Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/F-zA2CUnlHFMBvPjRmQnrMoGMQw.roa
File: F-zA2CUnlHFMBvPjRmQnrMoGMQw.roa (raw, json)
Hash identifier: 91XsyO5TgXdUONYdDKhh8Ag88o0StrZQ3QWQg+w4w7o=
Subject key identifier: 17:EC:C0:D8:25:27:94:71:4C:06:F3:E3:46:64:27:AC:CA:06:31:0C
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 019F906BD71F0EBB3B2514662E6B5E07AF7A
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/F-zA2CUnlHFMBvPjRmQnrMoGMQw.roa
Signing time: Thu 23 Jul 2026 19:20:14 +0000
ROA not before: Thu 23 Jul 2026 19:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.0.8.0/24 maxlen: 24
37.0.9.0/24 maxlen: 24
37.0.13.0/24 maxlen: 24
37.0.14.0/24 maxlen: 24
37.0.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:6b:d7:1f:0e:bb:3b:25:14:66:2e:6b:5e:07:af:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jul 23 19:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17ecc0d8252794714c06f3e3466427acca06310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:06:dd:ad:db:8f:0f:e0:3c:95:1e:bc:27:
fc:1e:6e:5a:37:5d:9d:ff:6c:1c:61:3a:c6:3e:ec:
44:a9:7c:0a:4d:b5:07:05:de:d5:ab:3a:4b:15:90:
85:23:78:36:b2:55:1f:e7:13:12:f0:28:47:f8:5f:
fb:a8:3c:c7:eb:46:22:b2:34:7e:fe:3b:c5:30:32:
85:29:bb:da:ef:9b:36:ff:05:3c:f2:1c:2f:e5:39:
5e:73:da:d1:82:32:bb:d0:af:c6:9e:5f:10:2c:57:
fd:78:bd:0a:df:55:f0:96:5c:79:55:cd:8b:52:ee:
f7:e6:07:05:f3:4b:da:e1:d6:ce:28:c1:f1:b8:ea:
14:7a:b4:d5:98:dc:1e:e2:dc:7b:f6:3a:aa:bb:f8:
71:0c:c0:a9:1c:b9:b6:7e:77:93:ba:c1:e6:ae:3f:
e1:e0:7e:a4:51:29:a4:f2:66:15:7f:c0:c8:b2:1f:
da:23:de:a5:64:d3:28:28:dd:28:e9:95:64:f8:cb:
59:bd:a0:fc:b9:0c:f9:43:0d:63:cf:ad:05:e0:2c:
3e:c4:82:0e:8b:7a:d8:06:f1:0d:5c:18:a9:47:24:
90:63:5b:08:b5:40:c1:9b:d6:8a:d7:15:b3:dc:6a:
4c:06:33:44:81:87:4d:0a:c6:bd:ec:a0:a8:6a:08:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EC:C0:D8:25:27:94:71:4C:06:F3:E3:46:64:27:AC:CA:06:31:0C
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/F-zA2CUnlHFMBvPjRmQnrMoGMQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.8.0/23
37.0.13.0-37.0.15.255
Signature Algorithm: sha256WithRSAEncryption
32:a7:53:96:f4:94:e4:35:86:90:cd:6e:3f:b5:37:65:36:b1:
08:7e:1b:cd:0b:3e:93:43:11:90:8e:1d:0f:2f:48:b4:5a:51:
39:fe:84:ff:f4:f7:de:8e:1d:91:02:7b:8f:73:1a:3c:d6:32:
83:62:ec:08:6e:bb:21:4e:09:bd:65:cf:78:47:d0:5c:3a:9c:
0b:48:96:d0:a5:75:4f:21:d4:1a:74:f1:fa:9b:de:50:1c:fc:
58:58:41:e3:eb:21:53:90:89:94:b2:2a:c6:f7:17:68:b7:38:
47:51:61:50:80:fb:c6:be:0c:ee:94:12:8e:73:7e:a0:e5:40:
60:0d:7d:20:e6:f1:59:df:c0:e5:af:51:0e:09:5c:b6:e2:36:
ba:86:db:9e:5a:4d:2b:ef:5f:83:ff:57:5e:cc:be:9d:af:60:
05:4a:ec:c1:b5:f8:08:65:5f:81:f3:e6:23:f7:e7:7f:54:5e:
26:71:b7:82:35:0d:41:d0:a3:0a:fe:95:ab:e8:d3:d9:76:27:
02:bc:e6:98:7c:e0:8a:2c:a6:94:bc:6b:36:69:2c:c7:f7:74:
83:fc:19:b2:5b:56:40:bd:3b:cc:e7:6f:b5:f9:7d:22:9d:ed:
e5:e7:60:c6:97:0e:b5:d8:bd:38:0f:9a:e3:41:dc:f4:e9:36:
0e:01:cd:ef
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ+Qa9cfDrs7JRRmLmteB696MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk
MTRjYzYwHhcNMjYwNzIzMTkyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2VjYzBkODI1Mjc5NDcxNGMwNmYzZTM0NjY0MjdhY2NhMDYzMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn38G3a3bjw/gPJUevCf8Hm5aN12d
/2wcYTrGPuxEqXwKTbUHBd7VqzpLFZCFI3g2slUf5xMS8ChH+F/7qDzH60YisjR+
/jvFMDKFKbva75s2/wU88hwv5Tlec9rRgjK70K/Gnl8QLFf9eL0K31Xwllx5Vc2L
Uu735gcF80va4dbOKMHxuOoUerTVmNwe4tx79jqqu/hxDMCpHLm2fneTusHmrj/h
4H6kUSmk8mYVf8DIsh/aI96lZNMoKN0o6ZVk+MtZvaD8uQz5Qw1jz60F4Cw+xIIO
i3rYBvENXBipRySQY1sItUDBm9aK1xWz3GpMBjNEgYdNCsa97KCoagjTkQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBfswNglJ5RxTAbz40ZkJ6zKBjEMMB8GA1UdIwQY
MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt
ZDFiYjZiNGRkNzAxLzEvRi16QTJDVW5sSEZNQnZQalJtUW5yTW9HTVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx
LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBJQAIMAwD
BAAlAA0DBAQlAAAwDQYJKoZIhvcNAQELBQADggEBADKnU5b0lOQ1hpDNbj+1N2U2
sQh+G80LPpNDEZCOHQ8vSLRaUTn+hP/0996OHZECe49zGjzWMoNi7AhuuyFOCb1l
z3hH0Fw6nAtIltCldU8h1Bp08fqb3lAc/FhYQePrIVOQiZSyKsb3F2i3OEdRYVCA
+8a+DO6UEo5zfqDlQGANfSDm8VnfwOWvUQ4JXLbiNrqG255aTSvvX4P/V17Mvp2v
YAVK7MG1+AhlX4Hz5iP3539UXiZxt4I1DUHQowr+lavo09l2JwK85ph84IosppS8
azZpLMf3dIP8GbJbVkC9O8znb7X5fSKd7eXnYMaXDrXYvTgPmuNB3PTpNg4Bze8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:59 2026 by rpki-client