Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/ADQVGcYHAdNJ-hAqMH1xbjoKE3Y.roa
File: ADQVGcYHAdNJ-hAqMH1xbjoKE3Y.roa (raw, json)
Hash identifier: E2qNo46hGoFoU5ZO78LMzpzOObOhyrGlki4B54417Bk=
Subject key identifier: 00:34:15:19:C6:07:01:D3:49:FA:10:2A:30:7D:71:6E:3A:0A:13:76
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019E8CD4A6E714412DF82EAC2356C6AB08B9
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/ADQVGcYHAdNJ-hAqMH1xbjoKE3Y.roa
Signing time: Wed 03 Jun 2026 09:33:27 +0000
ROA not before: Wed 03 Jun 2026 09:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57768
IP address blocks: 37.75.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:d4:a6:e7:14:41:2d:f8:2e:ac:23:56:c6:ab:08:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jun 3 09:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00341519c60701d349fa102a307d716e3a0a1376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:82:09:79:60:a5:77:c2:29:ea:e2:79:ab:a2:
26:a2:b7:66:02:b1:e0:cd:5a:26:7a:f6:7b:3c:a8:
9a:b3:d1:b3:6f:af:71:ab:91:b0:8f:a1:53:b8:f3:
6d:37:ae:9f:23:12:d6:1e:8e:f4:76:bd:17:f1:6a:
96:51:e9:50:51:8b:38:48:f3:d3:be:b6:df:01:79:
b5:56:e0:04:46:7e:67:45:72:61:db:fa:3b:29:29:
cf:cf:ff:5c:39:81:cd:42:22:71:b7:bc:a1:a6:f6:
3a:50:51:cd:0f:51:59:86:a4:c2:1c:3c:22:b6:0c:
84:b8:48:84:98:54:26:32:c2:7b:17:0f:52:f6:1e:
fe:6a:f5:eb:d6:f4:df:1e:3b:93:01:96:33:87:07:
4c:50:35:3d:0d:74:10:e1:5b:45:78:e4:50:df:4c:
0a:4c:77:42:19:d6:9d:84:f3:26:05:79:16:35:2b:
61:3a:a7:cf:34:32:0d:4e:05:5b:08:6f:c7:6e:16:
dc:81:29:1e:46:d1:a9:6c:77:1b:d5:28:a8:a7:3b:
1f:f9:3d:bb:be:f9:fa:ad:2e:09:8e:13:bf:99:9c:
f1:f6:4c:6d:ab:04:dd:28:72:fa:8f:e4:6c:4b:5e:
2b:7e:c6:52:88:c1:36:63:94:06:b9:ba:cb:70:59:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:15:19:C6:07:01:D3:49:FA:10:2A:30:7D:71:6E:3A:0A:13:76
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/ADQVGcYHAdNJ-hAqMH1xbjoKE3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:70:c5:ef:a6:10:95:20:a4:04:13:2b:bd:f3:90:45:f3:a2:
3f:db:46:58:ab:e9:78:e9:58:f1:a7:d9:77:8d:d0:65:e7:9e:
0f:0c:65:eb:6b:2d:f6:e5:b7:a4:bf:52:dd:29:56:02:f1:fc:
5b:9b:35:0c:2c:94:51:45:e3:33:e4:51:ff:61:e9:48:a7:55:
fe:64:3c:4e:51:23:76:70:42:2b:94:ae:e5:14:c4:2d:62:6d:
c2:45:d2:5f:20:62:8d:57:14:7d:c6:50:26:a5:bd:7d:8d:77:
20:74:46:b9:69:cc:27:85:45:f3:dd:cb:0b:c1:ac:0f:a1:43:
92:eb:26:d0:a6:ed:6d:95:6e:d7:31:b8:04:4c:90:b7:7b:7d:
b5:eb:1c:fd:86:b3:02:d1:2b:92:06:d4:bf:c2:90:d5:0b:46:
f7:77:83:11:83:24:1f:b5:7a:ff:47:d8:a1:0d:89:87:90:e1:
e7:56:7a:ea:87:f6:80:24:cb:b1:70:35:04:39:59:3f:b4:a3:
39:56:6f:19:14:32:4c:ca:41:1b:a8:55:c8:78:5c:cf:3a:bc:
2a:f9:40:70:9d:3f:de:e2:1a:f9:9c:bd:0f:2b:3f:3a:99:28:
fc:99:77:a5:99:6f:73:7e:cf:38:be:ab:0d:8a:ff:1a:79:73:
65:6d:6b:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6M1KbnFEEt+C6sI1bGqwi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjkzNjI2NmU5ODBkZDIwM2IyY2JlYjFjOWM0NTcwNjA0
YjkxMWIwHhcNMjYwNjAzMDkzMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDM0MTUxOWM2MDcwMWQzNDlmYTEwMmEzMDdkNzE2ZTNhMGExMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YIJeWCld8Ip6uJ5q6ImordmArHg
zVomevZ7PKias9Gzb69xq5Gwj6FTuPNtN66fIxLWHo70dr0X8WqWUelQUYs4SPPT
vrbfAXm1VuAERn5nRXJh2/o7KSnPz/9cOYHNQiJxt7yhpvY6UFHND1FZhqTCHDwi
tgyEuEiEmFQmMsJ7Fw9S9h7+avXr1vTfHjuTAZYzhwdMUDU9DXQQ4VtFeORQ30wK
THdCGdadhPMmBXkWNSthOqfPNDINTgVbCG/HbhbcgSkeRtGpbHcb1Siopzsf+T27
vvn6rS4JjhO/mZzx9kxtqwTdKHL6j+RsS14rfsZSiME2Y5QGubrLcFlnaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAA0FRnGBwHTSfoQKjB9cW46ChN2MB8GA1UdIwQY
MBaAFFhpNiZumA3SA7LL6xycRXBgS5EbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEt
N2RhMTgzZWZmMTE1LzEvQURRVkdjWUhBZE5KLWhBcU1IMXhiam9LRTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEtN2RhMTgzZWZmMTE1
LzEvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJUuAMA0G
CSqGSIb3DQEBCwUAA4IBAQBccMXvphCVIKQEEyu985BF86I/20ZYq+l46Vjxp9l3
jdBl554PDGXray325bekv1LdKVYC8fxbmzUMLJRRReMz5FH/YelIp1X+ZDxOUSN2
cEIrlK7lFMQtYm3CRdJfIGKNVxR9xlAmpb19jXcgdEa5acwnhUXz3csLwawPoUOS
6ybQpu1tlW7XMbgETJC3e3216xz9hrMC0SuSBtS/wpDVC0b3d4MRgyQftXr/R9ih
DYmHkOHnVnrqh/aAJMuxcDUEOVk/tKM5Vm8ZFDJMykEbqFXIeFzPOrwq+UBwnT/e
4hr5nL0PKz86mSj8mXelmW9zfs84vqsNiv8aeXNlbWt+
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:50 2026 by rpki-client