Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/pbyR_mtI1Fk6wm49k59P-lRRQGQ.roa
File: pbyR_mtI1Fk6wm49k59P-lRRQGQ.roa (raw, json)
Hash identifier: 4O8QfzcY0StSsV+KLMGBH1lqsTImBSgS6Pp69eYjvvI=
Subject key identifier: A5:BC:91:FE:6B:48:D4:59:3A:C2:6E:3D:93:9F:4F:FA:54:51:40:64
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 019F8A3A24EA780171DDD1E76A4CA5EF610E
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/pbyR_mtI1Fk6wm49k59P-lRRQGQ.roa
Signing time: Wed 22 Jul 2026 14:28:14 +0000
ROA not before: Wed 22 Jul 2026 14:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.112.0/21 maxlen: 22
37.139.112.0/22 maxlen: 22
37.139.112.0/24 maxlen: 24
37.139.113.0/24 maxlen: 24
37.139.114.0/24 maxlen: 24
37.139.116.0/22 maxlen: 22
37.139.116.0/24 maxlen: 24
37.139.117.0/24 maxlen: 24
37.139.118.0/24 maxlen: 24
37.139.119.0/24 maxlen: 24
185.63.176.0/24 maxlen: 24
185.63.177.0/24 maxlen: 24
185.63.178.0/24 maxlen: 24
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
2a00:9f40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:3a:24:ea:78:01:71:dd:d1:e7:6a:4c:a5:ef:61:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: Jul 22 14:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5bc91fe6b48d4593ac26e3d939f4ffa54514064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:a9:1f:0a:05:5d:ab:82:04:42:8f:87:c0:
ab:36:0c:90:ad:e3:e7:70:c3:cf:60:35:6f:f2:1c:
95:23:8c:64:7d:97:b8:78:48:cb:3c:a8:81:ba:56:
66:4e:fe:c3:8a:e5:e0:99:6f:3f:86:9d:00:f1:78:
e8:7b:d7:f3:5b:9e:77:1e:22:48:91:b2:c4:54:cf:
5c:f8:c5:a2:7e:0e:ed:c8:4c:d8:ad:87:a2:5f:c4:
2d:fe:42:c0:b4:b4:ac:ea:d2:45:1e:e5:f7:be:f1:
a6:61:bf:76:7f:95:04:8b:d2:b8:e4:80:24:eb:90:
6e:1d:bf:05:d3:6d:e7:a7:fb:14:2c:a2:0d:29:74:
27:bc:79:c4:74:53:3f:3a:80:40:09:9d:da:a6:5e:
af:38:57:77:ba:f3:22:d1:fb:02:ae:f4:d3:91:b5:
2b:72:3f:d2:7a:95:90:35:05:51:10:f2:77:a6:e9:
55:f2:77:75:e4:00:4e:b5:5a:c3:12:fc:01:8c:80:
3d:09:3a:46:b7:c9:5e:a5:85:cc:73:f8:d4:76:d6:
e2:0d:5d:9e:b8:ee:97:9d:29:95:99:17:c1:39:be:
a8:2e:e5:4e:95:2d:fa:73:d9:bd:58:e2:75:89:91:
3d:da:c5:b4:0f:c2:cd:c3:6d:4e:88:b2:ea:18:0c:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:91:FE:6B:48:D4:59:3A:C2:6E:3D:93:9F:4F:FA:54:51:40:64
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/pbyR_mtI1Fk6wm49k59P-lRRQGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
185.63.176.0-185.63.178.255
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
43:ae:b4:8f:e7:20:09:eb:f8:51:7d:e5:04:f0:14:c5:68:28:
