Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Luquwxy5MmMCtghrD0bo5fP54_k.roa
File: Luquwxy5MmMCtghrD0bo5fP54_k.roa (raw, json)
Hash identifier: Bl2RpJjzTlgY54x2PqQ2Lom0vkyRv1xgE+degACJfHc=
Subject key identifier: 2E:EA:AE:C3:1C:B9:32:63:02:B6:08:6B:0F:46:E8:E5:F3:F9:E3:F9
Certificate issuer: /CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Certificate serial: 019F2368C2FCB1A05A24168706A230FB5DF5
Authority key identifier: 3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Luquwxy5MmMCtghrD0bo5fP54_k.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52126
IP address blocks: 37.26.240.0/21 maxlen: 21
77.83.208.0/22 maxlen: 22
95.130.8.0/21 maxlen: 21
147.78.36.0/22 maxlen: 22
152.89.112.0/22 maxlen: 22
185.12.34.0/23 maxlen: 23
185.32.216.0/22 maxlen: 22
2a02:a80::/29 maxlen: 32
2a02:ebc0::/29 maxlen: 29
2a10:7340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:fc:b1:a0:5a:24:16:87:06:a2:30:fb:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eeaaec31cb9326302b6086b0f46e8e5f3f9e3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:98:62:6b:5b:05:a5:4b:3b:54:8e:49:9e:
2f:ec:ef:00:e3:df:10:47:ed:e7:4d:b6:61:87:3d:
b5:f7:51:b0:6a:26:dd:31:33:2c:ff:3a:8c:2a:79:
79:fc:07:30:94:79:bc:0b:e1:9b:79:27:05:ed:1c:
d3:ee:0d:b7:7d:b9:0b:4b:05:ef:b8:d8:b3:d5:0c:
e9:8a:50:3c:4a:b7:c9:95:a3:0c:cb:25:4e:6b:29:
e5:2a:b9:f6:3b:42:b9:6b:40:e6:6f:c7:5b:b5:52:
c9:6f:44:60:eb:da:b9:85:9e:30:94:e3:5c:c3:45:
c5:bb:87:cf:45:cf:fe:6c:64:89:f3:53:3d:43:5f:
75:25:17:54:71:9d:b2:f5:f5:d7:67:2c:89:5d:3d:
dc:17:1c:1c:89:e2:84:14:74:3e:51:fd:6f:21:13:
6b:50:0b:37:aa:16:30:53:f1:7c:e3:b8:39:db:8b:
e9:33:8d:13:51:97:62:a2:19:5f:53:b9:fc:57:60:
4a:ea:54:87:6b:43:63:95:8a:1b:f6:52:3d:d9:94:
17:8c:1f:07:78:3c:fc:00:55:f2:30:fc:3c:d3:85:
66:24:f1:ea:a6:19:00:06:d2:f6:e7:3c:4a:a8:c8:
ed:bc:05:6d:28:8f:e4:e3:6b:7d:d8:ea:06:94:b2:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:AE:C3:1C:B9:32:63:02:B6:08:6B:0F:46:E8:E5:F3:F9:E3:F9
X509v3 Authority Key Identifier:
keyid:3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Luquwxy5MmMCtghrD0bo5fP54_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.240.0/21
77.83.208.0/22
95.130.8.0/21
147.78.36.0/22
152.89.112.0/22
185.12.34.0/23
185.32.216.0/22
IPv6:
2a02:a80::/29
2a02:ebc0::/29
2a10:7340::/29
Signature Algorithm: sha256WithRSAEncryption
9c:2a:e5:34:f8:9c:0d:29:56:18:0b:ed:c4:0e:14:41:8f:87:
f1:23:78:76:ed:1f:29:18:ac:38:25:b3:92:97:f9:da:f5:82:
69:17:88:e5:1f:63:66:a3:6c:e5:04:f3:a6:12:2d:99:77:ca:
9c:28:de:ae:98:97:49:5e:a7:f9:0d:16:cf:4c:dc:bf:77:92:
94:07:17:5b:ba:38:63:ce:9b:d5:a2:4c:61:80:d0:4d:a3:22:
32:3c:fb:b5:61:86:d3:47:6a:a7:3e:b3:54:25:bf:15:e3:b4:
fe:a8:64:6c:7d:ac:c1:cb:72:f6:6f:a4:b4:dd:c9:0b:49:d8:
be:56:1f:6a:ac:4a:88:91:5a:36:b8:ef:d4:dc:54:ba:2b:fc:
27:c0:b1:98:85:5c:db:5a:23:7c:ea:2f:63:cd:5a:21:91:20:
c1:58:6e:92:07:72:be:b8:45:87:36:06:a2:83:44:5f:71:36:
84:a9:c6:6b:5a:c6:2b:7e:41:cc:52:d2:06:ce:57:99:05:d6:
dc:e9:da:d1:ac:c6:45:02:13:92:96:47:78:93:9b:42:c0:b3:
c3:4e:ab:a5:fd:6a:ff:03:15:eb:11:50:9e:74:a3:d7:0e:15:
99:54:77:5d:c5:26:f0:ff:57:b3:b8:32:4c:63:be:09:f9:96:
ae:c2:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:11 2026 by rpki-client