Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vLKvBp7s_vQg80ENAN920xq_l7s.roa
File: vLKvBp7s_vQg80ENAN920xq_l7s.roa (raw, json)
Hash identifier: 4umZU4nwWtNJV6IS8ogExdebn9ebjxpA6e0GGD2Bm3U=
Subject key identifier: BC:B2:AF:06:9E:EC:FE:F4:20:F3:41:0D:00:DF:76:D3:1A:BF:97:BB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019E0DD1D8853CCE79F2CDC2D728CCDC8372
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vLKvBp7s_vQg80ENAN920xq_l7s.roa
Signing time: Sat 09 May 2026 17:38:36 +0000
ROA not before: Sat 09 May 2026 17:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.99.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:d1:d8:85:3c:ce:79:f2:cd:c2:d7:28:cc:dc:83:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 9 17:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcb2af069eecfef420f3410d00df76d31abf97bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:cb:87:09:7c:b4:34:7a:02:f3:33:00:b8:
c3:4a:d5:21:87:79:d5:33:fc:eb:16:86:dc:c6:f1:
b6:95:33:30:d8:50:ce:fd:f1:82:7e:b6:7b:ef:58:
60:ca:2f:09:73:d6:69:84:c7:a3:eb:e1:dd:fc:c7:
4b:e6:18:fd:fb:1d:92:5c:87:cb:dd:3e:a4:a8:85:
08:81:25:d1:82:fe:95:77:22:d4:87:38:52:70:3a:
6f:56:47:c7:a3:46:d4:ac:5f:62:75:b2:06:cb:f0:
a9:85:6d:0c:d5:d2:7a:77:bb:b2:bc:db:6e:aa:e0:
1b:6c:53:f2:16:99:b1:c0:7f:8b:5d:03:5a:f5:12:
a7:71:f9:ad:52:3d:4c:a8:4d:05:b0:35:c7:7a:2b:
c3:72:ce:78:7b:4a:dd:a4:5c:95:ab:b7:96:e1:ac:
d0:5b:cd:f3:23:15:a1:7f:7c:53:70:91:42:69:61:
09:70:fb:76:28:ba:00:53:7f:59:42:79:08:41:7f:
da:37:81:d4:50:85:8a:89:86:97:ef:9e:90:1a:2e:
08:b8:12:7e:d0:1c:ad:3c:90:02:e9:2a:3f:71:30:
75:7a:1c:31:fe:c7:f5:6f:1b:ce:39:49:1a:aa:c3:
69:49:f7:65:a1:0b:37:22:4d:f4:64:aa:1b:84:98:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:AF:06:9E:EC:FE:F4:20:F3:41:0D:00:DF:76:D3:1A:BF:97:BB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vLKvBp7s_vQg80ENAN920xq_l7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/23
46.37.113.0/24
91.205.228.0/24
185.92.45.0-185.92.46.255
Signature Algorithm: sha256WithRSAEncryption
ae:01:9c:15:c8:8e:ae:52:9a:70:24:1f:63:7e:74:1b:d7:48:
84:3b:eb:53:84:92:bb:76:aa:e0:4d:07:ff:d0:d6:3b:9b:32:
6c:9b:2b:79:4a:75:ff:e9:97:55:47:4d:dd:c0:ce:02:bc:c8:
7c:c9:cd:6f:05:3c:a3:75:51:10:c8:8e:e2:4d:59:5b:f8:71:
db:9d:92:6d:91:5e:65:ab:28:ca:93:1e:61:ac:ef:db:a5:c8:
95:83:90:21:04:af:4e:ef:dc:96:a1:cd:4f:f6:54:4b:14:74:
4a:89:6b:31:8d:1f:ca:59:08:22:8c:d7:f0:8a:a8:54:e3:9a:
f3:95:f9:e8:05:7c:bc:a1:75:66:d9:ce:c7:42:13:2c:c8:24:
f7:6d:b7:35:bb:7a:77:93:55:dc:0e:f6:18:48:96:9a:da:b7:
51:df:00:ac:54:9d:70:53:8a:84:8b:e2:04:b9:b0:af:cc:fb:
bb:a1:4b:45:fe:f9:25:56:a8:4c:6a:1a:d0:78:68:41:04:d6:
df:9d:25:9d:4f:38:b5:6b:9b:d8:72:66:52:25:17:c7:1e:c1:
2d:41:1b:65:a6:eb:d7:89:0f:76:3a:98:88:e7:d7:2e:93:e9:
45:98:b8:53:2e:31:8b:f1:b7:43:f2:ec:c2:f7:59:5d:47:ed:
6c:80:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:45 2026 by rpki-client