Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/JSbL4a4S2OSMlezz2eB_WGFeLoM.roa
File: JSbL4a4S2OSMlezz2eB_WGFeLoM.roa (raw, json)
Hash identifier: JWOr6A62VPGr8Z3wejaGhvp4bUBldEfEf/frsYKtaLw=
Subject key identifier: 25:26:CB:E1:AE:12:D8:E4:8C:95:EC:F3:D9:E0:7F:58:61:5E:2E:83
Certificate issuer: /CN=016e64f94022e94add1580ee0391e11b67bfa55a
Certificate serial: 019E3B12038CBE4E2B47D83A50042DA0FD5B
Authority key identifier: 01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/JSbL4a4S2OSMlezz2eB_WGFeLoM.roa
Signing time: Mon 18 May 2026 12:31:36 +0000
ROA not before: Mon 18 May 2026 12:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59396
IP address blocks: 37.205.32.0/21 maxlen: 21
37.205.32.0/24 maxlen: 24
185.112.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:12:03:8c:be:4e:2b:47:d8:3a:50:04:2d:a0:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e64f94022e94add1580ee0391e11b67bfa55a
Validity
Not Before: May 18 12:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2526cbe1ae12d8e48c95ecf3d9e07f58615e2e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:9e:42:31:28:64:66:64:47:e9:83:1a:46:
44:b0:36:fb:aa:0e:3f:d6:82:1c:0e:f5:e5:ef:2f:
87:94:27:70:55:05:b2:aa:88:18:4c:69:b1:dc:0a:
c6:5c:83:ab:8e:d0:c0:db:73:58:9c:9f:c8:ce:6d:
51:a7:db:a2:5e:d1:a4:19:bd:8c:60:fc:e7:a7:9e:
95:82:b7:ba:fb:ba:c8:9b:90:b1:5a:33:86:eb:23:
95:ec:ca:e0:7e:d0:ea:4d:19:a1:9e:be:fc:88:b8:
01:81:13:15:fa:3c:90:0e:15:13:90:72:f9:d6:84:
ea:b1:50:2a:e6:ee:7a:6b:94:d2:c9:25:86:fe:48:
3e:ca:a7:87:76:8a:fa:ba:8b:43:90:fe:b3:ce:b9:
33:78:70:cc:a7:b2:8c:e8:82:8a:a7:15:6f:50:98:
0f:c3:84:97:2f:5e:40:50:a8:0b:20:c4:d6:d1:48:
80:b9:c5:ea:85:b3:c2:33:09:61:c0:98:d5:91:55:
de:eb:78:d6:57:a8:15:20:c9:fc:9d:16:9b:8f:3b:
9e:58:9c:a9:7f:12:e7:fa:c4:b0:7a:bd:f5:3d:ec:
25:4e:1f:d5:81:c4:2b:30:2c:f8:4c:48:d4:d8:8c:
64:12:0b:1f:fd:f0:7d:00:01:b0:b7:a7:57:eb:fc:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:26:CB:E1:AE:12:D8:E4:8C:95:EC:F3:D9:E0:7F:58:61:5E:2E:83
X509v3 Authority Key Identifier:
keyid:01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/JSbL4a4S2OSMlezz2eB_WGFeLoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.32.0/21
185.112.204.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:2a:dc:69:97:96:fb:66:93:5f:1b:13:ce:6f:f5:10:37:bb:
fa:3b:d1:da:90:f4:bb:9c:a3:31:ff:5f:d4:89:40:70:d1:9b:
50:9b:cd:9b:df:c0:63:51:07:76:f8:2d:21:9c:41:29:b3:d0:
06:3f:76:55:b8:c7:db:0a:8f:47:ef:ac:f8:8e:be:c3:4a:36:
81:05:d2:40:3d:84:72:1c:29:95:e5:a8:c1:f4:b2:7d:01:84:
dc:9b:95:14:5b:59:65:89:ef:0a:02:82:23:90:0b:07:0c:40:
0a:55:0d:8f:ea:57:c3:8e:b6:f2:ee:8f:22:21:02:75:61:4b:
50:c6:49:06:ff:de:d0:e6:24:b7:1d:9a:25:3d:33:a0:79:91:
2a:fe:07:6a:3d:64:0a:30:89:9a:86:de:0a:db:7b:be:5a:3a:
30:1f:80:5c:01:cd:85:7c:0b:34:6d:39:a7:62:88:7c:c3:87:
5c:6b:69:d0:93:46:ab:8f:6e:dc:f4:b6:63:b4:5d:18:76:7e:
4a:51:a2:83:b1:ce:9e:b8:f5:27:d6:3b:bf:18:3d:29:85:eb:
1e:7e:16:3f:1e:ac:36:eb:cc:cf:5b:0c:e2:07:d7:e5:75:6b:
68:fe:0d:a4:c8:e8:8a:c5:4c:c5:b4:ad:cb:c6:9c:74:e9:5a:
a0:5b:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:49 2026 by rpki-client