Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hCDl1YIPTeDFOXJ16VWMtTUuJFU.roa
File: hCDl1YIPTeDFOXJ16VWMtTUuJFU.roa (raw, json)
Hash identifier: B7Uo2+GlkK+VWXgDCwOyvWDW1xU0gvzi0uRzdOmy5jE=
Subject key identifier: 84:20:E5:D5:82:0F:4D:E0:C5:39:72:75:E9:55:8C:B5:35:2E:24:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D0618F02F838994423BF210C51969E0AF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hCDl1YIPTeDFOXJ16VWMtTUuJFU.roa
Signing time: Thu 19 Mar 2026 12:36:30 +0000
ROA not before: Thu 19 Mar 2026 12:36:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.213.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.99.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.244.164.0/24 maxlen: 24
151.244.249.0/24 maxlen: 24
151.245.26.0/24 maxlen: 24
151.245.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:18:f0:2f:83:89:94:42:3b:f2:10:c5:19:69:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 19 12:36:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8420e5d5820f4de0c5397275e9558cb5352e2455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:2b:f8:72:b4:ae:a8:dc:cc:f3:0b:d2:e6:
3d:13:a3:eb:ed:4b:b4:d9:74:ed:4b:ff:84:3e:69:
89:40:cf:74:25:64:2e:92:0e:34:45:6b:e8:75:9b:
52:ba:ab:70:2e:27:22:9c:36:4b:86:d1:c9:91:eb:
f9:84:2c:88:c3:69:55:43:6a:67:42:b3:92:7c:f7:
79:e2:a8:56:fd:de:b9:ff:20:06:2e:6d:c9:dd:e8:
c0:73:b6:6b:d4:b9:7e:bb:c2:92:a0:82:d3:17:13:
d5:3d:99:b5:e0:11:32:8d:3a:be:67:83:52:a0:b5:
f8:fb:03:47:c7:12:37:36:3b:14:1e:de:75:d6:46:
0a:52:c0:7d:26:69:07:8c:60:c6:ce:37:10:50:a4:
db:b5:42:30:b5:d4:1e:14:c1:78:e8:3c:d8:bc:0a:
f1:85:e7:7c:69:1f:5e:1b:ec:37:81:fe:5b:b8:df:
c0:49:0a:7c:34:4d:23:87:da:2e:08:4c:87:7f:ca:
c3:09:f3:d1:4c:c9:68:82:77:be:3e:a1:8a:db:75:
30:6c:da:26:ac:f0:d2:48:13:05:df:e3:24:2a:a1:
9c:25:79:80:49:f9:19:b8:14:c3:b5:e6:01:e1:28:
b1:84:eb:91:10:b2:28:68:8f:d5:0b:82:76:c5:50:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:E5:D5:82:0F:4D:E0:C5:39:72:75:E9:55:8C:B5:35:2E:24:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hCDl1YIPTeDFOXJ16VWMtTUuJFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.213.0/24
151.240.158.0/24
151.242.40.0/24
151.242.99.0/24
151.243.175.0/24
151.244.164.0/24
151.244.249.0/24
151.245.26.0/24
151.245.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e8:31:75:db:2b:9d:70:c9:0d:56:1d:97:9d:af:95:f7:98:
0d:ef:f8:70:c8:d9:f9:06:22:8f:18:75:a6:ce:58:1a:2d:1c:
f9:01:5d:c9:d0:dd:f1:89:23:34:9f:94:48:47:31:30:80:d4:
ad:ee:10:ff:1c:bb:22:f0:1d:8a:36:8a:77:b2:3a:40:78:22:
69:5c:43:10:41:19:b5:48:fb:0a:65:d1:48:dc:38:7f:82:7c:
37:cf:ca:e3:4f:e1:97:c3:ea:7e:a1:cb:25:7b:0c:ca:d4:e1:
bd:55:42:3c:a2:08:4e:86:2b:6d:28:26:7b:66:48:b5:51:e7:
be:58:6f:d9:8d:00:6f:ff:96:a9:8f:8c:72:c3:ac:b5:ac:39:
d6:91:00:a3:16:27:03:99:aa:21:21:ab:de:e2:9f:3e:03:5f:
f9:e1:d7:8d:58:fb:bd:83:0b:2b:36:13:0e:d1:79:6e:55:58:
67:c0:be:62:dc:6a:4b:23:7c:9b:cc:0c:1f:4c:56:c0:79:35:
87:40:23:b7:43:1c:a1:48:b0:59:72:84:c1:42:c4:3b:1e:31:
b2:05:6a:eb:e7:db:c2:88:76:bd:90:8f:d2:60:75:09:6e:98:
03:b9:34:80:73:1a:dd:6e:c1:69:86:3c:ce:08:3f:2b:0a:16:
a9:c2:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:24 2026 by rpki-client