Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/L37Z83_zZxTwH3gbOp3Zs8sgSt0.roa
File: L37Z83_zZxTwH3gbOp3Zs8sgSt0.roa (raw, json)
Hash identifier: mPV6TmSuIRy2KEqw8msro5qtNxgJ7ehCc09de6n7niU=
Subject key identifier: 2F:7E:D9:F3:7F:F3:67:14:F0:1F:78:1B:3A:9D:D9:B3:CB:20:4A:DD
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 019DCEC89D8C777F65C1F3CC16184A9C15EA
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/L37Z83_zZxTwH3gbOp3Zs8sgSt0.roa
Signing time: Mon 27 Apr 2026 11:52:27 +0000
ROA not before: Mon 27 Apr 2026 11:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209136
IP address blocks: 192.44.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:c8:9d:8c:77:7f:65:c1:f3:cc:16:18:4a:9c:15:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Apr 27 11:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f7ed9f37ff36714f01f781b3a9dd9b3cb204add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:bf:ec:a1:b6:1c:74:f7:8e:be:f9:08:ba:
29:65:59:28:f4:31:43:46:ad:7e:46:78:e3:d7:54:
38:91:f4:f8:87:a0:8a:34:c0:d6:6b:06:9c:34:e2:
3f:a9:7a:33:ea:fc:49:a8:c5:55:a4:6d:e6:5d:4b:
e7:d6:cd:d1:e6:65:f1:0b:af:c1:7b:9a:69:1a:88:
77:ea:e3:40:2d:0a:da:d8:0f:51:a5:82:fd:db:57:
e4:30:bb:8b:72:ec:fa:4d:91:9c:3d:db:44:48:bd:
9f:fb:46:b0:18:07:96:25:e1:d8:fb:9b:4c:57:c8:
e3:8e:25:2a:0a:59:30:5e:d4:f3:6c:9f:a5:52:b8:
c7:83:ab:bd:eb:91:3b:b4:d1:95:f8:b0:da:b4:7c:
44:0b:e7:7f:54:c9:cb:75:da:13:b8:86:bd:76:6b:
28:42:09:c1:44:f0:d5:b7:4b:9e:7b:e5:0b:b3:5b:
a3:b5:5b:e7:b2:7d:aa:6b:22:c5:68:0f:be:8d:df:
1b:ba:f8:69:9f:e6:be:17:09:27:7b:7f:81:3b:25:
10:d3:7a:18:20:f6:b0:73:1b:f0:09:80:8e:4f:a1:
b8:d9:90:43:a9:78:dc:25:ee:86:bc:90:dc:19:ab:
7f:9f:07:00:60:07:87:e4:f7:7e:98:1e:bc:c3:32:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:D9:F3:7F:F3:67:14:F0:1F:78:1B:3A:9D:D9:B3:CB:20:4A:DD
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/L37Z83_zZxTwH3gbOp3Zs8sgSt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.76.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b1:41:32:d5:06:1c:2e:30:66:d4:65:5c:5e:e8:6f:fa:9e:
fe:61:32:ee:f0:b6:8d:e2:57:f8:83:c1:af:6a:da:1e:ae:4c:
d3:1a:ef:52:95:37:dd:be:0f:d4:f9:d4:33:7a:5f:07:d7:b5:
f2:c6:c0:fd:85:99:25:d1:d7:f6:2f:56:ba:ab:ab:35:0e:23:
7a:d3:bb:26:74:72:04:ff:1a:41:cd:63:8b:55:d0:5f:14:c8:
cc:fc:d4:74:fc:2d:e6:8b:f5:bd:ad:67:95:c7:ee:98:dd:cf:
c5:68:19:a3:c3:8e:4c:4d:c2:13:7d:84:5e:61:54:19:55:52:
ad:dc:0d:d6:51:56:66:12:81:39:e0:a4:ee:43:2e:65:b0:a0:
8d:bd:73:20:85:ff:15:a6:4a:70:f1:46:0b:1e:3a:60:1c:86:
91:eb:a1:e4:26:96:d9:49:5b:8c:b4:e0:04:93:ed:d6:f1:d1:
95:ec:a2:d7:d0:b6:ec:04:7a:03:76:35:60:3e:2a:90:35:33:
d1:a5:60:24:a4:87:2b:a1:bb:b6:a2:b3:5b:53:34:44:fa:96:
de:ae:fb:43:de:61:7f:44:25:e2:79:91:35:8e:66:b0:17:2d:
ad:38:41:c3:64:4b:a9:bc:0c:a5:ca:08:7e:50:0a:1a:93:f8:
f0:b7:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:38 2026 by rpki-client