Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/evDWJGerJVKbUuj2k7Xys_5nCzk.roa
File: evDWJGerJVKbUuj2k7Xys_5nCzk.roa (raw, json)
Hash identifier: GcFycUaLnQcw8dMMtPccQuLjO5fUcVUEjEpAmB5RD1g=
Subject key identifier: 7A:F0:D6:24:67:AB:25:52:9B:52:E8:F6:93:B5:F2:B3:FE:67:0B:39
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DF2FCDBA898C47C5C080AFE503C6F53A7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/evDWJGerJVKbUuj2k7Xys_5nCzk.roa
Signing time: Mon 04 May 2026 12:35:50 +0000
ROA not before: Mon 04 May 2026 12:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 37.202.198.0/24 maxlen: 24
151.242.148.0/24 maxlen: 24
151.244.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:fc:db:a8:98:c4:7c:5c:08:0a:fe:50:3c:6f:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 4 12:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7af0d62467ab25529b52e8f693b5f2b3fe670b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:7e:4d:69:19:d8:5e:8d:42:c6:87:dd:cf:
66:95:08:e1:97:4d:c7:aa:91:b2:b7:af:85:7c:ad:
c5:df:42:0f:9c:68:58:d5:4d:09:35:44:4a:ed:3f:
f9:a4:7f:89:86:56:5a:75:11:6f:58:6f:8f:96:68:
46:b5:2b:62:ff:58:38:af:e6:f2:b6:6d:ad:75:9d:
88:f3:28:3b:a6:ce:90:6c:e9:d6:b6:3c:55:c8:64:
83:b4:d4:ce:b1:d0:75:8b:22:2c:12:2d:41:05:23:
c8:46:7c:5a:9a:45:72:d5:76:c1:c0:c4:8c:2c:89:
2e:36:c0:d2:2e:eb:f0:92:e0:3a:49:46:d2:c6:8d:
bd:d4:95:14:3c:68:bc:75:3f:c1:16:7d:f6:4e:f1:
e1:e4:72:d9:2a:a2:71:84:3d:c0:0e:e9:7a:a1:dc:
83:49:e7:dc:6e:bf:6d:e5:75:54:ed:ad:3f:25:4b:
da:b0:37:f8:f3:13:d9:6e:f0:a7:96:e4:03:6e:9f:
87:36:aa:f2:fc:6a:09:5e:8e:66:62:53:89:bb:6c:
6e:3b:8a:93:75:42:03:b0:64:6d:33:a6:2d:ad:53:
a9:d2:aa:f9:32:cb:46:9a:2e:d1:df:28:7e:93:8d:
6a:9d:c1:bf:43:36:94:cb:eb:1b:8f:ef:02:44:22:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:D6:24:67:AB:25:52:9B:52:E8:F6:93:B5:F2:B3:FE:67:0B:39
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/evDWJGerJVKbUuj2k7Xys_5nCzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
151.242.148.0/24
151.244.122.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c6:f0:c9:37:43:6d:14:70:88:1d:c0:c3:b1:f6:59:67:d7:
47:30:62:2b:c2:3d:74:50:ae:8f:90:e2:c6:68:5b:86:33:a7:
d2:b2:d6:62:43:ae:7a:1c:12:57:cc:0b:d3:24:5d:9a:fe:b6:
35:95:fe:c5:b0:ad:2d:ea:29:be:b5:dd:1d:0f:4f:e1:be:d1:
23:b0:0d:6d:ec:f3:e4:67:48:97:b8:00:4d:33:fe:d7:02:74:
be:1a:f2:9e:3e:09:6a:03:29:63:19:c2:46:de:5f:c4:5e:22:
55:96:8d:ab:63:06:28:53:f6:4a:5d:16:cb:e8:42:95:0c:de:
54:2e:7e:83:ab:1f:89:67:70:a4:03:19:bc:ab:c5:d1:d6:2e:
32:40:23:f1:67:29:5b:09:81:4c:89:28:40:b2:be:d8:d7:68:
05:ff:da:ba:d7:0a:c3:4b:45:d1:d9:17:6d:17:8c:38:03:c3:
d8:4a:08:de:f1:49:ca:30:77:c6:54:8f:8f:57:cb:dd:27:7d:
75:69:23:0d:a4:a2:64:0d:6d:e2:9d:18:6c:60:8a:44:e5:04:
d4:06:31:0f:56:51:c1:06:10:27:1a:2c:6c:87:12:28:50:aa:
de:0d:aa:5b:8e:87:5d:0d:a1:2f:27:68:21:6c:c7:7d:08:40:
b3:ec:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:39 2026 by rpki-client