Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Bme3hkWSzD1CK_Ptaaq-ucpzugA.roa
File: Bme3hkWSzD1CK_Ptaaq-ucpzugA.roa (raw, json)
Hash identifier: H9FqToJw6I/wjpOhspmFHvuVhsPJlrYeHaGxVGn4JEM=
Subject key identifier: 06:67:B7:86:45:92:CC:3D:42:2B:F3:ED:69:AA:BE:B9:CA:73:BA:00
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019E02508E599E0CDACA9C389E2E7253C72E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Bme3hkWSzD1CK_Ptaaq-ucpzugA.roa
Signing time: Thu 07 May 2026 12:01:34 +0000
ROA not before: Thu 07 May 2026 12:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216344
IP address blocks: 37.32.46.0/24 maxlen: 24
185.212.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:50:8e:59:9e:0c:da:ca:9c:38:9e:2e:72:53:c7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 7 12:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0667b7864592cc3d422bf3ed69aabeb9ca73ba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:77:c0:e4:78:03:27:03:c8:a9:ad:a3:bc:
1a:00:54:96:2b:9f:b3:49:20:3b:c3:27:33:97:97:
76:dd:8b:fd:80:25:8d:15:54:b3:2a:18:39:0b:36:
23:94:b8:9e:26:81:63:57:e5:30:e7:ac:f0:96:3b:
3c:b6:8f:66:af:66:23:97:96:1a:6f:09:ef:d9:7e:
3c:c8:3a:b8:dc:ab:99:22:25:e6:62:87:52:df:29:
57:0d:10:79:c8:82:30:a8:c0:31:75:0b:c0:bd:6a:
16:f7:25:5a:42:51:ee:17:e4:de:49:20:2f:57:28:
83:ff:04:07:51:27:59:27:fb:38:dc:64:dd:af:81:
51:a4:c8:fd:50:90:e8:cf:16:48:20:f6:eb:3a:68:
ab:d1:c0:08:50:3d:8c:da:f6:1c:55:b1:2b:6c:3f:
63:a4:91:60:fc:8f:0e:b7:a1:1a:60:62:48:6b:26:
fd:44:03:9e:9a:fd:ec:76:91:af:c4:5c:03:77:a2:
6a:fa:0c:53:4c:5f:ca:46:79:e0:ac:82:4f:81:fa:
6f:05:0d:d7:38:07:4a:aa:94:b9:55:cd:f1:d6:ce:
a9:0e:cc:4e:1e:92:84:e2:0f:23:9d:6e:35:80:eb:
9c:d0:06:fc:4a:aa:1a:93:79:60:db:8a:ed:16:7e:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:B7:86:45:92:CC:3D:42:2B:F3:ED:69:AA:BE:B9:CA:73:BA:00
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Bme3hkWSzD1CK_Ptaaq-ucpzugA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.46.0/24
185.212.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:95:d6:97:3a:ab:85:ee:85:23:a0:d5:21:f5:42:d4:67:20:
9e:16:ba:3b:1b:73:ce:8f:f1:23:6e:45:a9:96:5f:f9:8a:66:
c6:1f:45:76:51:f0:fc:c1:2f:67:00:6f:71:15:7a:d8:eb:91:
d7:c6:0b:ff:f0:91:b3:e0:9a:ee:b2:6d:32:c3:95:86:65:58:
20:a4:aa:32:2d:ae:70:96:65:1b:43:bc:ab:f7:7f:d9:80:27:
5b:b9:aa:8f:60:e7:e0:29:d4:dd:92:25:bb:c8:c8:bb:81:40:
a9:d1:dd:1e:84:71:a5:b1:bd:f1:4f:5d:e2:64:fc:36:80:94:
ad:93:f3:89:35:8f:f9:ec:02:32:13:48:64:8d:ec:1f:8b:ea:
1d:7c:16:08:7c:e6:82:f4:86:53:be:9c:cd:bd:ce:34:81:b1:
61:22:a9:8b:08:64:88:13:a3:e0:82:91:44:8f:32:f1:70:c7:
00:3d:2f:79:c3:d2:35:fb:03:45:3c:37:e4:22:48:13:c2:88:
37:4b:d7:9b:69:de:10:a7:29:26:b7:cb:b5:4c:54:65:bd:2a:
72:c4:1d:4b:e8:58:97:91:c4:c3:db:5c:39:ae:db:63:a1:b8:
56:ab:18:cd:40:1d:25:1e:fe:b0:3f:5c:b1:49:87:38:a3:e0:
e3:14:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:17 2026 by rpki-client