Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/f7DP5OjhuftCyOvmozatScfoVqk.roa
File: f7DP5OjhuftCyOvmozatScfoVqk.roa (raw, json)
Hash identifier: A+ooEGsMkGCbGxD0pTPdrwF6n7LaWKxHml5t3531mgg=
Subject key identifier: 7F:B0:CF:E4:E8:E1:B9:FB:42:C8:EB:E6:A3:36:AD:49:C7:E8:56:A9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A0C87CA5E1438E32D36512CAA3DED1BD91
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/f7DP5OjhuftCyOvmozatScfoVqk.roa
Signing time: Tue 22 Sep 2026 09:40:07 +0000
ROA not before: Tue 22 Sep 2026 09:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.99.0/24 maxlen: 24
46.37.111.0/24 maxlen: 24
46.37.112.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:7c:a5:e1:43:8e:32:d3:65:12:ca:a3:de:d1:bd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 22 09:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fb0cfe4e8e1b9fb42c8ebe6a336ad49c7e856a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:3b:0f:0f:64:f5:44:28:ec:5f:a5:e9:b8:
1d:eb:d5:34:39:37:2d:92:ad:a7:97:c2:57:0b:84:
6f:79:a3:c6:65:97:69:43:f0:49:81:a2:e7:ce:c9:
d5:af:3c:0c:29:96:d4:76:24:fb:6d:e0:9f:22:ed:
a4:5d:d8:ff:37:01:d0:1f:b8:62:76:cc:0f:61:46:
14:3c:0a:56:30:a4:fc:52:e4:a1:6e:2b:be:87:0c:
64:5b:74:eb:5a:e0:fc:62:c8:fc:53:22:2a:27:50:
2d:c3:8a:4a:ac:4c:86:5e:df:50:aa:90:cb:49:0b:
b5:40:b4:c1:e6:26:9e:f2:37:8d:35:06:9e:a8:57:
ae:96:98:59:0c:33:fd:06:07:f7:f4:04:19:be:68:
bf:16:4f:6d:fa:52:b6:9e:97:b3:f2:9c:2f:ff:f6:
5a:45:88:99:d2:f4:ff:44:51:f7:4c:d6:f8:01:34:
52:ef:7d:08:60:9b:de:f4:b7:d2:fe:67:03:31:a3:
57:b4:ed:5b:4f:c6:7b:00:cc:86:60:06:e0:d6:78:
5b:f4:fb:b4:a7:88:3b:8d:d8:d7:ed:47:40:ab:37:
83:28:9f:e1:e3:43:4c:4c:e1:d3:8e:b9:8c:86:90:
00:75:5c:99:75:28:cd:1f:c2:bd:96:55:85:31:74:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B0:CF:E4:E8:E1:B9:FB:42:C8:EB:E6:A3:36:AD:49:C7:E8:56:A9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/f7DP5OjhuftCyOvmozatScfoVqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/23
46.37.111.0-46.37.112.255
46.37.121.0/24
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a0:ca:0f:f6:c7:a8:4a:1a:e4:3f:b0:f1:ff:e3:47:61:1c:
d2:92:ea:f4:52:64:5c:6e:c8:81:b9:bf:80:19:9e:18:cd:44:
90:f4:f5:96:02:e4:ad:9e:61:c0:ac:9a:30:bf:5c:a8:51:6f:
47:1c:bf:63:57:59:55:42:5a:f0:6f:9a:5c:2c:c5:24:14:da:
d9:8f:3b:9b:83:6d:c4:f2:3a:e3:f6:e1:03:8f:b3:05:ae:c4:
2c:94:af:97:cd:9a:c0:ac:c9:12:cb:34:b6:79:b7:c7:a7:64:
95:76:9c:61:ee:5d:d4:6e:f5:30:64:f8:e7:b7:48:f8:55:8a:
e6:63:76:15:27:45:1b:01:39:6d:27:ff:eb:53:72:ca:2a:a0:
55:80:0c:d5:c4:fe:e3:be:a0:8e:2d:7b:84:de:e8:65:52:72:
79:6e:73:3f:9c:35:42:ec:8c:f3:70:08:64:27:41:af:74:f1:
64:d3:99:57:fa:d9:b2:4b:27:e9:8f:75:b1:2c:11:0b:1f:aa:
fa:4b:fe:c8:59:8c:7b:ed:c0:8d:3e:51:79:f1:31:f6:5f:27:
88:2c:83:88:35:51:a9:d1:76:9f:03:12:3b:91:e3:6c:53:83:
44:40:20:a5:35:70:f3:7c:b3:85:fd:0f:0b:60:1c:f3:b8:cb:
15:87:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:50 2026 by rpki-client