Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/S5eHWbCTD3kycubNFerjKamfi4I.roa
File: S5eHWbCTD3kycubNFerjKamfi4I.roa (raw, json)
Hash identifier: o7dyZGM2qcsZyj+mBsOfCD0KN5RaMLAz3lvemx7lSnc=
Subject key identifier: 4B:97:87:59:B0:93:0F:79:32:72:E6:CD:15:EA:E3:29:A9:9F:8B:82
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A0AF578A4C2B48003A8999262ACC430B35
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/S5eHWbCTD3kycubNFerjKamfi4I.roa
Signing time: Thu 17 Sep 2026 12:29:04 +0000
ROA not before: Thu 17 Sep 2026 12:29:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.99.0/24 maxlen: 24
46.37.111.0/24 maxlen: 24
46.37.112.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:57:8a:4c:2b:48:00:3a:89:99:26:2a:cc:43:0b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 17 12:29:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b978759b0930f793272e6cd15eae329a99f8b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:7e:73:3c:26:56:68:9e:5e:33:0a:5a:74:
0f:c2:6d:fa:f3:d2:8a:de:9a:a1:a4:ae:10:7e:a3:
19:7c:96:1a:f9:d2:34:fd:f6:f9:70:6b:4b:b6:20:
97:ab:18:e6:14:32:e1:b2:37:d4:83:62:7a:01:84:
7b:61:74:79:9a:ff:0c:ee:29:0e:24:5f:b2:30:5c:
30:99:28:29:27:4c:f1:00:7a:1d:0b:88:aa:c7:9b:
88:0f:54:5b:8c:22:47:af:06:83:2c:e4:ba:58:88:
e9:80:a4:9a:04:7e:99:e2:f7:60:1e:83:62:c0:81:
26:58:8d:ff:10:5c:88:d6:bd:7c:ba:b2:c2:26:7e:
11:02:b9:80:48:60:c8:9e:6f:03:d3:bf:a7:14:97:
a1:fd:ef:83:01:ae:b4:24:bb:5c:f0:bf:5c:a2:09:
0a:fc:b7:00:db:8f:83:05:17:47:d8:91:d1:ab:e1:
bb:cc:b5:d7:72:21:70:73:db:90:f7:45:47:7f:9e:
b6:08:51:15:6e:9d:bd:b4:21:d1:cd:4f:94:f4:84:
2c:e0:0b:e0:c5:fe:01:f3:0e:be:6d:48:f5:6a:79:
5c:f2:83:c3:5d:71:b1:4f:44:54:33:39:0f:34:54:
e5:c2:cc:e6:d0:66:03:f8:9d:6d:ca:6d:e8:2f:9c:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:87:59:B0:93:0F:79:32:72:E6:CD:15:EA:E3:29:A9:9F:8B:82
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/S5eHWbCTD3kycubNFerjKamfi4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/23
46.37.111.0-46.37.112.255
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9c:b4:af:78:13:07:85:54:78:6e:7f:d6:93:1e:a9:5b:bd:
38:1d:06:47:76:d8:c9:2e:39:67:53:7d:10:4e:83:4e:f8:ad:
28:a1:6b:13:4c:e1:44:ba:f0:4c:3a:0f:8e:d0:88:d1:05:3a:
42:ce:40:b3:77:63:81:35:ca:16:72:8f:8c:6d:12:6e:70:a2:
1f:95:77:c3:4f:1b:26:e4:ff:e4:5b:fb:be:20:36:87:fa:74:
a4:8e:79:09:38:45:c5:16:40:c0:5c:35:e3:67:da:8a:94:a9:
b9:f8:8e:7f:45:72:56:78:d9:c7:4f:59:2c:1c:9f:f0:dd:07:
3c:30:d0:25:3e:55:e1:a3:bb:0e:98:0e:d5:cb:37:97:31:53:
86:55:22:5c:78:b1:ed:cb:44:6a:5b:f2:41:12:11:a7:31:57:
1e:db:ee:3d:fa:70:0b:96:31:fb:83:1a:40:0e:04:41:ec:2e:
5a:92:87:eb:89:af:60:c2:8e:48:5e:91:76:78:b4:c2:58:1c:
2c:41:e8:e6:9a:6b:ae:ae:0f:5c:b7:92:5b:f6:6f:c0:76:21:
9f:bd:ac:2e:99:8f:f3:e1:70:74:bd:c8:91:ab:10:86:c1:59:
da:87:0a:d0:97:bf:f9:47:c9:d0:91:4a:2a:ac:0d:ac:c7:c9:
6a:f8:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:31 2026 by rpki-client