Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/phIldGr0t0uwTW-BuSAmzN6XhjE.roa
File: phIldGr0t0uwTW-BuSAmzN6XhjE.roa (raw, json)
Hash identifier: raVegt7yKtN8ZFOUbeTVHlJ8PtEpgoSSdoNKxRXXN5Y=
Subject key identifier: A6:12:25:74:6A:F4:B7:4B:B0:4D:6F:81:B9:20:26:CC:DE:97:86:31
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019C9DD942026406A61AE4474275DC7E9184
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/phIldGr0t0uwTW-BuSAmzN6XhjE.roa
Signing time: Fri 27 Feb 2026 06:46:27 +0000
ROA not before: Fri 27 Feb 2026 06:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.183.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9d:d9:42:02:64:06:a6:1a:e4:47:42:75:dc:7e:91:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Feb 27 06:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a61225746af4b74bb04d6f81b92026ccde978631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:67:14:e0:cb:1c:45:09:eb:7a:7e:fb:6b:
58:bd:bb:88:ef:6f:28:12:8b:17:8f:39:e3:6d:08:
b7:3c:93:08:63:0b:60:71:53:c3:78:c1:99:b0:ac:
d3:e0:7d:4c:ff:9e:c5:10:cd:a8:d8:e3:64:3a:9a:
e8:8f:10:12:89:d1:7a:a0:bc:fb:02:76:52:c8:5e:
1d:b4:01:d3:1f:36:f9:4b:02:c5:94:fd:ff:ed:d6:
71:c1:ce:20:52:dd:64:e8:24:eb:61:64:61:0c:07:
14:94:ab:4f:fc:d0:84:fb:b0:43:a3:5f:b9:f2:94:
8b:2d:44:50:a1:fc:b8:30:5e:25:c5:ac:e8:a0:a2:
eb:0e:7e:a9:ec:3e:bd:6d:18:29:17:c4:1e:56:30:
43:23:47:75:5a:78:36:94:99:dc:32:af:07:37:25:
00:a4:bd:1b:69:0a:de:07:af:eb:e4:1e:d3:b1:0d:
75:a3:ff:3b:9d:18:c6:00:fa:e4:6b:15:b6:0f:9a:
40:30:bc:69:ce:8f:ba:c8:da:fd:d7:23:8e:32:21:
11:b4:b3:11:e9:1e:77:f6:4a:09:db:54:75:02:da:
62:7d:df:a1:c6:90:c0:e5:66:b5:ce:5d:99:1b:2c:
d2:6d:c2:fc:2f:68:8b:5a:52:4b:64:6c:1b:61:f7:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:12:25:74:6A:F4:B7:4B:B0:4D:6F:81:B9:20:26:CC:DE:97:86:31
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/phIldGr0t0uwTW-BuSAmzN6XhjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.22.0/24
Signature Algorithm: sha256WithRSAEncryption
18:be:b7:9f:74:8f:d0:64:9c:4c:58:ed:e9:12:13:84:f5:4d:
cb:23:04:b9:f2:72:0d:2b:bd:67:9c:cf:75:63:36:ee:fd:e3:
b0:71:87:83:27:1d:3d:bf:fa:a5:a3:93:96:be:0a:e4:1a:f3:
53:94:d6:09:76:1e:ab:a6:71:37:11:c6:a7:77:1c:06:4d:47:
b6:7f:4e:9f:d7:15:00:e4:4d:a9:f1:09:ef:f7:5d:e5:4a:86:
50:31:fd:b0:28:d9:cb:76:ff:04:59:c2:ea:0a:54:a3:22:2d:
d6:04:22:ef:52:ec:9f:c4:3c:ef:3e:e3:e6:53:06:9d:6a:50:
97:22:37:2b:c9:04:87:02:36:d0:ff:b0:1a:69:fd:8f:68:58:
fb:9b:1f:cc:f7:1c:3a:0c:5b:eb:4b:a5:46:cf:f7:20:c6:2c:
9b:0c:43:4a:92:a3:63:27:96:e5:f2:a0:9f:09:ec:0a:c6:fd:
85:1f:21:29:a9:1e:ab:e9:d0:d8:05:7a:71:0f:f9:1f:c8:4d:
d6:f7:83:f0:1e:99:aa:fb:37:84:8b:98:a3:5c:da:ac:e1:ac:
5a:8f:47:34:17:3e:b4:2a:d9:9a:c4:af:c6:8f:c1:a8:29:ed:
ee:e4:c6:c7:ef:5c:31:b4:3a:61:7d:3a:a3:07:c0:3e:9c:b1:
b7:49:eb:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyd2UICZAamGuRHQnXcfpGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi
NzgzYzIwHhcNMjYwMjI3MDY0NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjEyMjU3NDZhZjRiNzRiYjA0ZDZmODFiOTIwMjZjY2RlOTc4NjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSlnFODLHEUJ63p++2tYvbuI728o
EosXjznjbQi3PJMIYwtgcVPDeMGZsKzT4H1M/57FEM2o2ONkOprojxASidF6oLz7
AnZSyF4dtAHTHzb5SwLFlP3/7dZxwc4gUt1k6CTrYWRhDAcUlKtP/NCE+7BDo1+5
8pSLLURQofy4MF4lxazooKLrDn6p7D69bRgpF8QeVjBDI0d1Wng2lJncMq8HNyUA
pL0baQreB6/r5B7TsQ11o/87nRjGAPrkaxW2D5pAMLxpzo+6yNr91yOOMiERtLMR
6R539koJ21R1Atpifd+hxpDA5Wa1zl2ZGyzSbcL8L2iLWlJLZGwbYfcqbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYSJXRq9LdLsE1vgbkgJszel4YxMB8GA1UdIwQY
MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt
NDRmOGVkNWQ2MWQ3LzEvcGhJbGRHcjB0MHV3VFctQnVTQW16TjZYaGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3
LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALrcWMA0G
CSqGSIb3DQEBCwUAA4IBAQAYvrefdI/QZJxMWO3pEhOE9U3LIwS58nINK71nnM91
Yzbu/eOwcYeDJx09v/qlo5OWvgrkGvNTlNYJdh6rpnE3EcandxwGTUe2f06f1xUA
5E2p8Qnv913lSoZQMf2wKNnLdv8EWcLqClSjIi3WBCLvUuyfxDzvPuPmUwadalCX
IjcryQSHAjbQ/7Aaaf2PaFj7mx/M9xw6DFvrS6VGz/cgxiybDENKkqNjJ5bl8qCf
CewKxv2FHyEpqR6r6dDYBXpxD/kfyE3W94PwHpmq+zeEi5ijXNqs4axaj0c0Fz60
KtmaxK/Gj8GoKe3u5MbH71wxtDphfTqjB8A+nLG3SesG
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:49 2026 by rpki-client