Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/foDUrTXTDZ2dFRHyzLwyjbfL5RA.roa
File: foDUrTXTDZ2dFRHyzLwyjbfL5RA.roa (raw, json)
Hash identifier: EJDROl9kvOcSOsvJf3VtUQouW/ymPRQFcveGGjcX/6o=
Subject key identifier: 7E:80:D4:AD:35:D3:0D:9D:9D:15:11:F2:CC:BC:32:8D:B7:CB:E5:10
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 019F8DE2BBC19FA6B7B893CD76C5619141D5
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/foDUrTXTDZ2dFRHyzLwyjbfL5RA.roa
Signing time: Thu 23 Jul 2026 07:31:14 +0000
ROA not before: Thu 23 Jul 2026 07:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43431
IP address blocks: 37.156.37.0/24 maxlen: 24
188.241.111.0/24 maxlen: 24
188.241.121.0/24 maxlen: 24
2a0b:1780::/30 maxlen: 30
2a0b:1784::/30 maxlen: 30
2a0e:eb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:e2:bb:c1:9f:a6:b7:b8:93:cd:76:c5:61:91:41:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jul 23 07:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e80d4ad35d30d9d9d1511f2ccbc328db7cbe510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:15:87:15:00:09:80:67:1d:10:7e:97:f0:
2d:c7:cc:8e:37:f4:c3:ec:ee:ba:4b:ed:47:a6:c4:
3d:5d:f0:2a:67:b3:ff:96:ce:9d:52:a8:91:9c:aa:
de:db:46:1e:c7:f4:4b:50:e2:19:89:66:bf:55:7b:
9e:53:9b:2d:20:31:64:8e:49:33:09:60:c5:41:bc:
c2:a6:2a:b5:01:d1:19:e8:32:5f:d8:15:b2:de:10:
a8:2e:89:0a:7f:f0:a7:b0:91:b0:14:f5:93:62:1f:
a7:f6:2c:6f:9d:d3:34:25:f7:f5:fe:21:be:c6:09:
ee:05:29:60:97:d9:b4:32:4e:ad:20:c5:11:a6:f5:
e0:0c:86:80:e8:19:e4:23:16:f7:71:cc:36:18:3b:
67:18:e4:ae:d0:7d:bd:4b:a6:d3:39:2a:f2:5e:48:
41:4a:02:01:75:03:ab:b0:39:96:be:3d:bb:ca:5e:
a1:c1:b3:04:13:60:94:58:6e:7c:e9:10:cf:6f:5b:
fa:c8:fd:8f:42:a0:5e:65:31:ae:c3:e2:b0:5a:f8:
05:6e:aa:fa:fa:e7:6f:30:8c:71:f1:db:5a:50:1e:
bc:8f:bf:db:8a:4a:43:b2:66:65:14:14:f6:74:29:
81:96:9f:68:83:75:87:e3:6d:74:51:f0:6f:b8:6d:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:80:D4:AD:35:D3:0D:9D:9D:15:11:F2:CC:BC:32:8D:B7:CB:E5:10
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/foDUrTXTDZ2dFRHyzLwyjbfL5RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.37.0/24
188.241.111.0/24
188.241.121.0/24
IPv6:
2a0b:1780::/29
2a0e:eb00::/32
Signature Algorithm: sha256WithRSAEncryption
01:49:2f:20:f8:b6:48:61:98:47:8d:ba:89:17:24:bd:de:f5:
f3:19:bf:a2:8e:9c:40:b7:3c:2a:f1:98:9c:d7:51:10:ca:d1:
5d:fa:a6:19:8b:52:96:47:9c:87:fd:71:7d:3c:d3:c5:7e:e5:
23:cf:25:e0:18:b5:ac:54:41:58:9e:df:42:45:8f:2b:43:c2:
e7:da:66:3a:bd:5f:d5:6c:d6:64:6c:45:99:78:38:6e:33:ee:
07:ca:49:3e:a7:83:77:7a:1c:d2:c3:14:d6:18:88:70:ff:3b:
6c:36:2c:5b:ce:9b:6b:ee:76:0d:f1:ee:fe:b9:be:41:0e:c7:
12:44:60:01:e7:a7:67:6f:03:76:c4:6c:e9:53:d7:d3:a2:58:
6f:a7:90:df:67:6d:f6:ce:2b:6e:75:4e:d8:97:dd:2f:d0:7b:
5a:ee:f0:d0:50:60:cd:91:e5:29:e9:0e:5c:a5:62:cf:df:8a:
9e:7a:2c:2c:85:52:64:5c:4d:9a:11:76:1a:c1:1f:f1:b6:59:
ca:50:d4:84:2c:86:c0:75:c5:42:6b:8a:d4:3d:49:39:e5:94:
92:8a:b2:14:31:13:20:1b:24:28:e0:bd:40:cd:ce:50:f4:ee:
ea:88:b6:69:c3:f8:ac:24:4d:d0:bd:89:69:fb:ba:bb:45:a3:
17:a8:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:33 2026 by rpki-client