Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/lVjtasqfU-kbankfm4egs--WfDk.roa
File: lVjtasqfU-kbankfm4egs--WfDk.roa (raw, json)
Hash identifier: ao2QCrX6Wc4z15KwrwoCeRGBCcesNS+OjA60owj+xZ4=
Subject key identifier: 95:58:ED:6A:CA:9F:53:E9:1B:6A:79:1F:9B:87:A0:B3:EF:96:7C:39
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019D64E2EA89940413CCA35AE279B11D31B7
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/lVjtasqfU-kbankfm4egs--WfDk.roa
Signing time: Mon 06 Apr 2026 22:21:25 +0000
ROA not before: Mon 06 Apr 2026 22:21:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 46.32.162.0/24 maxlen: 24
46.32.163.0/24 maxlen: 24
46.32.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:64:e2:ea:89:94:04:13:cc:a3:5a:e2:79:b1:1d:31:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 6 22:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9558ed6aca9f53e91b6a791f9b87a0b3ef967c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:85:20:46:1b:0c:30:b0:e8:75:4d:ed:76:
24:96:bf:fe:a3:43:49:4a:fc:9b:38:13:c3:c2:f2:
21:be:5a:09:65:4b:69:97:98:07:eb:93:04:89:78:
8a:ab:b4:91:94:d1:1e:c2:29:fb:d7:f9:c8:39:6e:
d5:f9:3a:9b:e8:63:5f:08:45:02:ee:ed:3b:b2:d5:
64:5a:98:e3:5b:b8:79:b5:ad:52:02:2a:fc:53:19:
88:e3:cc:71:78:e7:88:67:e7:4e:d8:bd:cf:53:2c:
45:91:a7:59:3f:6d:8e:0f:d0:95:a7:be:f9:26:28:
26:5f:c7:32:ac:c6:59:45:a4:5f:e0:e3:e6:ca:56:
d3:ed:8c:4d:34:16:54:f1:7a:64:31:d8:ce:2d:79:
2a:a2:26:8d:74:30:67:da:7a:1b:55:21:96:32:6e:
8a:d8:5c:33:d0:d7:cd:2d:2f:42:02:d7:d8:ed:c6:
1a:e6:54:b4:ca:b8:50:66:17:6f:b9:18:ae:be:a4:
f8:0f:70:2b:a2:04:b3:2a:db:fe:a5:d3:e4:8c:4f:
f5:a8:0e:33:35:70:0d:f7:33:f5:bd:71:9b:2e:cd:
ab:af:b2:30:73:67:47:bf:1c:84:4d:1f:52:d4:41:
91:d3:83:46:7c:74:0e:b3:f1:f4:98:f8:88:d8:89:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:ED:6A:CA:9F:53:E9:1B:6A:79:1F:9B:87:A0:B3:EF:96:7C:39
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/lVjtasqfU-kbankfm4egs--WfDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.162.0/23
46.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a7:6d:fe:56:19:c3:9d:c8:e1:42:94:4e:2f:d9:db:bd:a7:
9b:f2:49:73:0a:91:df:59:3a:5c:5d:eb:86:e9:85:25:36:77:
25:96:c0:d1:24:67:7e:f5:be:a0:25:85:78:fe:44:23:e9:b5:
7d:fc:0a:9e:0c:e2:bc:6a:86:98:9e:d2:11:27:d3:e6:fa:62:
94:c1:55:41:96:12:59:91:fa:72:12:ed:6b:b9:7a:cb:37:c7:
83:b3:89:29:eb:70:11:c7:33:40:83:00:4e:01:4d:90:e6:2c:
dc:2c:74:62:9d:62:ee:e4:a7:bc:14:54:65:e3:ca:a3:6c:e3:
76:eb:75:df:3f:a2:97:09:0c:d7:cd:d8:c5:5c:53:be:16:0a:
80:6e:04:84:57:98:4b:8f:b4:9a:c9:49:33:2d:0f:3f:09:7d:
2a:88:63:41:6b:1b:a9:5e:e7:c9:af:95:59:f7:6a:51:d3:5a:
ff:32:59:87:c9:9c:79:d0:dc:df:72:cf:9e:19:28:b4:4e:82:
3e:21:6d:70:bc:eb:8b:d3:b6:42:bf:c9:d1:48:d2:22:e2:8e:
f9:e1:47:a8:f6:2c:db:89:00:c8:54:1b:52:91:7a:b1:77:f9:
82:ef:8d:a1:13:ad:1f:8e:b3:8f:50:9f:e8:01:ea:71:a6:07:
21:bf:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:10 2026 by rpki-client