Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/AIfGsSPAIhGTAhcJMT-43FCuJiw.roa
File: AIfGsSPAIhGTAhcJMT-43FCuJiw.roa (raw, json)
Hash identifier: Pu5NP+j1KvnCv1UXGo8u9ACIZ/QzV4gjTT63qqxTR/Y=
Subject key identifier: 00:87:C6:B1:23:C0:22:11:93:02:17:09:31:3F:B8:DC:50:AE:26:2C
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019F8E5C7FA4FD4BB45625F380B8C2C91DC0
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/AIfGsSPAIhGTAhcJMT-43FCuJiw.roa
Signing time: Thu 23 Jul 2026 09:44:14 +0000
ROA not before: Thu 23 Jul 2026 09:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6661
IP address blocks: 37.157.152.0/21 maxlen: 24
78.141.128.0/18 maxlen: 24
83.99.0.0/17 maxlen: 24
87.240.192.0/18 maxlen: 24
88.207.128.0/17 maxlen: 24
107.183.0.0/17 maxlen: 24
146.0.128.0/18 maxlen: 24
146.0.212.0/22 maxlen: 24
146.0.216.0/21 maxlen: 24
178.254.64.0/18 maxlen: 24
185.32.236.0/22 maxlen: 24
188.115.0.0/18 maxlen: 24
194.154.192.0/19 maxlen: 24
195.46.224.0/19 maxlen: 24
213.135.224.0/19 maxlen: 24
213.166.32.0/19 maxlen: 24
2001:7e8::/32 maxlen: 48
2001:7e9::/32 maxlen: 48
2a00:ca60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:5c:7f:a4:fd:4b:b4:56:25:f3:80:b8:c2:c9:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jul 23 09:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0087c6b123c0221193021709313fb8dc50ae262c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:ad:7f:1b:15:26:e5:b6:1e:55:84:24:17:
1e:76:58:ec:a6:b8:7f:9e:b1:9c:f6:ed:50:ae:19:
4c:d8:5c:f2:f5:c4:29:fb:83:06:e8:58:e0:5a:65:
8b:16:bc:c4:c8:9a:34:8b:27:f2:da:2d:dc:64:a9:
06:3b:08:86:59:77:7a:2a:0e:fd:f3:f7:8e:0b:13:
ce:ce:d8:4f:c1:e1:e0:df:af:8d:75:70:61:31:43:
92:2a:08:14:8b:91:6a:a9:a7:5d:dd:87:a3:7f:1e:
e6:93:2e:19:7d:e1:1b:a5:8f:f1:9b:c6:e8:10:12:
bd:93:03:3f:7a:c7:bb:b8:2e:22:c8:ca:f1:6b:16:
f1:f0:09:f3:f6:a6:ad:91:15:79:14:f6:e9:71:39:
f1:8f:ef:34:1b:07:d6:e5:32:ce:4f:d3:72:94:3c:
7f:09:dc:b2:e9:07:f3:34:c7:20:4f:e1:f5:a9:0c:
77:2a:af:8d:7a:1a:02:6b:3c:58:90:3f:1f:64:12:
2a:1e:68:61:f9:7f:41:94:b4:73:79:e0:19:a8:13:
15:f2:7d:de:3f:c5:4d:41:4b:3d:81:22:2d:33:1e:
52:92:fb:d0:65:97:04:b3:25:5b:d9:0b:6b:73:61:
b1:1a:53:a8:71:d9:ed:fe:9b:9a:cf:cb:04:ca:e8:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:C6:B1:23:C0:22:11:93:02:17:09:31:3F:B8:DC:50:AE:26:2C
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/AIfGsSPAIhGTAhcJMT-43FCuJiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.152.0/21
78.141.128.0/18
83.99.0.0/17
87.240.192.0/18
88.207.128.0/17
107.183.0.0/17
146.0.128.0/18
146.0.212.0-146.0.223.255
178.254.64.0/18
185.32.236.0/22
188.115.0.0/18
194.154.192.0/19
195.46.224.0/19
213.135.224.0/19
213.166.32.0/19
IPv6:
2001:7e8::/31
2a00:ca60::/32
Signature Algorithm: sha256WithRSAEncryption
23:a4:42:89:0c:4d:53:c7:b6:b8:aa:e2:a2:3d:56:a9:d3:15:
f0:f8:a8:c5:b9:15:0c:aa:25:89:a5:59:7c:1e:91:be:ee:a8:
04:76:13:a2:a1:a3:a9:5f:66:db:b3:4d:c5:8e:48:ba:ee:6a:
50:8e:0c:63:27:21:4d:8b:08:43:d0:59:7a:b2:20:f1:4d:e6:
f7:65:8c:d1:3f:13:02:b6:8b:e9:93:4a:2b:fd:b2:62:83:1b:
bd:3a:60:70:11:ff:e5:ce:36:b5:1c:80:11:a3:2f:21:f6:34:
38:71:68:d6:dd:a8:6f:5f:65:ae:16:98:c0:c5:7f:ef:fc:b4:
2a:e3:4d:c5:e7:77:c0:7d:dd:bd:7a:ea:74:fe:04:38:93:b6:
81:f0:d2:78:5c:6d:34:df:28:a1:55:7b:d7:8b:5f:68:87:7e:
23:ca:05:79:90:4d:d5:75:e2:83:e4:c4:e1:d3:ee:e3:bd:76:
64:e6:7e:30:3e:c1:0a:7b:11:12:25:d8:d7:04:90:31:a4:53:
ea:a4:fb:b8:be:12:ad:e7:d8:9b:f3:ab:8e:d1:da:ff:0e:15:
5d:07:ae:f2:0e:b6:28:9d:cf:95:b9:3b:4c:c1:3d:e5:18:85:
72:4e:0f:bd:f5:e3:4e:c3:b7:5a:ab:47:c7:ce:9f:54:6d:5d:
1e:2a:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:10 2026 by rpki-client