Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vQ_gNtex9aWKRM0VACJ4pP_8V2w.roa
File: vQ_gNtex9aWKRM0VACJ4pP_8V2w.roa (raw, json)
Hash identifier: gmqsHWx0MY2a4Vl5ifXW8YS+T/MP69wUujy0mhPwfcw=
Subject key identifier: BD:0F:E0:36:D7:B1:F5:A5:8A:44:CD:15:00:22:78:A4:FF:FC:57:6C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019CE288A2B9F1BA6E3C3A80AEBC06D95723
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vQ_gNtex9aWKRM0VACJ4pP_8V2w.roa
Signing time: Thu 12 Mar 2026 14:52:11 +0000
ROA not before: Thu 12 Mar 2026 14:52:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:88:a2:b9:f1:ba:6e:3c:3a:80:ae:bc:06:d9:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 12 14:52:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0fe036d7b1f5a58a44cd15002278a4fffc576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:07:8d:53:9f:68:23:b9:a6:e5:3b:80:f2:
39:ff:10:50:97:57:29:08:38:e9:d3:27:eb:88:33:
cf:1f:a9:06:4a:88:f9:34:c5:55:9c:43:62:da:4a:
3a:86:2e:85:27:e9:86:8c:3e:15:40:78:b1:5d:ba:
ef:0c:93:2d:54:2c:ed:cf:d0:c8:c1:1e:9e:56:b7:
f7:1a:05:c4:04:85:09:86:82:07:2c:6d:86:b0:1b:
6f:9b:f5:ab:fa:57:35:28:b0:a2:c7:01:91:cb:6f:
74:95:3f:4a:88:e5:09:96:65:f1:31:06:60:5f:31:
4d:f0:31:0c:2a:5a:b4:6d:22:9b:c9:2e:17:45:86:
ae:f9:dd:df:20:7d:27:c1:4e:a0:5a:fe:72:04:6b:
ad:0f:f2:fe:70:a5:89:71:5f:15:5f:d7:f7:73:b4:
e7:cf:4c:55:ee:f6:68:41:41:1c:02:17:46:f2:0d:
c4:ca:38:e5:bb:12:0d:f0:1e:f5:d0:08:06:03:39:
c7:7b:5e:c2:29:e6:39:48:ca:0b:53:65:0e:6d:02:
23:ff:b7:83:a2:f5:52:d7:b8:d7:00:ca:ac:c3:bc:
31:0c:48:5c:80:53:6d:c5:65:80:60:45:46:8d:df:
28:c0:98:5f:c1:e0:12:79:b2:97:12:fa:e8:96:bf:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:E0:36:D7:B1:F5:A5:8A:44:CD:15:00:22:78:A4:FF:FC:57:6C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vQ_gNtex9aWKRM0VACJ4pP_8V2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
76:15:5d:bf:9d:4e:9d:b4:97:9c:8f:91:16:02:5a:98:50:03:
31:05:5f:de:32:f8:ea:ea:64:a2:f5:2a:6b:91:08:9b:44:19:
a3:a3:1f:00:05:fa:1c:87:58:48:1d:5e:e7:41:36:60:f8:30:
2d:46:c2:5f:fc:ee:7e:d9:d3:29:fa:87:1c:e6:c0:c2:44:b3:
d8:75:a6:e0:1c:93:45:1b:bf:ad:33:8a:80:1b:ad:35:6e:f8:
1d:e5:a4:3c:c5:4a:76:cc:00:c2:96:8f:9a:8c:ab:78:2e:99:
63:1f:ef:f5:65:69:cb:e3:ad:9a:b4:fc:22:62:85:f7:57:4a:
06:1a:50:4f:45:0f:b1:ee:35:ea:35:03:da:8f:bb:13:5a:29:
d0:b4:c9:16:10:79:a1:d6:5b:4b:16:d8:5e:16:b4:95:43:a8:
ba:3d:af:35:62:e2:de:3f:3b:d0:e2:5e:0d:99:0c:68:e0:a8:
f6:fe:a9:a5:61:fe:62:1d:f4:b7:77:89:83:b7:14:13:e7:4d:
8d:1e:27:14:4f:b8:7f:9f:fc:fa:3b:f0:63:45:9d:8e:3e:29:
40:5e:fb:7a:3d:3c:35:38:3d:11:01:88:26:88:04:7d:b4:ae:
3f:bf:ff:7e:da:a5:35:0c:70:75:ea:b4:56:44:b1:3f:a5:fd:
02:08:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:17:59 2026 by rpki-client