Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/izjd7pxJGsgVnm5wJW0mSrVCg_Y.roa
File: izjd7pxJGsgVnm5wJW0mSrVCg_Y.roa (raw, json)
Hash identifier: hnF7Fq+5t9aF4YFqvNSO62t5HXp9Lxeq9FZy8/zmdKg=
Subject key identifier: 8B:38:DD:EE:9C:49:1A:C8:15:9E:6E:70:25:6D:26:4A:B5:42:83:F6
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 019DFCEDBECFBDB03C57257A9E5907B1DB29
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/izjd7pxJGsgVnm5wJW0mSrVCg_Y.roa
Signing time: Wed 06 May 2026 10:55:32 +0000
ROA not before: Wed 06 May 2026 10:55:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201749
IP address blocks: 37.205.112.0/21 maxlen: 22
37.205.112.0/24 maxlen: 24
37.205.113.0/24 maxlen: 24
37.205.114.0/24 maxlen: 24
37.205.115.0/24 maxlen: 24
37.205.116.0/22 maxlen: 22
37.205.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:ed:be:cf:bd:b0:3c:57:25:7a:9e:59:07:b1:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: May 6 10:55:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b38ddee9c491ac8159e6e70256d264ab54283f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:bf:96:32:2f:cb:ad:48:31:1e:f2:e1:4d:
7e:20:51:72:f3:67:56:d6:71:2c:68:9a:4c:ee:6c:
36:63:b5:35:ea:0c:b8:01:2a:48:02:42:e9:08:e9:
0c:74:9b:23:3a:6e:e3:da:17:a9:10:62:45:65:7e:
f5:f6:aa:8f:0a:57:f1:14:f7:25:45:7a:9f:97:69:
8c:5f:50:91:29:fb:da:6f:87:c9:4c:79:f0:ad:1b:
76:fa:52:4c:b3:e6:e3:0e:2a:bb:cd:a7:81:c9:d3:
e8:3a:79:15:70:6b:de:52:c8:9b:91:10:94:69:e6:
cd:61:df:9a:1f:24:3d:bc:a9:3c:bc:f0:bf:cb:7d:
4e:fa:93:75:72:92:95:a0:0a:ed:b5:3f:77:62:86:
89:3f:c8:2d:a1:54:b1:cc:77:8e:93:09:97:13:f8:
28:93:01:d2:2a:ae:95:e1:b4:75:17:f7:8e:27:02:
cd:91:37:b0:5f:11:83:f3:d1:16:92:c9:de:8b:13:
2f:54:53:c2:de:62:96:7c:e8:fc:fe:f7:34:f1:13:
6c:41:b9:bd:43:10:08:92:e3:72:37:c5:83:f9:06:
e6:10:fd:2e:ec:3c:80:20:5c:02:d5:36:e9:23:72:
a1:81:c2:14:89:4d:9f:dc:cd:17:0f:76:06:66:8c:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:38:DD:EE:9C:49:1A:C8:15:9E:6E:70:25:6D:26:4A:B5:42:83:F6
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/izjd7pxJGsgVnm5wJW0mSrVCg_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.112.0/21
Signature Algorithm: sha256WithRSAEncryption
31:16:98:42:ff:ae:fb:6e:1b:5c:6e:79:ea:29:38:10:d6:1d:
7d:2b:7c:bc:03:a7:25:27:f6:b8:31:44:68:b7:d0:92:07:52:
74:53:0e:37:39:3f:76:ff:de:8a:1a:11:8c:e4:3d:fe:47:63:
43:7a:b1:dc:e6:1e:ef:0e:2a:b0:42:8a:b5:a8:37:d9:00:00:
c0:da:68:dd:2a:0f:ef:bc:4a:d7:1c:80:c4:09:ad:74:5c:de:
9e:3c:4e:14:27:6b:07:36:0f:f2:f4:aa:3a:e2:fe:93:27:03:
9d:6a:9a:77:54:71:5b:5a:b3:8f:ee:b8:76:79:3b:5e:e3:b1:
7a:de:f2:a8:44:97:c2:71:ff:08:04:6a:ee:8b:df:16:09:9b:
56:07:b0:55:1a:80:32:a3:f4:d8:7f:71:08:8b:f6:05:b8:85:
d6:3d:d2:4a:63:55:f6:ac:df:b1:e7:f8:17:7b:7c:3c:1e:dd:
f4:dd:11:d4:bf:35:b4:9c:98:b6:cb:82:ac:b8:a4:46:63:f3:
b9:ae:3c:2a:b9:8b:0d:35:06:16:08:b8:1e:48:2c:46:92:8f:
88:56:00:74:8d:4a:54:be:c6:23:7a:68:9d:7f:35:cf:4c:ba:
a6:d1:a3:56:28:bf:73:d1:b7:eb:23:25:5b:38:a0:12:9d:21:
06:96:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:52 2026 by rpki-client