Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/37DSb3PoQONs4UHGxU4wU20BEFs.roa
File: 37DSb3PoQONs4UHGxU4wU20BEFs.roa (raw, json)
Hash identifier: OlnOwrbkS8dmY5i8N9bx/W1dQv1dfIcZBaKLZ3sLd7Q=
Subject key identifier: DF:B0:D2:6F:73:E8:40:E3:6C:E1:41:C6:C5:4E:30:53:6D:01:10:5B
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019F845F6EBB94F0440AAD91CE969CA53C27
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/37DSb3PoQONs4UHGxU4wU20BEFs.roa
Signing time: Tue 21 Jul 2026 11:11:14 +0000
ROA not before: Tue 21 Jul 2026 11:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 185.227.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:5f:6e:bb:94:f0:44:0a:ad:91:ce:96:9c:a5:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jul 21 11:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfb0d26f73e840e36ce141c6c54e30536d01105b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:14:16:bb:a4:92:fa:d0:e9:dc:88:eb:05:
0c:e2:9e:b8:7a:be:74:fe:c7:c1:57:f4:71:7b:1e:
d2:4f:a4:db:b4:25:d7:66:4c:7e:ba:a4:77:f4:02:
c3:bd:f3:36:d8:67:d4:01:8d:bc:36:1f:ce:9d:db:
af:f6:ad:72:f3:84:6c:49:59:54:e6:c1:4b:ff:21:
79:53:1d:47:1b:20:04:a4:1d:d9:04:41:8f:2e:9c:
b1:e7:fa:9f:65:e7:94:63:14:e4:79:c8:0d:4b:5b:
e5:4d:d7:0d:42:fc:5a:09:66:22:4c:ae:2c:15:5f:
14:ad:fa:ca:44:12:62:8a:6e:4e:96:22:94:50:57:
2a:fe:17:e4:e7:e4:5f:6e:01:c6:1e:69:23:bc:88:
26:2f:34:a6:e7:22:02:76:08:99:b3:31:d1:9b:4d:
10:d9:f0:41:86:0e:bc:0a:22:f7:e0:08:61:33:1c:
8d:70:dc:c9:8c:87:02:d2:8e:66:96:09:02:e5:22:
67:59:f8:24:42:1c:51:3f:19:dd:de:42:73:50:c9:
2d:d2:7b:34:f0:d1:f4:4c:d7:8b:8d:b3:22:27:3f:
ee:21:d2:e6:80:43:69:20:23:a8:2c:31:5c:c1:5a:
ed:77:9d:80:6e:36:7b:a3:aa:99:79:52:31:78:69:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:D2:6F:73:E8:40:E3:6C:E1:41:C6:C5:4E:30:53:6D:01:10:5B
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/37DSb3PoQONs4UHGxU4wU20BEFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.216.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d3:a0:a4:7b:aa:2a:7e:53:5b:35:ec:23:98:91:e7:f7:f3:
4d:09:26:f7:c2:c2:e2:b7:26:0c:ad:25:0f:31:f9:4a:76:7d:
5e:61:86:0c:2a:65:22:9e:8f:be:bd:c2:b5:64:89:5c:48:7a:
9d:5d:81:70:27:b0:4e:58:25:33:d3:a6:6e:97:76:a5:a4:79:
90:c0:0d:cc:ba:6a:ce:53:48:dc:d2:d3:ed:8b:88:32:96:5c:
29:03:85:4b:ff:e2:cb:ed:10:1d:e8:d5:a6:41:2c:f9:63:e8:
98:72:53:e3:b5:8c:8c:b4:74:96:4b:9d:26:c1:d1:33:fc:ca:
e5:03:43:30:94:2e:bf:25:61:49:d9:c5:60:74:f7:1e:b7:83:
eb:68:11:64:ba:3a:4b:b5:65:b5:d6:bc:d9:27:03:73:3c:97:
02:5a:57:af:4b:78:a5:0d:fa:e6:3c:bf:3e:9f:76:d5:45:a3:
e0:97:61:6b:3e:2c:d9:6e:dd:18:77:3d:f3:b7:f3:6f:a1:fa:
48:29:d5:c2:66:2b:48:9d:a9:5f:92:0d:7c:67:18:b7:6f:1a:
c1:fe:3b:2f:37:44:27:12:9b:41:dd:f5:bc:2b:a0:7c:a1:39:
c5:57:a7:7a:7b:4c:cd:74:d4:23:76:84:5e:bd:9b:98:fe:d8:
09:71:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:58 2026 by rpki-client