05:b3:1b:7b:6d:4f:ca:36:ce:8b:47:1f:50:36:56:71:f2:ae:
9a:49:ca:b0:da:bd:6b:3d:d0:f5:92:f7:b5:64:07:98:eb:02:
1b:69:23:33:f1:6b:3c:8d:78:37:ef:c0:e4:9d:17:27:33:c2:
ca:73:e8:08:a4:15:41:37:15:c8:f6:5a:89:4d:ec:b4:8d:7e:
69:ba:cd:2d:82:77:17:25:8b:0c:dc:96:0d:6f:6d:5a:6c:1b:
e1:89:5c:93:63:36:31:29:32:3b:8c:29:34:7c:91:06:92:da:
38:b0:32:20:c4:81:e9:68:b8:22:6a:79:d7:ad:b0:66:e5:23:
7f:c4:a2:37:ad:b7:e4:8f:4d:6b:31:f7:2a:d5:e6:17:38:b9:
74:47:ee:c2:72:3b:92:79:03:78:c7:82:0b:ef:04:29:a4:f6:
a8:fb:3d:9e:e8:fb:67:62:84:25:4c:ce:4d:c5:38:3d:32:5e:
f0:9f:99:f8:7c:04:a7:b3:e3:68:6d:ad:12:1c:a8:d1:99:76:
57:76:d2:01:f8:12:30:8d:eb:b6:7a:21:78:08:f3:d4:c6:4b:
72:bd:71:c4:5e:ff:09:09:7b:ed:79:29:9a:84:ae:9e:7a:e0:
eb:63:4f:3f
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ+KOiTqeAFx3dHnakyl72EOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzJhZGM4NTY5Y2ZjYjM1ZTc1YzdjZWZkNDZkNWVkMDBm
MGUwMjgwHhcNMjYwNzIyMTQyODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWJjOTFmZTZiNDhkNDU5M2FjMjZlM2Q5MzlmNGZmYTU0NTE0MDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuepHwoFXauCBEKPh8CrNgyQrePn
cMPPYDVv8hyVI4xkfZe4eEjLPKiBulZmTv7DiuXgmW8/hp0A8Xjoe9fzW553HiJI
kbLEVM9c+MWifg7tyEzYrYeiX8Qt/kLAtLSs6tJFHuX3vvGmYb92f5UEi9K45IAk
65BuHb8F023np/sULKINKXQnvHnEdFM/OoBACZ3apl6vOFd3uvMi0fsCrvTTkbUr
cj/SepWQNQVREPJ3pulV8nd15ABOtVrDEvwBjIA9CTpGt8lepYXMc/jUdtbiDV2e
uO6XnSmVmRfBOb6oLuVOlS36c9m9WOJ1iZE92sW0D8LNw21OiLLqGAwzpQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFKW8kf5rSNRZOsJuPZOfT/pUUUBkMB8GA1UdIwQY
MBaAFOoyrchWnPyzXnXHzv1G1e0A8OAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpLdHlGYWNfTE5lZGNmT19VYlY3UUR3NENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ZjhjNTUtMDRhZS00MzRjLWFjNDIt
NDJiNGM4OGQ3NGNhLzEvcGJ5Ul9tdEkxRms2d200OWs1OVAtbFJSUUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84ZjhjNTUtMDRhZS00MzRjLWFjNDItNDJiNGM4OGQ3NGNh
LzEvNmpLdHlGYWNfTE5lZGNmT19VYlY3UUR3NENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQDJYtwMAwD
BAS5P7ADBAC5P7IwDQQCAAIwBwMFACoAn0AwDQYJKoZIhvcNAQELBQADggEBAEOu
tI/nIAnr+FF95QTwFMVoKAWzG3ttT8o2zotHH1A2VnHyrppJyrDavWs90PWS97Vk
B5jrAhtpIzPxazyNeDfvwOSdFyczwspz6AikFUE3Fcj2WolN7LSNfmm6zS2Cdxcl
iwzclg1vbVpsG+GJXJNjNjEpMjuMKTR8kQaS2jiwMiDEgelouCJqedetsGblI3/E
ojett+SPTWsx9yrV5hc4uXRH7sJyO5J5A3jHggvvBCmk9qj7PZ7o+2dihCVMzk3F
OD0yXvCfmfh8BKez42htrRIcqNGZdld20gH4EjCN67Z6IXgI89TGS3K9ccRe/wkJ
e+15KZqErp564OtjTz8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:13 2026 by rpki-client