Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/8_utrjb2mgRfCCeYNjqo2-gD5yE.roa
File: 8_utrjb2mgRfCCeYNjqo2-gD5yE.roa (raw, json)
Hash identifier: Z/lIGkdqt5xBWzDDtecUOrWgIghPXbc5k3cCELpQges=
Subject key identifier: F3:FB:AD:AE:36:F6:9A:04:5F:08:27:98:36:3A:A8:DB:E8:03:E7:21
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01A058FC6A2E6B00C56B7C9AB49A81CDB3C2
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/8_utrjb2mgRfCCeYNjqo2-gD5yE.roa
Signing time: Mon 31 Aug 2026 18:02:12 +0000
ROA not before: Mon 31 Aug 2026 18:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
93.93.96.0/21 maxlen: 21
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:fc:6a:2e:6b:00:c5:6b:7c:9a:b4:9a:81:cd:b3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Aug 31 18:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3fbadae36f69a045f082798363aa8dbe803e721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:55:ae:2b:a0:22:6b:bb:4c:96:88:40:2a:
a5:af:c8:f1:9c:09:f8:b3:a9:51:d1:a2:4c:2e:a2:
65:f9:04:ff:3a:0d:50:63:b5:2e:2f:bf:23:78:80:
4e:e1:39:20:46:75:58:18:0b:9e:1a:37:b6:65:d1:
f9:ea:c7:e5:b7:92:c5:be:4b:e0:1e:d3:84:48:4e:
d7:3f:54:d8:4e:84:01:f0:22:31:d0:62:21:15:75:
53:d2:9a:ec:2a:d0:0a:19:db:48:cd:18:fb:ff:7c:
8a:24:96:f3:ac:1a:e7:2c:f4:34:89:6d:f5:33:bb:
13:4f:29:5d:06:15:9e:ff:f3:0f:52:32:68:5a:52:
b3:4d:c1:9b:84:0d:ab:ac:ab:b2:1c:2d:c0:fa:5f:
3f:5e:a5:0f:e2:cd:12:56:2e:03:fe:13:35:90:72:
53:c3:2b:46:05:21:56:f3:dc:83:e1:cd:ff:c4:04:
84:e1:a9:b1:95:ee:93:3b:db:3a:9e:42:80:fa:ca:
22:dd:33:6c:10:cb:48:ab:6a:6f:7d:f5:d3:40:e9:
81:13:33:fc:9c:c0:de:e1:99:f6:6a:5a:a7:01:41:
12:a1:c9:4c:ee:d6:c8:3a:44:69:df:cb:85:0f:fb:
70:d4:80:52:db:dc:55:f6:a6:5d:2a:af:57:09:2f:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:AD:AE:36:F6:9A:04:5F:08:27:98:36:3A:A8:DB:E8:03:E7:21
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/8_utrjb2mgRfCCeYNjqo2-gD5yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
93.93.96.0/21
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
7b:eb:bf:be:b9:c9:cf:8c:b3:9c:00:da:2b:e8:52:08:1e:aa:
fd:af:e5:b1:ea:b1:c7:87:a9:01:72:c5:c4:69:69:52:1c:67:
8c:40:ea:bb:a8:eb:50:d0:e8:db:44:77:52:77:1a:5e:5f:af:
76:9c:6f:28:1d:17:37:eb:8a:40:34:fc:ca:3e:14:fb:14:51:
4d:b7:e6:22:88:59:e0:33:40:97:e0:9a:fb:b4:27:68:4d:49:
80:bf:a9:b9:d7:6f:d1:9a:e4:34:51:7e:a6:c1:bc:b3:5b:ca:
b9:32:17:cc:a4:df:30:4f:11:38:b7:ad:53:1d:d5:a9:c2:b5:
2f:0c:99:09:69:f2:fa:fd:09:81:73:a4:a3:63:2b:a0:1c:46:
7a:56:71:0b:0b:e5:a1:2a:a5:c7:13:9a:42:f2:7a:f7:81:02:
ea:9c:ee:9d:f6:0c:04:39:db:49:27:ec:77:e5:bc:c3:b2:6d:
1c:d0:a9:be:50:c4:62:26:d9:6a:e3:79:bf:79:ad:24:42:8b:
ec:b1:50:5a:9c:ef:22:a5:2c:23:a3:05:2d:e0:fe:a5:35:b1:
2f:5d:bf:b3:09:02:9e:66:79:77:53:dc:9d:da:72:2b:a2:7b:
40:54:eb:2c:04:3a:1b:89:f8:df:42:1a:3e:ef:72:1b:6a:28:
19:c9:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:39:13 2026 by rpki-client