Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/flbEyQC4Je2o45JHPaZs38scw3M.roa
File: flbEyQC4Je2o45JHPaZs38scw3M.roa (raw, json)
Hash identifier: C5EnxoY1f75kHw5DfJypo3Zs8chAySL0y9StdKnIiY8=
Subject key identifier: 7E:56:C4:C9:00:B8:25:ED:A8:E3:92:47:3D:A6:6C:DF:CB:1C:C3:73
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019CA2C6DA8DF9E175C49EEC062A2EE83741
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/flbEyQC4Je2o45JHPaZs38scw3M.roa
Signing time: Sat 28 Feb 2026 05:44:26 +0000
ROA not before: Sat 28 Feb 2026 05:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201287
IP address blocks: 37.202.241.0/24 maxlen: 24
37.202.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a2:c6:da:8d:f9:e1:75:c4:9e:ec:06:2a:2e:e8:37:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 28 05:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e56c4c900b825eda8e392473da66cdfcb1cc373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4e:99:16:0a:2c:f9:15:e6:5a:9f:b2:0d:b2:
08:e7:4e:e6:76:d7:36:95:30:2c:87:1d:27:4c:43:
7a:96:dc:d2:de:6d:e5:5a:fd:13:9f:8c:21:71:13:
27:f9:38:df:a4:02:7c:b4:ab:00:a6:ea:af:d6:eb:
3b:89:ae:c1:50:cd:14:f4:cb:b4:00:00:4a:07:ee:
5f:e9:a8:dc:33:ce:fa:ab:12:81:ec:23:a0:6d:3b:
36:8c:5b:db:26:87:33:5c:b0:9b:88:57:be:79:6b:
d4:89:c9:3b:d0:72:06:87:95:12:59:b8:65:e6:a5:
3b:9e:8d:f4:13:17:f2:7d:24:96:36:34:be:6a:97:
a3:6f:90:12:65:d1:25:eb:66:0a:36:16:8f:f1:df:
cc:fe:74:26:94:aa:92:98:23:56:3d:1d:c0:19:9f:
98:fa:d6:b6:3f:49:82:31:e2:87:33:fa:b9:c9:57:
8a:0b:be:97:d9:3c:48:cd:5f:4d:e0:b4:2c:c4:00:
13:86:03:39:37:76:e5:e5:12:ac:ed:04:0d:ea:ab:
6d:99:ee:2c:77:3c:54:5d:aa:a5:c8:cf:f2:48:f0:
75:d4:2b:ff:66:30:25:11:59:c4:e7:b9:37:55:e8:
43:6a:96:be:1c:de:f2:cb:b8:a1:d6:9a:d1:0f:1f:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:C4:C9:00:B8:25:ED:A8:E3:92:47:3D:A6:6C:DF:CB:1C:C3:73
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/flbEyQC4Je2o45JHPaZs38scw3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.241.0/24
37.202.249.0/24
Signature Algorithm: sha256WithRSAEncryption
75:10:a5:09:c8:17:95:1c:f1:f4:e3:6f:0e:59:d3:ca:b5:f8:
32:68:e1:1f:0d:d6:c9:7a:30:ea:c1:b8:ca:b4:4a:7e:63:f1:
cd:67:b4:fc:af:01:7e:37:c0:21:15:d3:6a:d8:37:a7:79:26:
b1:e4:39:88:07:5d:54:7c:83:9f:f1:83:55:d9:ac:cf:22:e6:
49:3a:c4:b4:3e:1e:a9:58:75:58:f2:31:5a:1d:7e:bc:8f:4b:
6e:45:23:2e:4e:d4:be:6f:57:dd:a7:3a:77:1c:26:c1:82:a7:
fc:aa:ff:ac:f6:f0:ec:81:c6:dc:09:2e:bd:d4:30:05:bd:12:
c7:fa:d0:58:b6:b0:ad:7a:dd:a1:ec:70:b3:86:3d:48:17:ff:
3b:22:4c:7b:db:fb:b7:cd:c0:b7:d3:36:97:73:d4:4b:f4:ec:
0e:a4:6d:c2:41:b7:19:d9:f5:09:a5:58:64:e1:a0:df:9d:2c:
3c:64:cc:aa:ba:4d:73:a1:13:03:c4:8d:7b:3f:96:e9:14:20:
3c:42:6f:fb:a2:23:37:f2:02:c8:f3:23:ed:1e:46:32:36:05:
69:3e:28:14:5d:48:13:27:79:6e:e7:91:af:fa:90:86:46:2c:
df:a3:c3:4c:45:88:18:06:17:12:a4:3a:65:5c:c5:99:bc:38:
3e:2c:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:20:36 2026 by rpki-client