Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/X0beiYMoyz0gMs9xg_aKhGZPUec.roa
File: X0beiYMoyz0gMs9xg_aKhGZPUec.roa (raw, json)
Hash identifier: zF3u464C6HG6nXrRpLPHuu3/gwrfFqy32CBRWFxWrt0=
Subject key identifier: 5F:46:DE:89:83:28:CB:3D:20:32:CF:71:83:F6:8A:84:66:4F:51:E7
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 019F6F93AEB2A851B999125BA8E324969F08
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/X0beiYMoyz0gMs9xg_aKhGZPUec.roa
Signing time: Fri 17 Jul 2026 10:16:17 +0000
ROA not before: Fri 17 Jul 2026 10:16:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50873
IP address blocks: 37.228.130.0/24 maxlen: 24
94.247.143.0/24 maxlen: 24
185.97.4.0/22 maxlen: 24
185.97.6.0/24 maxlen: 24
194.104.114.0/23 maxlen: 23
194.104.149.0/24 maxlen: 24
2a06:1c0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:93:ae:b2:a8:51:b9:99:12:5b:a8:e3:24:96:9f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jul 17 10:16:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f46de898328cb3d2032cf7183f68a84664f51e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:4e:42:73:1d:d6:42:6c:d0:17:f2:12:34:
ff:aa:6e:05:b8:f7:2c:b7:51:3d:2f:da:42:b2:88:
33:49:7d:29:fb:26:1b:cc:f8:23:87:d6:d6:e6:d9:
37:7e:7c:ee:57:75:01:9b:7f:3d:dd:08:34:ec:74:
cb:ec:1d:c4:7d:88:a0:d8:d0:2a:ef:71:5f:1e:6f:
cb:58:af:0e:ff:fd:a4:f9:b2:db:27:1f:fd:83:c8:
de:af:64:6a:ef:d5:ce:2b:20:1e:e2:b1:45:06:7c:
64:66:64:dc:0b:16:0d:8d:60:e5:da:44:5c:b4:d5:
e0:65:af:c2:18:9d:b8:9e:b5:69:b7:dd:65:2a:f1:
05:88:2f:ff:11:2b:8f:fe:15:8b:27:2a:40:d0:60:
0d:5c:f9:6e:84:3b:ed:77:ac:12:83:14:80:7c:a7:
bc:5c:a9:db:8c:eb:56:53:bf:8b:d5:ce:87:ad:1e:
d3:ac:03:68:0e:97:a8:84:69:c6:d2:e1:30:51:cd:
7e:bf:dd:cf:4e:9f:70:c8:48:fa:8d:49:f7:94:44:
5d:07:79:d1:3d:3a:2c:3d:dd:a9:b2:bf:c7:de:74:
d2:1e:86:20:c5:3c:9b:8c:09:30:08:a7:9c:fa:e4:
87:0d:0d:3b:00:4d:3e:f9:19:ca:8c:9b:99:19:41:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:46:DE:89:83:28:CB:3D:20:32:CF:71:83:F6:8A:84:66:4F:51:E7
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/X0beiYMoyz0gMs9xg_aKhGZPUec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.130.0/24
94.247.143.0/24
185.97.4.0/22
194.104.114.0/23
194.104.149.0/24
IPv6:
2a06:1c0::/30
Signature Algorithm: sha256WithRSAEncryption
b8:cf:eb:f2:53:f6:58:1d:e5:af:0a:65:af:0f:10:0a:5b:51:
f0:6a:1b:17:91:38:44:13:92:e7:9c:9b:83:d7:ed:2c:2c:ba:
56:2a:ac:60:4d:7e:8b:f4:26:c8:24:59:8b:85:09:92:ca:a2:
9d:dc:91:00:2e:e7:43:93:b0:f8:a6:7a:3a:16:ed:e5:49:2f:
9b:c8:11:71:87:7a:66:2d:3d:4f:8a:41:17:b7:6f:e0:dd:91:
c3:d6:22:19:b8:f8:8f:50:04:67:53:b1:68:af:e2:54:b6:3e:
59:1c:7f:71:93:67:9f:10:2c:47:f0:c9:8a:b5:70:42:f9:9b:
ab:d6:23:1e:e9:60:ee:ab:36:50:56:43:bd:cd:b1:d5:1e:7d:
44:75:72:c5:a1:25:64:44:bf:fb:32:7e:29:d7:65:b9:8c:28:
d4:2f:bd:db:47:fa:e0:2f:20:25:55:80:08:bd:ff:1e:28:ec:
03:43:8f:f6:51:b0:14:4f:fe:4c:ac:31:5a:6e:c9:c3:c5:1d:
8b:42:0c:20:1d:9f:ad:11:f0:ed:e3:66:06:55:d8:f8:f1:a4:
e3:ac:19:14:55:53:21:d6:4b:e7:33:96:80:85:16:c1:fa:9b:
b1:3d:01:b0:5b:1a:b9:69:48:97:ee:60:7b:d2:97:10:fb:da:
a6:f8:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:13 2026 by rpki-client