Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Y4EFKpxgx5H6d1ZJ5Tvx6vLndEk.roa
File: Y4EFKpxgx5H6d1ZJ5Tvx6vLndEk.roa (raw, json)
Hash identifier: znZW9Q0y62rcsMH+6OqX4t80H0K8FKMbQa9zE+wyH0k=
Subject key identifier: 63:81:05:2A:9C:60:C7:91:FA:77:56:49:E5:3B:F1:EA:F2:E7:74:49
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 019F236938DC4F554BE1C238CF2C97E7FAE9
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Y4EFKpxgx5H6d1ZJ5Tvx6vLndEk.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3227
IP address blocks: 185.37.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:38:dc:4f:55:4b:e1:c2:38:cf:2c:97:e7:fa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6381052a9c60c791fa775649e53bf1eaf2e77449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:7c:73:4f:b1:98:82:52:d6:e4:e2:70:be:
2e:6e:6d:1c:f0:b7:8d:cc:86:43:f3:e2:b0:19:9d:
a6:b0:a2:bb:d4:6a:22:47:09:32:e9:83:12:cc:c7:
6b:48:4b:93:69:10:e5:18:17:35:76:d6:bc:a3:f1:
b9:2b:a0:a3:e2:5a:5b:0a:90:25:54:42:cc:99:2c:
28:19:37:11:7e:b8:bb:3a:3b:c5:b8:2a:ef:62:f1:
9e:89:e9:c4:23:09:b9:50:9e:dd:59:df:22:88:c5:
eb:2a:3b:29:c8:b3:37:6b:05:87:db:49:7c:58:40:
84:7b:e9:ac:89:f9:2c:74:15:bc:87:f5:47:a6:ab:
96:00:bb:ac:e0:03:3d:24:2b:00:72:58:42:b5:d1:
98:47:d3:4e:8c:c9:f0:1e:bf:19:47:3c:64:fb:d9:
e7:c3:d5:f8:ff:0f:25:35:65:b8:78:ef:3a:e3:e2:
69:26:fb:29:72:d5:9d:0a:bb:d2:9a:4a:23:33:3c:
f2:98:17:44:db:02:b5:ff:49:d9:b0:7a:e9:e0:d4:
e4:ac:da:cb:8c:95:36:db:bf:79:89:43:04:4a:69:
9b:01:72:3d:80:c3:35:4c:d7:bb:e7:62:c0:d7:c0:
a6:98:08:f0:4b:26:2b:13:cc:0b:8b:93:88:f1:1c:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:05:2A:9C:60:C7:91:FA:77:56:49:E5:3B:F1:EA:F2:E7:74:49
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Y4EFKpxgx5H6d1ZJ5Tvx6vLndEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.61.0/24
Signature Algorithm: sha256WithRSAEncryption
58:52:94:08:a8:f2:55:ad:d3:8a:d5:90:aa:81:00:0a:d5:ff:
bf:72:8a:0e:d4:cf:30:13:4f:bd:38:8b:f4:88:05:9a:e0:c9:
7b:2e:ba:e3:5a:45:64:f3:0a:fd:aa:ed:41:d8:6f:4b:d5:7c:
bb:0a:d4:d9:cf:c0:bc:df:f7:da:99:36:8b:50:1c:eb:72:b7:
63:24:e9:bb:ab:c9:28:db:ae:66:26:eb:54:7d:d9:32:46:67:
b4:17:8e:42:0e:72:11:cb:be:df:39:05:a7:63:af:b2:c8:2c:
94:af:cc:5f:57:4c:37:d6:fe:d8:fd:26:8b:01:e6:ec:20:f6:
7b:7f:71:2d:13:dc:68:3c:88:c6:8a:70:ec:1f:29:ed:af:df:
11:21:a7:c0:cb:51:be:a6:77:04:d4:31:ea:29:2c:74:f9:3f:
c2:cc:c9:cc:59:8c:16:58:70:42:ee:74:bf:7e:3f:91:96:48:
b9:94:52:2c:bd:67:2c:55:0f:68:c3:2a:55:f9:7e:f9:a5:a5:
e7:c0:35:81:f3:a2:2b:bc:be:4e:3e:15:a4:99:2f:ca:4f:76:
4e:52:4c:f7:32:b8:89:c0:54:5a:b5:17:3f:fa:07:0d:ef:00:
2c:aa:22:53:2a:66:ee:3f:22:14:02:6c:21:62:45:8f:41:bf:
7d:b6:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:33 2026 by rpki-client