Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-mygeqxXw0oBZ0qWO1aA5HeApXQ.roa
File: 1-mygeqxXw0oBZ0qWO1aA5HeApXQ.roa (raw, json)
Hash identifier: hk+GPIqz/fcver1IG5pfGaJA1FegIlAIW9xQHzF1RDw=
Subject key identifier: FA:6C:A0:7A:AC:57:C3:4A:01:67:4A:96:3B:56:80:E4:77:80:A5:74
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019E01CA942E5AB8FFF0E06BA2D97CE4792B
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-mygeqxXw0oBZ0qWO1aA5HeApXQ.roa
Signing time: Thu 07 May 2026 09:35:13 +0000
ROA not before: Thu 07 May 2026 09:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.26.112.0/20 maxlen: 20
81.200.64.0/20 maxlen: 20
93.191.168.0/21 maxlen: 21
93.191.173.0/24 maxlen: 24
94.127.72.0/21 maxlen: 21
95.100.147.0/24 maxlen: 24
109.69.136.0/21 maxlen: 21
194.35.38.0/23 maxlen: 23
2a02:2370:fe::/47 maxlen: 48
2a0b:35c0::/29 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:ca:94:2e:5a:b8:ff:f0:e0:6b:a2:d9:7c:e4:79:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: May 7 09:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa6ca07aac57c34a01674a963b5680e47780a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:df:04:53:09:b6:ba:89:d5:60:4c:7d:bb:
d7:e4:c0:34:dd:ef:a0:e3:26:39:e0:52:e0:1a:e7:
21:80:5b:43:ba:df:eb:54:98:82:c9:43:f1:de:ee:
5b:95:dd:77:d8:91:99:5d:4c:e9:c2:d4:2d:8f:9a:
26:21:56:61:e8:b5:b2:6b:a8:fd:f6:c6:01:7c:09:
cc:71:f9:1a:c0:2d:4c:6f:ea:c3:00:ed:55:34:8d:
6a:99:fc:6d:bd:dd:2a:91:0f:c0:fd:5e:ca:e1:18:
e4:3a:76:fa:7b:93:ac:df:12:5e:5a:ae:19:97:d1:
d4:d0:bc:05:93:98:9a:eb:15:bb:a9:b2:16:c6:38:
3d:ae:21:27:88:22:32:a7:6a:79:9d:fd:6f:2f:48:
82:22:8d:38:89:9c:6a:8d:53:d1:08:55:0c:e3:0d:
07:2a:85:21:95:00:c3:65:a0:32:03:41:0b:9f:94:
91:75:79:80:32:04:a8:1b:7d:4e:1a:ed:9a:4c:66:
aa:89:b8:a2:53:7c:8e:d0:40:2b:fc:0a:20:22:30:
2a:7e:b1:97:80:0e:8b:02:a2:38:24:e9:5b:0e:7f:
54:c2:bc:1a:51:e3:1f:20:ba:70:5a:4f:9f:02:e5:
ed:b3:51:90:58:83:a7:a5:59:f2:d0:a1:6a:f0:f8:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:A0:7A:AC:57:C3:4A:01:67:4A:96:3B:56:80:E4:77:80:A5:74
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-mygeqxXw0oBZ0qWO1aA5HeApXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.112.0/20
81.200.64.0/20
93.191.168.0/21
94.127.72.0/21
95.100.147.0/24
109.69.136.0/21
194.35.38.0/23
IPv6:
2a02:2370:fe::/47
2a0b:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:25:c5:1a:17:31:8b:c9:06:48:d4:6f:89:76:76:16:0f:67:
9b:7c:cf:48:be:76:00:80:4c:5f:2c:d5:02:33:5f:0a:ec:d4:
2b:21:0c:74:3b:db:84:b1:92:08:11:00:5e:94:f6:77:81:5c:
dd:cf:74:b7:8a:66:02:ff:a6:4b:17:ad:53:55:18:3a:85:2e:
b3:4e:52:6a:42:85:41:fe:8f:c6:5b:1f:99:8e:18:8b:b0:58:
91:28:0f:5b:ac:dd:34:ec:9e:bb:ea:51:53:5b:c0:6d:30:7c:
fb:0b:f9:56:b1:b4:83:80:c1:b1:63:a4:e2:ef:d6:68:bc:11:
ce:96:f1:85:64:c3:bb:c0:9b:72:50:8e:0e:f6:28:4a:55:1e:
5d:ab:d4:ff:6b:da:81:9f:92:91:bb:97:02:0d:0e:d1:07:7f:
08:40:9b:0a:4b:11:20:9a:e7:71:5e:c3:c1:d2:8e:04:60:a7:
3b:da:ce:55:ec:f9:7d:48:fb:01:35:dd:7a:16:48:89:4c:90:
35:de:c3:78:07:9f:4a:65:f0:b1:30:91:11:65:71:c7:36:18:
6b:fc:24:80:4a:78:60:07:1c:65:45:aa:88:4a:96:85:e2:97:
bd:a9:dd:10:82:8e:78:cc:71:03:fb:22:ec:7e:d0:f3:ec:58:
54:ee:e5:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:27:14 2026 by rpki-client