Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ArYyyh5YO0OWycK2LlltpOul3lg.roa
File: ArYyyh5YO0OWycK2LlltpOul3lg.roa (raw, json)
Hash identifier: lMXxXdbwW8BQ9CKu60A8CvAAyRSCnVbNOZhtJBxrPNE=
Subject key identifier: 02:B6:32:CA:1E:58:3B:43:96:C9:C2:B6:2E:59:6D:A4:EB:A5:DE:58
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019DFCD15D27FE6D4729B4F184ACA4728E9E
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ArYyyh5YO0OWycK2LlltpOul3lg.roa
Signing time: Wed 06 May 2026 10:24:32 +0000
ROA not before: Wed 06 May 2026 10:24:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147049
IP address blocks: 186.247.37.0/24 maxlen: 24
186.247.38.0/24 maxlen: 24
186.247.39.0/24 maxlen: 24
186.247.40.0/24 maxlen: 24
186.247.41.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:d1:5d:27:fe:6d:47:29:b4:f1:84:ac:a4:72:8e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: May 6 10:24:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02b632ca1e583b4396c9c2b62e596da4eba5de58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:39:e5:10:46:7e:59:12:6f:f9:bd:3a:35:
e6:ca:f6:c4:5f:b9:ed:4b:43:7f:8a:a9:a7:1f:fb:
a3:db:43:60:b8:b4:a4:5d:27:f5:1b:f5:27:60:af:
ca:b2:3c:88:c4:77:05:b2:2c:4b:59:89:09:32:a4:
de:60:1b:6d:62:e0:b7:a0:b9:68:a2:1b:88:a9:ae:
61:69:ca:dc:55:45:07:46:4f:e0:ea:3b:21:b2:b3:
d4:b9:04:e9:7f:5a:1c:7e:db:d7:14:30:d3:58:2c:
1c:10:d1:86:3b:cf:8e:b2:06:f9:a8:fa:b8:72:0d:
3c:15:13:d2:1c:6d:c5:54:8f:f4:f5:ef:34:52:a9:
1d:03:7b:71:77:f0:f2:4b:9f:43:0e:f3:c2:f3:87:
54:ee:f7:7c:de:7e:dd:dd:e7:ab:80:44:59:6d:5d:
48:86:fb:3a:61:e2:60:45:4f:16:e1:88:32:41:60:
ec:5f:e8:0e:7f:e4:54:39:94:ec:c4:ca:4c:c4:f9:
fb:ee:6e:a7:45:7c:f7:2e:65:4d:c3:43:02:72:80:
1e:67:a1:6b:54:4c:2d:f0:c4:3f:95:33:c1:d0:1f:
00:ce:6f:e9:84:95:33:3d:b0:69:60:5c:c4:84:53:
20:86:3d:61:53:6b:9d:e2:09:e9:88:f6:5a:2d:5b:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B6:32:CA:1E:58:3B:43:96:C9:C2:B6:2E:59:6D:A4:EB:A5:DE:58
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ArYyyh5YO0OWycK2LlltpOul3lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.37.0-186.247.41.255
IPv6:
2a13:240::/48
2a13:240:4000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:e4:69:f6:f0:ea:c9:29:f9:8f:9b:a5:eb:93:c8:fc:b4:9c:
46:bd:40:ca:58:02:82:72:bc:01:d7:90:64:14:06:9f:7d:f4:
1f:e7:23:f1:4d:53:ac:3b:8a:d7:9f:1f:c9:c5:da:33:42:8c:
4d:ef:32:29:18:51:e9:9c:f8:e3:06:e7:70:10:1c:2c:da:69:
0a:4f:16:77:41:e8:77:24:ef:94:2b:f3:b9:99:ff:6e:63:4e:
0b:ac:05:2c:b9:2e:e5:eb:87:b2:76:75:a7:74:06:83:9d:89:
b5:d2:a0:72:83:a3:60:ef:2f:1f:27:2f:f7:4a:35:0f:5b:43:
e9:ed:11:ac:04:dd:fc:2a:19:48:51:c6:07:99:2d:d0:69:86:
6d:5f:21:b0:44:9d:a3:2e:4c:dc:07:19:ee:96:35:d5:27:77:
8a:30:d1:92:df:e3:8f:2f:50:4a:d9:4c:91:c5:66:10:3f:dd:
37:6e:91:e0:99:61:3f:d8:b7:36:07:76:bd:aa:e7:73:20:30:
6c:3e:ed:b0:ec:08:cb:6a:c0:62:39:5b:36:89:f2:68:c4:65:
61:e5:18:fd:9a:ba:c0:c6:fd:b6:96:55:d5:b2:f1:ba:32:23:
32:39:cc:4d:f9:6b:d8:b8:5f:64:6b:63:91:d3:e2:8c:07:c9:
5a:61:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:57 2026 by rpki-client