Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/IByRMKpiIBzXyUIplFMjZruh7ho.roa
File: IByRMKpiIBzXyUIplFMjZruh7ho.roa (raw, json)
Hash identifier: 7eX/PQrRoxGszERCz26zLPcvGsguGEJAo7iBaxGPl0c=
Subject key identifier: 20:1C:91:30:AA:62:20:1C:D7:C9:42:29:94:53:23:66:BB:A1:EE:1A
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A182B3BE7D8DAF7237D81E021D3F8A18FB
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/IByRMKpiIBzXyUIplFMjZruh7ho.roa
Signing time: Wed 28 Oct 2026 13:29:40 +0000
ROA not before: Wed 28 Oct 2026 13:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 37.235.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:b3:be:7d:8d:af:72:37:d8:1e:02:1d:3f:8a:18:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 28 13:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=201c9130aa62201cd7c9422994532366bba1ee1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:a6:d6:15:04:90:e3:dd:46:0f:70:a9:d5:
cc:fc:63:81:2a:3d:5a:09:71:6c:60:b6:1f:fe:ef:
8b:3b:13:17:99:70:30:30:c0:49:8c:a0:b9:d5:b0:
11:db:0a:6d:78:a3:4c:77:0e:58:c0:8b:6d:66:96:
ff:55:ab:ad:a0:19:e6:4e:90:27:50:26:8a:65:dd:
73:84:a0:88:3a:99:7b:21:d5:53:5b:e2:f7:40:9a:
46:c2:e2:11:20:40:1b:9a:85:34:f1:99:f6:5a:1e:
7f:2c:2b:70:ce:48:06:b5:ad:ab:15:bf:e2:45:f1:
bc:24:5c:08:f8:28:e7:78:70:24:da:99:d7:71:0f:
92:c3:40:6a:77:73:d5:e0:7b:7f:af:ed:c9:4e:c7:
8e:ae:12:67:de:fc:21:d6:44:b2:7d:42:0c:ca:aa:
47:6c:76:53:fb:0c:79:f5:8a:18:fd:45:a7:f3:9d:
d3:5c:7d:54:04:64:e4:e9:d2:cb:67:a7:2b:b9:b0:
a4:f1:51:d8:03:ed:35:5b:64:12:14:40:70:19:57:
ce:c4:d6:3e:b7:32:4a:9f:0b:f5:56:57:ad:8f:ec:
ec:92:e0:2f:52:b9:17:d0:11:54:18:83:e9:f8:61:
12:36:8f:a7:bb:e9:2e:1b:61:59:96:82:0f:f1:69:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1C:91:30:AA:62:20:1C:D7:C9:42:29:94:53:23:66:BB:A1:EE:1A
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/IByRMKpiIBzXyUIplFMjZruh7ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.243.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ad:e9:58:31:59:7b:1b:b9:a9:e7:64:52:27:2a:38:62:d7:
2b:56:68:27:4a:64:20:cf:8d:3b:aa:cb:de:d6:bd:69:ee:a8:
c1:1c:b9:db:8d:c3:26:8b:90:80:52:84:f4:e6:13:51:69:4c:
ef:b9:e1:e8:57:e8:6f:28:bf:f8:58:95:b2:05:5a:7b:73:fe:
6d:ad:dd:da:62:b1:0a:8d:5b:33:44:11:83:ea:b9:29:93:b6:
6b:33:72:0f:7b:a2:cc:c4:50:cf:79:e4:d9:75:9e:4c:5f:c3:
b2:9f:8c:b9:b4:df:6f:4a:ff:f1:6c:87:9e:a3:01:6a:c6:7e:
25:b1:f7:3b:c4:7d:66:63:fc:a0:b8:f2:29:98:67:cb:ed:15:
d0:25:68:c5:51:35:70:62:37:ec:d9:36:66:a9:f8:84:93:9a:
e1:b6:24:43:95:3f:06:5e:f9:92:28:4f:b0:90:0a:ab:1b:45:
b3:77:a0:90:01:8f:15:b3:95:0b:d6:f7:f1:fd:24:a1:81:33:
43:f4:a3:5f:af:9a:ca:0e:6f:43:e4:0a:55:fb:e1:cc:d4:df:
25:f2:a5:dc:f7:ca:72:47:a7:3f:da:a0:ef:bd:04:1b:64:14:
b0:6d:0c:19:1e:74:80:63:7e:f4:53:3a:44:f3:ac:50:9e:ae:
5c:65:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:04 2026 by rpki-client