Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa
File: PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa (raw, json)
Hash identifier: H9cZ2L0KfruHg2t6PS78Ci9ZD3D4RvqB2QYXRdEkt/A=
Subject key identifier: 3C:8A:CC:11:0C:A3:BD:52:95:79:8B:D1:26:95:CF:67:AD:6F:0E:F2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019C493457D7DB3CEAE007ACFC3588B98476
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa
Signing time: Tue 10 Feb 2026 20:18:13 +0000
ROA not before: Tue 10 Feb 2026 20:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 46.37.101.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:49:34:57:d7:db:3c:ea:e0:07:ac:fc:35:88:b9:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 10 20:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c8acc110ca3bd5295798bd12695cf67ad6f0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:7d:68:32:b3:e0:31:3c:df:10:4f:19:f5:
e7:9e:0d:54:b7:c8:8f:ce:50:43:6c:1e:c9:4a:16:
dd:60:b8:32:5e:86:b3:07:35:2e:87:50:d3:e0:83:
87:69:2b:33:61:0c:63:1a:46:ac:79:de:fc:ce:b1:
7c:a8:10:e5:98:ae:59:8c:a8:b6:fb:d9:5b:21:a5:
ac:c5:2e:04:62:7b:3d:e1:05:71:e0:ed:73:01:b6:
6a:e8:e7:85:56:ac:1f:e4:6c:92:3e:8f:87:9f:6d:
51:d7:93:2f:34:df:1a:06:81:ce:40:46:c9:b6:c8:
0b:4e:e9:7b:e9:4b:c7:9c:d6:b9:66:dc:bf:5a:51:
5f:ff:9c:1b:65:07:74:84:77:c2:c7:58:c7:1e:99:
ea:59:79:0d:4f:64:6d:e1:20:a3:a9:9f:f4:45:15:
7c:7a:54:d4:30:c0:47:3f:bf:f8:fb:b6:d1:e8:9a:
d7:39:08:85:d0:f0:23:6d:4b:1e:06:76:90:36:72:
be:07:a1:39:f3:c9:7b:38:50:1e:ac:42:08:cc:96:
e6:4b:1d:c9:28:4b:14:0f:fb:71:8b:6e:b8:a6:6f:
53:aa:b4:85:14:55:7a:a0:61:e8:be:ac:fd:17:0c:
df:a4:f5:cf:23:48:4e:c1:4b:a2:b2:c7:77:50:82:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:CC:11:0C:A3:BD:52:95:79:8B:D1:26:95:CF:67:AD:6F:0E:F2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
46.37.109.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c4:20:2c:fa:07:7e:de:ec:6c:4a:69:c2:4f:f7:ec:2e:7b:
5b:fb:9d:50:8b:2a:16:20:55:a7:07:38:2a:60:3d:bf:e2:1d:
05:6a:cf:70:34:99:f9:41:42:52:dc:87:bd:88:27:b9:7c:5d:
14:70:d1:78:d2:1d:28:f4:54:e4:9a:fa:74:27:38:73:d0:ad:
ae:9b:2e:42:06:44:ce:17:34:27:21:e4:c4:4a:e9:31:6f:f5:
a1:39:ec:98:97:39:80:2b:ab:67:b5:dd:a2:3b:99:0b:d3:fe:
d0:9d:9f:fc:df:ce:87:12:7b:70:83:dd:33:5d:26:83:22:97:
25:10:33:6a:16:f8:8e:9c:bb:b0:c5:81:49:00:8c:6b:ee:da:
07:fd:d9:59:cc:f1:54:c6:7f:9f:02:cf:29:7b:a7:4d:ab:e4:
b6:9b:08:0d:af:2f:d6:da:54:44:2f:31:31:b9:1a:ac:23:07:
e8:09:7f:7d:02:bf:0e:67:2e:52:29:c4:61:1d:05:83:95:c1:
30:92:b9:0b:ae:a2:04:e8:72:a0:00:bd:f1:10:96:96:22:a0:
b4:c1:9d:03:ac:59:9b:05:4d:41:03:c2:f7:68:d9:6d:ed:3c:
a9:af:4e:c5:4e:1c:70:26:ce:c3:46:95:38:16:21:05:5d:27:
c6:5b:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:20 2026 by rpki-client