Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa
File: 1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa (raw, json)
Hash identifier: u4WfkbMiSbJkmrL6GA8qH3vMspeYSQot+mOiu9K3y4w=
Subject key identifier: FB:7C:E3:4A:09:8F:6D:EE:6D:48:83:3C:90:B9:5F:A3:74:9E:24:FE
Certificate issuer: /CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Certificate serial: 019F2368CD4B5D3E3BAF423EB36B9177ACF6
Authority key identifier: F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35393
IP address blocks: 37.0.72.0/21 maxlen: 24
46.21.192.0/20 maxlen: 24
62.100.128.0/19 maxlen: 24
78.41.232.0/21 maxlen: 24
81.93.240.0/20 maxlen: 24
91.191.144.0/20 maxlen: 24
94.247.176.0/21 maxlen: 24
185.67.152.0/22 maxlen: 24
188.130.0.0/17 maxlen: 24
193.47.184.0/24 maxlen: 24
195.14.0.0/24 maxlen: 24
195.114.18.0/23 maxlen: 24
2001:758::/32 maxlen: 48
2001:900::/32 maxlen: 48
2a00:cb80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:4b:5d:3e:3b:af:42:3e:b3:6b:91:77:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb7ce34a098f6dee6d48833c90b95fa3749e24fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8f:49:6e:54:18:54:fe:82:47:be:cf:56:db:
3f:24:99:fc:d7:6a:51:44:aa:c4:76:8f:9b:f0:8d:
4d:10:5d:f7:c7:69:db:c3:18:67:e0:f1:1f:2c:01:
2f:f4:fb:04:fb:e1:3f:37:28:c7:f7:f4:7b:dd:e0:
23:d7:c4:be:85:a1:83:8d:6b:37:b4:a1:1b:65:be:
77:a4:e3:cf:78:83:b7:9c:3e:2a:5e:45:85:fc:16:
da:51:6d:cc:07:ef:24:c6:ca:be:f8:24:67:7b:24:
25:a0:4b:51:40:26:fa:82:58:94:dd:ca:fc:07:22:
74:97:88:ee:34:42:0f:80:d9:ca:ea:6f:fa:7a:1f:
3c:9d:06:87:30:b7:35:15:32:69:20:cb:d4:22:92:
a7:01:4a:57:fb:ce:ed:b0:b4:63:85:d8:50:89:7f:
7b:c1:70:23:a5:35:5a:f3:97:73:6e:b8:2f:20:7f:
85:d6:30:7d:cf:87:b6:ca:96:0e:40:42:0a:d6:7b:
88:14:c2:b6:fd:5f:a9:35:7c:9a:b2:19:e0:44:82:
b2:61:49:ac:ca:3d:dc:d6:e1:22:2e:7a:ea:84:e5:
42:ba:89:bf:4d:5e:c4:68:0f:2d:c0:cd:d7:c4:cb:
48:94:6c:0a:63:c1:d9:09:e8:3a:a5:c8:77:8d:d4:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:E3:4A:09:8F:6D:EE:6D:48:83:3C:90:B9:5F:A3:74:9E:24:FE
X509v3 Authority Key Identifier:
keyid:F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.72.0/21
46.21.192.0/20
62.100.128.0/19
78.41.232.0/21
81.93.240.0/20
91.191.144.0/20
94.247.176.0/21
185.67.152.0/22
188.130.0.0/17
193.47.184.0/24
195.14.0.0/24
195.114.18.0/23
IPv6:
2001:758::/32
2001:900::/32
2a00:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
63:0a:04:aa:26:3d:1a:40:b5:86:68:88:53:1e:e3:fd:04:da:
f6:1f:7e:8b:c7:99:64:e0:72:42:c8:f2:f2:40:40:8d:c4:19:
ff:44:a7:d8:9c:95:50:ea:a7:42:d7:0b:79:cb:78:25:c0:cc:
78:5a:71:fc:9c:02:83:71:84:53:32:34:12:99:54:11:e0:14:
d6:76:07:65:4a:54:a7:a3:95:b3:90:2d:64:f4:dd:5f:d3:5e:
e2:5f:14:c4:38:f5:ba:5a:c4:ca:e2:5b:09:98:bb:84:be:18:
37:b0:43:0f:03:03:62:be:f1:5e:67:5c:6c:6a:db:f7:8f:90:
15:9f:dd:9b:46:9e:e6:dc:56:9c:12:19:42:d3:5e:15:f7:36:
46:a2:2c:03:bb:7f:d7:69:56:97:ec:61:f6:36:4e:b2:51:dd:
3c:04:37:dd:ac:f4:84:bd:37:22:6a:d6:e8:15:e9:9b:c3:7c:
65:84:d8:d7:52:a6:45:f9:4b:4c:86:2c:e9:6d:12:cb:36:90:
c2:5a:d1:d7:23:04:52:12:0c:f5:4e:bf:a1:8b:af:35:11:e7:
5f:52:27:f3:24:5e:b3:f9:cc:56:03:55:54:1d:bf:13:ca:4b:
b4:5a:92:df:ee:33:de:c0:ec:65:ef:bb:d6:90:81:be:8a:83:
89:7d:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:36 2026 by rpki-client