Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/X_U3e_j_BQQB5J7FdGp0EeARODQ.roa
File: X_U3e_j_BQQB5J7FdGp0EeARODQ.roa (raw, json)
Hash identifier: ttL/fkTTQSuG7aZuTgVJ2bkgv1TNShH60891lGd8qPs=
Subject key identifier: 5F:F5:37:7B:F8:FF:05:04:01:E4:9E:C5:74:6A:74:11:E0:11:38:34
Certificate issuer: /CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf
Certificate serial: 019B79EC55FBDE88116CD07C5427ACFF96AF
Authority key identifier: 61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/X_U3e_j_BQQB5J7FdGp0EeARODQ.roa
Signing time: Thu 01 Jan 2026 14:18:10 +0000
ROA not before: Thu 01 Jan 2026 14:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203620
IP address blocks: 185.1.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:55:fb:de:88:11:6c:d0:7c:54:27:ac:ff:96:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf
Validity
Not Before: Jan 1 14:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ff5377bf8ff050401e49ec5746a7411e0113834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:0c:d8:e8:fe:51:0f:e5:15:6d:7f:2c:a1:
1f:8f:0b:c3:b4:1e:d4:30:32:8e:30:02:f7:af:a1:
d8:f8:dc:24:72:2d:fc:23:b3:20:98:63:49:7c:b9:
ea:b0:53:ba:d7:a8:8a:5d:02:b1:f9:c1:b8:62:67:
d2:46:67:0f:3b:1e:5b:c7:c0:a8:8d:da:58:d0:fc:
3e:81:d4:75:ab:1e:4f:8a:eb:44:c3:16:3a:64:e1:
6a:58:ff:5a:7d:84:7b:eb:0a:5e:00:90:fe:61:99:
76:d3:19:22:f2:9b:75:ad:26:d7:7b:78:41:8b:16:
2e:ec:53:e7:1c:6b:0e:f1:3b:f6:b8:56:50:4d:9e:
11:14:87:c6:2b:f7:11:3e:30:21:a8:e8:23:90:2d:
16:15:87:95:54:33:c6:fd:77:7d:9d:eb:f4:73:c5:
05:1f:fc:2e:be:99:f8:19:a7:ea:e7:21:f6:3a:26:
cd:1c:11:f2:f2:ad:d6:9e:8d:42:61:c4:9b:9d:3c:
06:26:4b:8f:b9:21:e9:10:0d:be:80:8a:83:94:e2:
62:0a:3a:51:e9:4d:cd:92:da:fd:85:cb:fa:b2:4e:
94:e1:26:03:d1:a3:19:61:fe:de:e3:c7:63:5f:49:
a3:a5:60:48:f3:2b:62:ef:81:af:04:9c:4e:f3:01:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F5:37:7B:F8:FF:05:04:01:E4:9E:C5:74:6A:74:11:E0:11:38:34
X509v3 Authority Key Identifier:
keyid:61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/X_U3e_j_BQQB5J7FdGp0EeARODQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.37.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9f:4c:1b:d1:e9:2f:c0:e1:97:e8:ed:59:4f:7f:30:37:14:
5d:8d:c4:3e:ae:6a:79:1c:b4:f2:47:b2:58:c5:d2:2d:38:e9:
3d:38:c7:c7:b8:d6:22:6c:ab:ea:43:77:f7:64:e5:8d:01:6b:
b4:4b:37:da:d0:ff:32:da:b0:58:f8:c0:26:29:2e:66:d1:86:
66:43:aa:ee:95:4d:cb:19:8f:8c:89:62:eb:ea:44:25:e5:b0:
5d:71:24:fa:18:c1:c1:5d:cb:4f:cd:ad:af:5b:66:b6:09:12:
3f:46:6b:2d:a0:da:b1:ad:df:3a:2b:34:4b:48:4c:6f:06:4b:
3c:3d:d5:4d:da:f0:f9:62:fb:37:5b:08:8a:b8:98:e1:ec:37:
c6:df:ae:48:8f:74:c9:22:06:7a:28:19:6a:9f:19:e2:3c:85:
79:b3:8e:43:7d:28:6c:63:6c:2c:7f:82:9c:8e:85:db:51:43:
41:c3:ef:63:fb:47:24:df:c9:50:66:91:e2:9c:a3:ee:ea:16:
0a:af:7f:cf:5f:7e:3a:da:33:26:d1:e7:d2:ec:a1:40:60:2e:
80:e2:52:01:6b:a2:06:7a:db:2e:c6:21:46:e4:92:5e:e4:8b:
96:be:c0:9f:d8:54:78:ee:a0:16:95:97:ea:ea:4a:a6:e5:01:
73:19:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:53 2026 by rpki-client