Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/iVwLg--4UDbLvJn4dxkRR2fxInw.roa
File: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (raw, json)
Hash identifier: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=
Subject key identifier: 89:5C:0B:83:EF:B8:50:36:CB:BC:99:F8:77:19:11:47:67:F1:22:7C
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019D0A6BCB0A7835DAB3CB3879DDB3CDA6E4
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/iVwLg--4UDbLvJn4dxkRR2fxInw.roa
Signing time: Fri 20 Mar 2026 08:45:29 +0000
ROA not before: Fri 20 Mar 2026 08:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34599
IP address blocks: 185.37.116.0/22 maxlen: 24
193.104.76.0/24 maxlen: 24
193.104.80.0/24 maxlen: 24
193.104.93.0/24 maxlen: 24
193.104.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:6b:cb:0a:78:35:da:b3:cb:38:79:dd:b3:cd:a6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Mar 20 08:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=895c0b83efb85036cbbc99f87719114767f1227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:8b:05:46:13:91:41:f7:e2:1c:dd:14:61:
9c:60:13:d4:b4:75:55:96:8b:d4:f6:58:73:83:81:
db:00:63:53:2b:ac:2c:7a:34:bc:62:6a:32:b9:01:
77:37:fd:3d:e1:47:ad:f8:4a:1c:6e:0b:4a:59:e8:
8e:88:1a:05:9e:9b:d6:17:e6:92:dd:f2:9d:0b:43:
fb:d7:37:bc:97:67:f6:de:48:28:dc:27:b2:5b:63:
fd:90:df:98:ce:0a:5b:2b:9a:55:67:91:18:c7:20:
e4:ad:6f:ed:78:43:85:09:34:d7:f4:b0:12:40:52:
50:ff:1e:f9:2b:d7:51:85:58:e9:6d:cd:3b:e8:bc:
25:69:c3:0a:02:a2:2d:37:7e:11:74:da:1b:71:c5:
52:90:d1:76:c0:a3:3a:bd:17:52:21:e7:1f:fb:1f:
89:0c:b6:94:65:db:b3:a4:9c:c6:46:5d:d8:ab:55:
c9:8c:fa:8e:f2:43:9e:0f:40:01:ef:83:67:94:0c:
8b:d4:f7:8d:31:c1:29:69:f1:d7:32:10:dd:d7:f0:
99:90:e5:19:ce:3c:1e:31:ab:d6:02:6b:a4:0c:6d:
27:41:b9:7e:a6:75:e9:00:bf:75:4d:de:52:0d:8f:
fe:18:94:bb:64:31:af:32:31:21:b4:f3:3d:e5:7a:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:0B:83:EF:B8:50:36:CB:BC:99:F8:77:19:11:47:67:F1:22:7C
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/iVwLg--4UDbLvJn4dxkRR2fxInw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.116.0/22
193.104.76.0/24
193.104.80.0/24
193.104.93.0-193.104.94.255
Signature Algorithm: sha256WithRSAEncryption
97:ea:df:3f:e7:5f:5d:c9:8c:cd:ac:0e:69:e4:3a:1b:69:8f:
b3:ca:d9:a5:a0:85:19:3b:ef:63:f0:16:08:fb:4c:d0:da:7b:
4c:f0:5a:a2:3b:46:24:01:94:f4:89:85:09:b0:cb:03:ab:9e:
72:b8:f1:63:e5:f3:70:bb:57:3e:fe:e8:3d:be:64:4c:6e:1a:
67:03:9f:56:77:ee:eb:08:b6:7d:48:1f:8c:b6:5e:c6:80:e1:
64:eb:74:ab:64:e8:52:a1:6e:ab:64:cb:22:1f:c7:ac:ac:ca:
4f:dc:44:ac:a3:2f:c7:ba:7a:02:b9:14:76:bf:c6:c3:7f:55:
16:22:3c:e1:a2:b9:b1:d4:99:97:b0:59:b2:7e:08:34:8d:f4:
2e:8e:40:92:bf:d9:90:50:30:3c:76:ac:3a:12:9e:0b:87:ee:
37:29:e2:e2:07:81:4f:86:3d:d0:86:84:56:7c:b2:53:ee:e9:
a8:83:c6:71:2a:95:5a:99:8f:57:aa:57:f1:8f:ee:18:17:c6:
f6:a3:eb:a0:03:60:14:42:d8:81:69:ec:98:df:c6:87:b6:17:
26:c4:8e:df:42:30:e1:20:78:4a:3e:45:3a:3f:b9:c8:da:de:
d7:11:a3:9c:e9:dd:57:77:47:bd:49:00:3d:06:10:63:fd:a0:
d0:f1:1a:99
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ0Ka8sKeDXas8s4ed2zzabkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw
NGNmZjYwHhcNMjYwMzIwMDg0NTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTVjMGI4M2VmYjg1MDM2Y2JiYzk5Zjg3NzE5MTE0NzY3ZjEyMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfyLBUYTkUH34hzdFGGcYBPUtHVV
lovU9lhzg4HbAGNTK6wsejS8YmoyuQF3N/094Uet+EocbgtKWeiOiBoFnpvWF+aS
3fKdC0P71ze8l2f23kgo3CeyW2P9kN+YzgpbK5pVZ5EYxyDkrW/teEOFCTTX9LAS
QFJQ/x75K9dRhVjpbc076LwlacMKAqItN34RdNobccVSkNF2wKM6vRdSIecf+x+J
DLaUZduzpJzGRl3Yq1XJjPqO8kOeD0AB74NnlAyL1PeNMcEpafHXMhDd1/CZkOUZ
zjweMavWAmukDG0nQbl+pnXpAL91Td5SDY/+GJS7ZDGvMjEhtPM95XrIYQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIlcC4PvuFA2y7yZ+HcZEUdn8SJ8MB8GA1UdIwQY
MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt
NzAwZTMwMjdmNjIzLzEvaVZ3TGctLTRVRGJMdkpuNGR4a1JSMmZ4SW53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz
LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCuSV0AwQA
wWhMAwQAwWhQMAwDBADBaF0DBADBaF4wDQYJKoZIhvcNAQELBQADggEBAJfq3z/n
X13JjM2sDmnkOhtpj7PK2aWghRk772PwFgj7TNDae0zwWqI7RiQBlPSJhQmwywOr
nnK48WPl83C7Vz7+6D2+ZExuGmcDn1Z37usItn1IH4y2XsaA4WTrdKtk6FKhbqtk
yyIfx6ysyk/cRKyjL8e6egK5FHa/xsN/VRYiPOGiubHUmZewWbJ+CDSN9C6OQJK/
2ZBQMDx2rDoSnguH7jcp4uIHgU+GPdCGhFZ8slPu6aiDxnEqlVqZj1eqV/GP7hgX
xvaj66ADYBRC2IFp7Jjfxoe2FybEjt9CMOEgeEo+RTo/ucja3tcRo5zp3Vd3R71J
AD0GEGP9oNDxGpk=
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:22 2026 by rpki-client