Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/1BRhgtJA35xnIWmejycuk647-Ls.roa
File: 1BRhgtJA35xnIWmejycuk647-Ls.roa (raw, json)
Hash identifier: JqxLysLlgCUW3lKOcvDTbWR1yBUeuWUhf/40tgJNSQ0=
Subject key identifier: D4:14:61:82:D2:40:DF:9C:67:21:69:9E:8F:27:2E:93:AE:3B:F8:BB
Certificate issuer: /CN=6062535f1cb5e6a3b121ae454daac0ec8f4882e0
Certificate serial: 019CB8DB52B59FF861EC31A5BD288296E439
Authority key identifier: 60:62:53:5F:1C:B5:E6:A3:B1:21:AE:45:4D:AA:C0:EC:8F:48:82:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/1BRhgtJA35xnIWmejycuk647-Ls.roa
Signing time: Wed 04 Mar 2026 12:38:27 +0000
ROA not before: Wed 04 Mar 2026 12:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207652
IP address blocks: 37.32.100.0/24 maxlen: 24
2a0f:fac0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:db:52:b5:9f:f8:61:ec:31:a5:bd:28:82:96:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6062535f1cb5e6a3b121ae454daac0ec8f4882e0
Validity
Not Before: Mar 4 12:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4146182d240df9c6721699e8f272e93ae3bf8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:6e:b9:ee:92:85:df:06:76:5c:b2:a1:b2:
7d:8f:aa:cc:8b:dc:f4:f0:bb:ed:38:8b:01:d6:0f:
f0:50:6c:0d:e5:b7:fb:e0:1b:8b:b3:04:9b:c2:f5:
4b:b0:a5:d5:86:d0:c9:bf:11:38:24:d4:29:f3:56:
b1:a9:b7:e9:42:b7:e2:75:d5:db:75:f8:56:de:ab:
88:1b:08:22:26:b8:ea:e0:e3:03:5f:dd:ee:89:65:
e1:81:41:13:46:07:73:25:7d:1f:24:1d:cf:83:98:
b0:9e:c2:ec:b1:53:b2:20:73:ff:3e:74:4e:ca:46:
1f:54:3e:07:7c:6e:21:7f:c4:7a:7c:9d:59:ef:28:
de:77:33:3d:c0:6f:4c:41:6b:b0:1f:5e:41:3f:02:
cc:a8:b7:bd:39:9b:c1:e0:15:1e:62:3d:e8:d5:b3:
35:55:7e:e9:59:2f:1c:2b:32:3a:1b:87:4c:8f:49:
72:aa:95:e8:8e:31:37:55:42:5e:db:db:4b:3d:37:
58:60:fd:50:93:26:23:70:22:ad:f2:03:98:c4:49:
27:2e:d9:03:79:44:ed:a4:58:2c:3c:2d:94:f3:b8:
96:e6:86:36:1c:9e:88:c9:fe:4e:5d:25:6b:ac:ce:
3f:5f:fe:ad:6b:c7:ff:bd:da:0f:2f:d7:ed:ca:85:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:61:82:D2:40:DF:9C:67:21:69:9E:8F:27:2E:93:AE:3B:F8:BB
X509v3 Authority Key Identifier:
keyid:60:62:53:5F:1C:B5:E6:A3:B1:21:AE:45:4D:AA:C0:EC:8F:48:82:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/1BRhgtJA35xnIWmejycuk647-Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.100.0/24
IPv6:
2a0f:fac0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:ef:f2:c9:cd:32:10:95:3a:0d:ea:86:38:f9:db:26:e1:66:
36:ac:98:d0:01:dd:f3:d5:2e:ed:d8:c5:54:7e:23:8c:fe:6a:
1b:08:08:9c:c1:64:fc:ed:86:5b:be:82:6e:29:89:4e:04:85:
a9:4c:5a:aa:cb:41:47:87:95:9a:82:b9:62:89:03:ba:49:46:
61:da:1f:17:e0:88:3e:5d:2b:a9:1a:fa:6b:1f:06:15:be:fe:
b0:88:e1:b4:78:b1:20:96:5a:5f:6d:bc:e1:6b:80:94:35:16:
92:0c:c3:94:71:51:17:64:d1:27:94:d3:e9:46:44:08:e0:e7:
29:51:39:05:48:d2:41:4d:d3:b2:85:7f:b7:5e:fd:26:c8:2b:
a2:b3:1d:8e:2e:44:ef:3a:5f:54:1b:6f:be:a9:dd:b2:b3:fa:
26:b8:d6:35:7d:61:59:a0:be:ee:85:4a:aa:dc:e6:dc:4d:07:
ae:07:99:af:7c:3c:1e:05:f4:a2:2b:e4:a2:3d:37:99:3d:da:
b3:0f:4f:ac:29:35:18:98:e1:a3:2c:f4:46:70:65:d7:37:9a:
0d:c3:b5:c4:a8:d1:c0:8d:8d:1c:b6:53:32:e8:61:e1:95:c3:
98:65:8b:af:cb:a9:90:ee:45:21:7c:45:b1:c5:a0:e3:69:56:
c3:fb:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:24 2026 by rpki-client