Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/_Sd1irv3SLkzWu_oWkUu1MU3I_A.roa
File: _Sd1irv3SLkzWu_oWkUu1MU3I_A.roa (raw, json)
Hash identifier: TWJWK/sBOL9QSILupXX65npBLxxyu5RqaTrMAD2mTbI=
Subject key identifier: FD:27:75:8A:BB:F7:48:B9:33:5A:EF:E8:5A:45:2E:D4:C5:37:23:F0
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 01A0325BBA35FCEB3850B61D9E7405FC7C0C
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/_Sd1irv3SLkzWu_oWkUu1MU3I_A.roa
Signing time: Mon 24 Aug 2026 06:01:07 +0000
ROA not before: Mon 24 Aug 2026 06:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48475
IP address blocks: 37.208.76.0/24 maxlen: 24
37.208.77.0/24 maxlen: 24
37.208.78.0/24 maxlen: 24
37.208.79.0/24 maxlen: 24
92.241.28.0/24 maxlen: 24
92.241.29.0/24 maxlen: 24
92.241.30.0/24 maxlen: 24
92.241.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:5b:ba:35:fc:eb:38:50:b6:1d:9e:74:05:fc:7c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Aug 24 06:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd27758abbf748b9335aefe85a452ed4c53723f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:27:29:25:a2:42:b8:f9:60:0c:18:5a:f7:
f8:88:2d:48:56:a4:fd:cf:a4:f7:77:ed:48:3b:f2:
cb:38:54:b1:a4:8f:35:07:f0:7d:e3:2d:c2:d2:e8:
9b:d4:34:bf:b7:dd:31:24:17:cc:ab:6f:ca:56:c3:
a3:85:77:33:3e:ae:95:af:b4:44:a4:0f:8a:03:2a:
b0:3c:a6:4f:24:8d:da:d9:36:b6:4b:33:2c:db:52:
92:3f:ab:af:d3:a8:6e:06:23:1c:3c:ae:9f:48:d7:
53:96:9e:0e:1d:03:1a:17:34:b1:9f:11:b9:8a:c2:
70:c4:ca:7b:7e:45:e8:77:45:13:06:46:4f:a2:85:
89:56:c8:ec:fd:c7:bf:dc:f1:76:bb:52:8b:f5:c3:
14:da:e7:0b:00:41:30:01:a5:a8:e4:a5:4a:73:63:
7d:b6:7a:41:aa:6d:42:a1:db:16:4c:d0:22:0f:d0:
24:74:96:dd:0d:ac:70:c9:f3:09:8f:6a:6b:16:3f:
95:f3:13:f3:34:5a:ba:3f:2d:1b:e6:21:93:94:8b:
3c:f9:17:43:52:5b:51:bb:51:f0:fc:16:a0:6b:d0:
90:c3:84:02:10:05:c9:d0:30:9d:5c:0c:9b:04:e7:
01:9a:e6:f5:d8:de:c6:c9:e9:5c:09:50:d4:bb:48:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:27:75:8A:BB:F7:48:B9:33:5A:EF:E8:5A:45:2E:D4:C5:37:23:F0
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/_Sd1irv3SLkzWu_oWkUu1MU3I_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.76.0/22
92.241.28.0/22
Signature Algorithm: sha256WithRSAEncryption
80:51:55:7a:ff:d7:1a:b9:6b:9c:2e:44:f8:dc:94:36:fe:57:
64:cd:5c:6e:a0:d8:5f:f4:fb:fb:68:52:4a:4e:25:60:ae:96:
c6:9f:9b:8c:47:40:89:da:5d:5c:00:6d:96:a3:4a:d8:64:8f:
93:3a:f9:12:4e:93:cd:90:a1:bf:1c:01:07:4f:2c:68:63:73:
61:0b:99:a3:90:61:e6:f7:af:89:d5:59:78:70:c2:a0:fe:ab:
3f:2f:9a:87:d6:25:58:4c:10:76:7e:78:06:e1:51:11:c0:be:
4b:32:84:77:1b:06:7d:62:20:a1:83:85:57:85:9d:3e:30:75:
78:bb:f8:20:5c:8a:c2:6a:47:9c:d0:da:be:76:8d:d7:47:33:
28:3f:a5:30:f4:6f:b5:6b:aa:e2:4d:2d:26:a7:1f:fd:04:94:
e0:b1:34:6c:4b:90:77:9e:63:47:0e:bd:6d:aa:37:75:54:b9:
3c:72:b7:6e:c9:c6:45:ba:ce:96:9e:4e:b3:40:c8:84:92:ef:
36:3b:a2:21:59:ea:d3:0a:32:23:8b:1c:15:9b:f9:08:64:b3:
61:aa:9c:47:b9:a6:ab:64:7e:3a:30:fd:00:4e:92:f3:a1:51:
fd:e8:e6:19:f0:1a:89:c3:ea:32:a1:31:12:d5:ae:1f:90:4b:
25:1b:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:01 2026 by rpki-client