Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Pt0g1cDZrNAna_HmJa7FdYBFHVQ.roa
File: Pt0g1cDZrNAna_HmJa7FdYBFHVQ.roa (raw, json)
Hash identifier: 3nbeebiCdKVabOkCTyjek3G0hTm2ELIk8OypLJ98YYY=
Subject key identifier: 3E:DD:20:D5:C0:D9:AC:D0:27:6B:F1:E6:25:AE:C5:75:80:45:1D:54
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F90E01D046AE9C3EDA0C8333AAD499D6F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Pt0g1cDZrNAna_HmJa7FdYBFHVQ.roa
Signing time: Thu 23 Jul 2026 21:27:14 +0000
ROA not before: Thu 23 Jul 2026 21:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52037
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.99.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.111.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:e0:1d:04:6a:e9:c3:ed:a0:c8:33:3a:ad:49:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 23 21:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3edd20d5c0d9acd0276bf1e625aec57580451d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:c0:ae:6b:68:d4:ef:fd:f6:48:8e:ff:8f:
2b:3d:da:b6:ca:81:d2:dd:a0:0c:6b:2e:7d:65:e7:
94:42:95:fd:25:f3:71:bd:90:7e:d3:b4:58:f0:13:
48:2a:0e:ed:8c:70:67:0a:05:33:8d:2d:26:09:e4:
01:3f:ed:ef:96:d5:83:97:7c:24:f7:51:e8:3c:8b:
6f:ee:7e:6b:25:9b:dd:be:4c:2c:ae:68:14:cb:61:
2e:1b:f9:9a:b2:f1:dd:99:5c:80:ec:6a:aa:ab:d8:
49:3c:cb:68:c1:2f:a5:33:4b:9c:11:83:3e:af:db:
a0:8a:30:ba:df:c1:dc:38:a5:5a:c2:ae:a5:ce:47:
77:b8:6a:60:31:f7:49:3a:dc:f6:55:ab:43:6d:0f:
f6:59:ac:84:6e:73:c1:ee:2e:cd:4e:57:88:06:e5:
7f:58:39:3e:60:df:63:d4:c3:98:ff:bd:22:92:27:
c6:a8:0c:67:a1:20:85:f9:32:08:1e:5d:20:53:4d:
9d:fb:cd:17:52:d6:05:7e:30:75:ef:b6:ff:87:62:
6f:35:4f:10:37:fe:9a:9e:b6:0b:2b:3e:ee:34:34:
e5:f5:a9:c9:6f:41:c3:3e:9e:b9:5b:cb:dc:c3:84:
af:25:25:f9:1a:36:58:7b:c0:e3:15:be:91:c4:5d:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:20:D5:C0:D9:AC:D0:27:6B:F1:E6:25:AE:C5:75:80:45:1D:54
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Pt0g1cDZrNAna_HmJa7FdYBFHVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.99.0/24
46.37.101.0/24
46.37.111.0/24
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6c:3a:2b:63:e8:93:b7:af:2a:75:ad:44:21:f9:63:27:2e:
95:3d:4d:27:a1:da:05:ac:70:3e:67:98:86:6a:c7:a8:22:9d:
02:21:10:24:40:87:00:c8:09:1d:1b:d1:b8:53:d0:e5:44:9a:
6d:aa:68:79:8c:d6:93:5c:a8:1f:3e:af:19:42:da:48:80:b4:
ec:9c:f9:19:a0:50:e7:82:21:dc:60:aa:cb:f6:ac:63:b8:7d:
53:ff:5f:4c:5c:ca:9e:65:b4:ef:f2:06:a8:64:3e:34:1f:99:
8d:a7:4d:c9:fc:5e:74:91:0c:b6:4f:58:7b:3e:b8:64:cf:ae:
e3:69:04:b0:e1:8a:c8:d4:ec:6d:e6:81:d9:fb:16:7b:ae:e1:
63:5a:a6:1c:92:7f:46:02:3d:a3:6f:84:36:73:cb:57:93:cf:
55:50:87:11:80:61:0f:96:0c:27:f1:b5:40:a3:21:e4:98:89:
0c:5d:71:48:0f:80:aa:eb:0e:c4:b5:93:fe:b5:41:07:63:fa:
1a:4d:3f:4b:78:ca:57:4f:81:1c:97:7b:45:e4:f2:98:44:e2:
e5:2f:91:fb:35:6f:9e:03:f5:2b:75:48:af:02:fb:f4:72:f4:
98:e4:e0:62:10:d4:93:86:78:6c:eb:1e:79:ae:e5:34:07:ed:
90:11:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:18 2026 by rpki-client