Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/ICviYrqnuR5iE5mrtmyNCWi-jQQ.roa
File: ICviYrqnuR5iE5mrtmyNCWi-jQQ.roa (raw, json)
Hash identifier: pYmIQYvBOAoLzP63yxZwD5AKPB0JekK4kO0OzrdUlpE=
Subject key identifier: 20:2B:E2:62:BA:A7:B9:1E:62:13:99:AB:B6:6C:8D:09:68:BE:8D:04
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019F5BC41168BD1BFBCBB49203BB93F91671
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/ICviYrqnuR5iE5mrtmyNCWi-jQQ.roa
Signing time: Mon 13 Jul 2026 13:56:43 +0000
ROA not before: Mon 13 Jul 2026 13:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210104
IP address blocks: 37.130.1.0/24 maxlen: 24
37.130.3.0/24 maxlen: 24
37.130.6.0/24 maxlen: 24
37.130.14.0/24 maxlen: 24
37.130.33.0/24 maxlen: 24
37.130.36.0/24 maxlen: 24
37.130.38.0/24 maxlen: 24
37.130.48.0/24 maxlen: 24
37.130.52.0/24 maxlen: 24
37.130.53.0/24 maxlen: 24
37.130.54.0/24 maxlen: 24
37.130.57.0/24 maxlen: 24
37.130.62.0/24 maxlen: 24
185.237.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:c4:11:68:bd:1b:fb:cb:b4:92:03:bb:93:f9:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jul 13 13:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=202be262baa7b91e621399abb66c8d0968be8d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:14:43:24:d9:d0:f6:28:b1:33:1d:87:25:
25:af:f7:63:3f:a0:d4:72:11:b1:75:35:8e:e3:12:
bc:ff:f3:9c:bd:c4:c1:e5:19:19:38:30:7a:9c:29:
8c:e9:0d:7d:c3:f9:13:eb:f6:93:fc:6b:08:fb:e0:
c6:ed:ae:d6:b1:c6:1d:a6:a3:3b:4f:0b:78:7e:0a:
bf:3e:e1:4e:00:89:a5:66:ff:9c:49:d7:0f:cb:d7:
b6:72:af:46:64:d3:c0:3c:1d:e9:8f:35:a5:aa:79:
ff:73:27:a7:0f:88:58:56:a5:b6:e7:f3:e6:6f:82:
09:39:f9:02:2b:39:35:ea:62:5c:07:83:cf:b1:9f:
54:e0:4a:4d:bb:42:44:64:e2:d7:55:d6:ec:2c:3a:
2d:ba:05:8e:a5:0a:98:81:28:8a:80:41:18:fd:a6:
30:a5:e5:d5:81:c0:c8:22:b1:eb:d4:56:ff:ab:a9:
69:dd:bb:ab:56:84:15:2c:16:1c:46:15:e5:6e:c7:
af:ad:c6:3e:aa:45:4e:77:5d:22:c1:e5:f7:a3:5a:
02:77:6f:7f:9d:02:98:94:7b:2b:b3:3b:33:72:8b:
08:f0:63:e3:cf:de:26:8b:47:fa:a0:1d:3b:a5:fa:
5e:e6:b1:e5:5b:47:98:bc:68:88:9f:c9:00:fc:4f:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2B:E2:62:BA:A7:B9:1E:62:13:99:AB:B6:6C:8D:09:68:BE:8D:04
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/ICviYrqnuR5iE5mrtmyNCWi-jQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.1.0/24
37.130.3.0/24
37.130.6.0/24
37.130.14.0/24
37.130.33.0/24
37.130.36.0/24
37.130.38.0/24
37.130.48.0/24
37.130.52.0-37.130.54.255
37.130.57.0/24
37.130.62.0/24
185.237.56.0/22
Signature Algorithm: sha256WithRSAEncryption
99:2b:1c:d9:3d:81:38:0f:de:0a:f2:84:89:44:0d:67:09:3e:
29:ff:98:32:df:ed:b4:76:50:3c:18:ce:02:c3:ac:29:75:3b:
91:30:7a:62:fe:82:f2:5e:30:b2:20:83:e0:9d:b2:76:c2:25:
fa:bc:01:38:c1:a5:c8:c9:af:75:da:b9:44:9c:02:70:56:6a:
0d:0f:65:1a:49:c5:70:56:b0:04:44:a4:11:5a:d6:fa:f1:b0:
70:02:65:22:e9:bb:a3:32:1f:8a:6a:73:91:ec:1d:9b:ad:12:
fd:db:14:d9:ef:3d:81:74:75:7d:e8:38:c7:d1:67:4c:7e:0a:
ae:8b:8e:bb:6c:72:7e:08:6c:73:5d:f7:30:fc:40:78:1a:db:
0c:ca:10:29:e5:4b:17:ca:cf:1d:b0:fc:1e:d5:d8:ea:be:ba:
4c:cd:5a:58:7a:a1:73:57:54:30:67:59:78:0b:c0:49:a7:0f:
05:d4:7f:64:f1:e6:03:36:37:71:5e:06:30:7b:b1:3f:a5:84:
4c:9f:57:1e:0d:51:f0:0d:b0:a3:6c:33:58:bc:72:15:78:26:
93:b6:1a:8f:4c:7f:3a:0c:6c:53:d8:3b:ee:cb:f3:98:15:1c:
cf:05:6c:35:02:55:fc:9c:18:1c:ca:05:be:41:c3:88:54:94:
5f:26:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:11 2026 by rpki-client