Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/rxxgyFNmwNWJSy4U3_b8HQEUVIw.roa
File: rxxgyFNmwNWJSy4U3_b8HQEUVIw.roa (raw, json)
Hash identifier: M6+bSYisCf9/NlUUutqre5sBpdzri5v0prxDOKLAPmQ=
Subject key identifier: AF:1C:60:C8:53:66:C0:D5:89:4B:2E:14:DF:F6:FC:1D:01:14:54:8C
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01A1A62B4DE4E7319B8C35C77627F6BF98E7
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/rxxgyFNmwNWJSy4U3_b8HQEUVIw.roa
Signing time: Wed 04 Nov 2026 10:46:58 +0000
ROA not before: Wed 04 Nov 2026 10:46:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47637
IP address blocks: 37.114.37.0/24 maxlen: 24
37.114.41.0/24 maxlen: 24
43.251.162.0/24 maxlen: 32
94.154.49.0/24 maxlen: 24
176.100.32.0/21 maxlen: 32
176.100.33.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
2a00:ccc4::/32 maxlen: 32
2a00:ccc6::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:2b:4d:e4:e7:31:9b:8c:35:c7:76:27:f6:bf:98:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Nov 4 10:46:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af1c60c85366c0d5894b2e14dff6fc1d0114548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:5a:8a:d0:ea:c6:3a:24:88:0d:8e:29:db:
f2:83:52:97:7a:8b:6c:88:08:29:b9:97:00:78:1c:
75:8a:6c:76:16:f5:83:fd:bc:c0:73:9e:8c:fd:e6:
56:dc:67:26:d9:da:a3:14:80:cc:8d:46:06:e2:2f:
01:2b:27:8c:1d:60:f8:e8:77:b6:97:66:e8:38:d2:
09:5d:ec:09:38:06:fb:33:84:d5:b3:bf:8f:f4:7c:
7e:2d:d0:31:a3:07:fe:68:3e:29:8e:4d:de:1c:f7:
61:b8:15:d8:80:53:f1:6f:1a:25:34:7e:20:c2:c4:
03:36:9d:ea:f3:eb:69:ae:ab:10:a9:2d:72:3d:d4:
e8:ec:bd:5e:18:79:34:35:6e:02:c9:40:41:58:54:
7f:3e:26:93:43:99:0d:b7:f3:b0:66:0d:11:f4:70:
c9:d1:b3:40:31:5a:47:83:3e:cf:fa:59:78:3c:0c:
c2:bb:94:bd:d4:f7:53:ce:40:26:9e:af:30:56:09:
da:5a:1b:b5:68:ec:80:13:37:74:32:eb:bf:34:39:
47:e6:50:f1:41:7b:f9:27:28:6b:b5:3c:51:02:a7:
f3:d3:48:b5:dc:b2:51:b7:b5:6d:2a:a0:94:2e:65:
d9:7c:02:30:c2:70:6b:bb:64:71:f1:4a:20:c9:02:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:60:C8:53:66:C0:D5:89:4B:2E:14:DF:F6:FC:1D:01:14:54:8C
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/rxxgyFNmwNWJSy4U3_b8HQEUVIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.37.0/24
37.114.41.0/24
43.251.162.0/24
94.154.49.0/24
176.100.32.0/21
IPv6:
2a00:ccc4::/32
2a00:ccc6::/32
Signature Algorithm: sha256WithRSAEncryption
73:3d:3c:0e:e9:6f:a1:69:a6:9d:0d:0d:74:c7:78:5e:ee:92:
2f:5e:da:51:8e:9f:c6:93:70:fe:8a:4b:38:b6:25:2c:b8:cb:
43:a7:0c:19:d1:9d:c5:67:e6:93:9b:d7:9b:cf:96:a8:c4:bf:
c8:7f:ef:95:b0:29:63:3e:72:65:72:b1:48:89:00:e7:fa:49:
28:62:a6:d1:c2:56:8d:81:3f:8f:d1:04:df:28:05:06:32:41:
2e:93:4f:b1:84:39:33:4e:25:cc:87:b6:34:25:67:4e:11:87:
40:59:b5:25:b0:b7:38:d4:ed:2d:d0:88:8f:68:bf:2b:5c:dc:
6d:69:0b:19:4e:31:d8:62:1f:2c:51:6f:f2:a4:53:8c:d4:95:
dd:09:2b:0b:58:f3:e6:a4:7e:9b:87:e8:30:79:9c:58:29:b6:
84:d8:09:8f:ed:7b:57:42:ca:5e:fd:9b:3e:69:94:2f:9a:e3:
60:bb:f5:bc:b3:99:b1:ed:bf:82:d4:7b:0b:25:25:7d:9f:ee:
1c:fa:8d:76:df:56:70:6b:24:f2:47:7c:6b:e4:8f:a5:e0:78:
83:31:26:89:cf:a4:f6:29:ce:85:0d:f3:d2:86:1b:4b:bb:e9:
f5:9f:68:8b:98:37:85:38:38:9a:43:73:ae:fe:d1:90:bd:bc:
72:fc:d6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:17 2026 by rpki-client