:84:be:02:42:2d:94:4a:e3:ba:
82:b9:5b:48:e7:13:bb:45:74:d4:28:07:05:71:52:af:df:25:
25:5b:96:08:0d:5f:af:a8:e3:66:46:38:87:17:a8:a6:f9:ce:
03:20:a5:16:1e:25:75:e6:38:bc:5f:6f:4a:82:a0:0a:b3:45:
a5:41:b1:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2vgH60iq/dbpp3oJMMgQhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjYwNDIxMTAwNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmQ0NGEwYjEwYmU2Yzk0OTkzZjk3OGQyYzU5NTMxZmUzZjhlNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAIuxxI+ZlhUwXPPq2TAbeZxQUX
xtW3i72MbN47yu744Zcx3i0Q/f3XYsCb9TfdFJQder9ftQ48l171eXGPl8Oadvcz
WITeYazFFBW47imyE1aAtR5INN3VWoPfT9MqvQp2be6ttqLOCfrs+dYjqnfmNkJo
sPXorHyXM4WjW5vMTysc+np1urO/lTDaOqKYR6geUgmO9VfhHh1Ydx8RsNoYqK6O
iFnL/nIFhgotURmEybI5X8/tkthpMnrrMFHFKdkEox1hwE2hjuTlKUnbZWYaOjwp
P94qiG4Vf0j8+CtGc2DIWx8dEuOmwnCy8wcBkaN9x79EHvhXCX4uVGu8ywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK/USgsQvmyUmT+XjSxZUx/j+OSeMB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvcjlSS0N4Qy1iSlNaUDVlTkxGbFRILVA0NUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiCjAwQA
LiCwMA0GCSqGSIb3DQEBCwUAA4IBAQAcVf4dRE6ORu9yKcReIoPu8ThKnWpyr/LB
xHjZV9X/86us5LfHLlJkvKqRJRlLiheedspqFfboof/lJvnZL4uLcKwa6hWasRxu
ewJI+EuJ/aIj0ylguMrH1zOD396g45oK5i7MyL06EY4S4xIy6IxGJMkpLhwZS2mA
dL23pcsQycHeqXnbYM6s/G1AnnWrNlaQ+pq3obLy2/LNblYRgC1ntkeUBfbbUXPr
q0KuFzZmg1k8MakBGWHF7T72tCaEvgJCLZRK47qCuVtI5xO7RXTUKAcFcVKv3yUl
W5YIDV+vqONmRjiHF6im+c4DIKUWHiV15ji8X29KgqAKs0WlQbH2
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:16 2026 by rpki-client