Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/VHvfawEmHMhGQ4rXoXoNzeDbDHc.roa
File: VHvfawEmHMhGQ4rXoXoNzeDbDHc.roa (raw, json)
Hash identifier: 6R9KGHO73pqiHMwPT/E1pEGSN2Y9//7BZyWuI0pz+xY=
Subject key identifier: 54:7B:DF:6B:01:26:1C:C8:46:43:8A:D7:A1:7A:0D:CD:E0:DB:0C:77
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019E020A19B070144DAA6F6D445E8F428022
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/VHvfawEmHMhGQ4rXoXoNzeDbDHc.roa
Signing time: Thu 07 May 2026 10:44:36 +0000
ROA not before: Thu 07 May 2026 10:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57768
IP address blocks: 37.75.128.0/21 maxlen: 21
37.75.128.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.130.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:0a:19:b0:70:14:4d:aa:6f:6d:44:5e:8f:42:80:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: May 7 10:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=547bdf6b01261cc846438ad7a17a0dcde0db0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:df:71:24:72:99:52:17:5b:ec:dc:12:95:
c2:30:e1:96:51:c8:ca:a7:36:b4:87:df:d3:54:ee:
41:0e:76:d7:11:b1:26:d8:c4:3a:1f:b8:71:ee:0b:
cc:83:8b:5d:4d:ec:95:87:f9:26:81:c5:75:36:ec:
94:fc:68:3d:ca:a5:c4:84:f3:98:c7:7c:ff:4d:5f:
c1:02:ac:bd:78:3f:38:3d:be:ff:ab:60:fd:f8:e5:
bc:e9:e5:97:c9:4e:01:ce:b9:14:91:63:e5:3d:25:
dc:b0:f0:48:6e:7d:17:fc:4a:3d:39:a1:9d:ff:73:
d3:88:90:0c:bc:f9:2c:08:28:6d:a0:4f:54:1a:c9:
87:6c:71:05:6f:8f:db:f2:18:3f:23:99:f3:cd:7b:
b6:8e:51:5e:01:75:68:08:a2:e1:30:76:e3:e3:72:
b7:e8:05:95:7b:1e:53:74:8e:a4:73:05:15:e3:cc:
c5:90:a5:28:28:86:bf:1e:be:e2:61:dc:65:e6:f7:
12:e8:ce:15:6f:e4:ef:3f:ae:b4:d9:cd:cf:ed:cd:
8c:cf:4a:68:71:d2:6b:fa:40:25:b6:a0:37:3a:6a:
b1:73:c2:7e:bf:6b:bf:e0:ec:d5:c1:cb:74:1d:67:
eb:5c:af:26:fe:3e:8d:d8:3d:14:04:00:f0:9e:e4:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:DF:6B:01:26:1C:C8:46:43:8A:D7:A1:7A:0D:CD:E0:DB:0C:77
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/VHvfawEmHMhGQ4rXoXoNzeDbDHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.128.0/21
Signature Algorithm: sha256WithRSAEncryption
20:d6:bb:4d:91:c1:d8:47:b0:30:63:40:ca:d4:d5:97:61:5f:
13:6d:34:6e:69:50:36:56:30:30:b0:09:f0:41:49:83:21:90:
32:58:96:e6:d9:63:41:69:52:47:11:6d:69:83:be:19:8c:25:
f1:c1:d5:60:fb:95:f4:69:a7:6b:0f:81:57:71:77:d6:ce:e9:
31:01:3a:a0:f1:be:c1:91:20:18:fa:7e:16:7e:b9:85:c5:8e:
ec:26:de:50:b5:fc:0b:54:86:68:02:31:82:0d:7f:ba:2d:9e:
16:cf:a9:1a:57:2d:fd:d7:3e:78:08:f6:38:e2:20:b7:a3:c0:
77:36:c7:08:4e:81:21:fc:02:33:e5:eb:86:f1:9a:39:52:ff:
b0:b8:27:b4:34:d4:47:13:c5:54:52:ca:46:1a:7d:5c:df:68:
da:9b:96:27:5d:11:e9:0a:ba:db:98:51:fa:d2:95:01:44:8f:
50:7a:53:b0:4b:61:f0:62:6c:ad:63:43:e1:0e:b5:06:b3:85:
9f:3f:e4:a6:50:08:89:fe:a8:3a:be:72:a8:aa:b7:ed:48:9f:
94:0c:92:85:55:63:7b:45:d3:7b:85:e0:82:13:82:2c:84:c4:
28:f2:a4:63:c3:65:de:0e:59:46:23:c8:80:44:66:cb:3e:6f:
a4:14:af:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:00 2026 by rpki-client