Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/45mqsQepjivEjlZDx-XpC95b8Ic.roa
File: 45mqsQepjivEjlZDx-XpC95b8Ic.roa (raw, json)
Hash identifier: b2d2HgWFS1hGTYRnrgvTdUNtlvqeRXKWd6TYa7LTwmo=
Subject key identifier: E3:99:AA:B1:07:A9:8E:2B:C4:8E:56:43:C7:E5:E9:0B:DE:5B:F0:87
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019DF2E7C6976D0864F21169DF4B4C3AA49B
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/45mqsQepjivEjlZDx-XpC95b8Ic.roa
Signing time: Mon 04 May 2026 12:12:49 +0000
ROA not before: Mon 04 May 2026 12:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
185.36.127.0/24 maxlen: 24
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:e7:c6:97:6d:08:64:f2:11:69:df:4b:4c:3a:a4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: May 4 12:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e399aab107a98e2bc48e5643c7e5e90bde5bf087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:7a:90:88:04:a6:cf:42:31:49:f1:cd:ed:
18:81:f1:31:2c:1d:68:6d:a8:eb:c0:ce:3b:18:e3:
2e:6f:0e:0d:5f:d0:13:0d:bc:6e:28:f1:4b:5c:ca:
6d:59:f6:d9:ef:43:9d:ca:3f:ca:39:7e:ca:5d:0a:
c3:0e:b6:1f:52:26:05:81:b6:70:ec:99:bf:fc:e5:
54:19:db:e3:92:95:cd:be:7d:31:1b:58:e2:dc:e6:
dd:ec:e2:a7:b1:51:e6:e2:9a:d3:ca:58:18:3e:cc:
dc:62:78:02:4d:3b:ae:b3:09:16:7e:80:c8:a8:a3:
87:a1:85:27:8d:4a:56:f3:26:97:49:d5:68:c0:56:
cd:67:e4:9b:59:52:af:ea:da:74:49:66:e9:dc:c2:
79:53:6a:3c:0b:4c:10:31:31:8a:71:96:ec:7d:54:
a7:41:fa:d2:83:c3:76:49:5f:ab:5e:99:98:90:e5:
60:26:21:1f:23:60:21:b3:d2:1a:f1:f2:6a:19:07:
2f:07:7b:79:20:9b:f2:2a:51:19:18:81:37:0b:02:
21:24:5e:01:89:57:54:d7:94:84:a6:8f:15:88:f6:
47:b1:67:e5:97:3e:87:e8:2c:6e:a9:f9:d5:d2:40:
fc:b2:51:a8:dd:e5:6d:66:66:01:38:d5:ea:cf:1e:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:AA:B1:07:A9:8E:2B:C4:8E:56:43:C7:E5:E9:0B:DE:5B:F0:87
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/45mqsQepjivEjlZDx-XpC95b8Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
72:cc:d4:88:dc:56:1f:8f:02:11:08:f2:40:00:1b:23:cd:46:
50:34:14:68:84:34:1f:15:b8:e1:75:10:88:ef:01:d8:94:12:
3b:9a:6c:43:f2:14:62:1a:7a:f8:f5:18:64:3a:87:9d:44:df:
dd:e9:51:7d:95:d9:02:03:00:54:09:83:f3:c7:8c:21:41:ca:
44:76:d0:82:9b:1b:c6:f6:53:07:f4:fc:fa:a4:71:e4:e9:b7:
cf:89:a1:ba:90:bd:3e:10:96:8a:72:57:13:8a:ca:8a:8f:39:
4a:4e:b5:74:7e:4a:9d:73:a6:8c:63:7a:df:82:c9:42:cb:00:
c4:59:0a:c9:05:60:0e:c3:31:f8:01:67:fc:fb:b8:f3:8a:b0:
17:a7:f4:17:da:91:85:5e:48:a9:8e:ac:42:2a:e5:93:c9:68:
40:ef:37:f9:8c:b6:85:f5:c4:41:cd:15:9e:27:cf:5d:d0:5f:
09:2f:26:67:72:18:86:63:df:89:8d:47:bd:ab:24:ab:32:b0:
57:1d:14:97:42:27:91:17:65:b0:ae:13:bd:1c:26:6e:fb:44:
ab:86:29:2d:e3:4c:4c:74:00:aa:9d:ca:5f:42:c2:b7:fd:05:
e2:1b:06:9d:a9:cc:45:8f:ee:8a:47:90:60:25:74:14:81:71:
fb:84:03:de
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZ3y58aXbQhk8hFp30tMOqSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjYwNTA0MTIxMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzk5YWFiMTA3YTk4ZTJiYzQ4ZTU2NDNjN2U1ZTkwYmRlNWJmMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hJ6kIgEps9CMUnxze0YgfExLB1o
bajrwM47GOMubw4NX9ATDbxuKPFLXMptWfbZ70Odyj/KOX7KXQrDDrYfUiYFgbZw
7Jm//OVUGdvjkpXNvn0xG1ji3Obd7OKnsVHm4prTylgYPszcYngCTTuuswkWfoDI
qKOHoYUnjUpW8yaXSdVowFbNZ+SbWVKv6tp0SWbp3MJ5U2o8C0wQMTGKcZbsfVSn
QfrSg8N2SV+rXpmYkOVgJiEfI2Ahs9Ia8fJqGQcvB3t5IJvyKlEZGIE3CwIhJF4B
iVdU15SEpo8ViPZHsWfllz6H6CxuqfnV0kD8slGo3eVtZmYBONXqzx51eQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFOOZqrEHqY4rxI5WQ8fl6QveW/CHMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvNDVtcXNRZXBqaXZFamxaRHgtWHBDOTViOEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAQl/NAD
BAEl/NQDBAAl/NcDBANtzQgDBAK5JHwwDQQCAAIwBwMFACoCANgwDQYJKoZIhvcN
AQELBQADggEBAHLM1IjcVh+PAhEI8kAAGyPNRlA0FGiENB8VuOF1EIjvAdiUEjua
bEPyFGIaevj1GGQ6h51E393pUX2V2QIDAFQJg/PHjCFBykR20IKbG8b2Uwf0/Pqk
ceTpt8+JobqQvT4QlopyVxOKyoqPOUpOtXR+Sp1zpoxjet+CyULLAMRZCskFYA7D
MfgBZ/z7uPOKsBen9BfakYVeSKmOrEIq5ZPJaEDvN/mMtoX1xEHNFZ4nz13QXwkv
JmdyGIZj34mNR72rJKsysFcdFJdCJ5EXZbCuE70cJm77RKuGKS3jTEx0AKqdyl9C
wrf9BeIbBp2pzEWP7opHkGAldBSBcfuEA94=
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:31 2026 by rpki-client