Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qJWc0CAnV2Nosm4PGw_Akw9pU0U.roa
File: qJWc0CAnV2Nosm4PGw_Akw9pU0U.roa (raw, json)
Hash identifier: G21fpywS0FtjtM4y+oStTFIpE79NalJcX/hZibljiSw=
Subject key identifier: A8:95:9C:D0:20:27:57:63:68:B2:6E:0F:1B:0F:C0:93:0F:69:53:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CED69F77E72AB7A962334EC2816D92700
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qJWc0CAnV2Nosm4PGw_Akw9pU0U.roa
Signing time: Sat 14 Mar 2026 17:34:30 +0000
ROA not before: Sat 14 Mar 2026 17:34:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 37.202.211.0/24 maxlen: 24
37.202.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:69:f7:7e:72:ab:7a:96:23:34:ec:28:16:d9:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 14 17:34:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8959cd02027576368b26e0f1b0fc0930f695345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:f0:b8:de:28:99:c8:e0:a2:f7:35:8e:56:
97:53:5a:09:37:e0:27:ca:3f:1f:b5:0e:21:b0:65:
c2:ce:ef:bb:21:38:02:7a:00:4d:4b:96:f0:69:bb:
d1:ed:3a:e0:07:9a:6a:db:f0:d7:39:fe:92:b5:38:
d1:14:f4:4b:1c:cf:fd:66:da:88:78:10:84:a5:95:
68:08:3f:69:ea:a8:f8:2d:b3:df:eb:a8:d8:c4:69:
6c:a5:ef:a2:45:d3:ed:d7:f6:da:df:95:00:ad:87:
ed:11:9e:35:e1:22:34:b8:09:58:4e:d1:a2:bd:36:
d9:6a:a1:2e:01:51:e2:92:25:f8:8b:64:c5:af:1a:
a0:2c:fc:f0:be:95:b6:90:9d:05:b1:a3:8a:b1:6a:
fd:45:80:ed:01:8a:63:74:68:a5:94:62:f9:f2:75:
51:44:8a:da:40:1e:37:d9:09:16:ec:6a:d2:95:1f:
77:77:14:32:d7:c2:9d:b9:73:e5:23:22:aa:0c:76:
9f:ab:b5:98:01:9e:0d:d9:f3:8d:18:d7:fd:e3:78:
16:21:e5:35:1e:ab:76:1c:5d:f8:36:b1:df:1d:0a:
0e:01:96:48:63:e4:b7:af:ef:f2:ef:8c:00:74:ed:
2a:a9:fb:b5:bb:35:dc:50:19:b8:4a:ae:bb:04:8e:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:95:9C:D0:20:27:57:63:68:B2:6E:0F:1B:0F:C0:93:0F:69:53:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qJWc0CAnV2Nosm4PGw_Akw9pU0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.211.0/24
37.202.216.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4f:4a:85:8e:09:37:6d:97:65:3c:ae:23:3d:9c:47:7f:36:
06:1c:8a:72:5a:d3:56:de:a1:06:8b:be:c4:8f:6b:8b:4b:de:
f6:b3:c2:50:7a:23:45:82:52:73:aa:b2:ca:f4:5e:f4:54:8d:
37:05:fd:01:0a:16:07:d2:d0:ac:5c:73:7b:f1:83:fb:40:03:
20:7b:d8:3d:54:60:a8:9f:5f:93:df:3b:d9:03:cc:b2:bc:13:
66:1b:9e:ce:b6:66:09:65:ef:78:37:91:37:4e:27:0b:85:b1:
5a:6b:69:4d:44:a4:34:1b:e4:d1:8b:10:56:b3:96:5e:26:a9:
aa:30:6c:80:3d:a3:0b:e8:86:66:d3:9d:11:94:bb:18:84:08:
e8:33:14:0b:c1:06:d5:34:64:cb:9f:c6:d2:db:6e:6d:77:ec:
40:ff:71:57:66:1a:e3:d7:0e:47:9a:de:f3:42:11:5f:ce:04:
58:aa:b3:4b:36:5f:c9:f5:64:36:49:21:f8:87:0d:7d:bc:42:
6c:a4:fa:a6:55:14:fa:42:92:58:c4:f7:da:ed:2d:72:e1:30:
02:0a:cd:aa:bd:22:99:28:be:4d:50:a5:cf:8a:a2:62:53:d3:
b4:76:20:26:47:a0:23:a8:e9:80:44:33:7f:f5:35:c5:71:93:
1f:93:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:57 2026 by rpki-client