Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/Ke8kTxOnrDSRnbMan8QsXJ_XEkU.roa
File: Ke8kTxOnrDSRnbMan8QsXJ_XEkU.roa (raw, json)
Hash identifier: CPpeXl3+kqfUGFSBaMiqr+IqI4glRjRTWo/lOcIIFFo=
Subject key identifier: 29:EF:24:4F:13:A7:AC:34:91:9D:B3:1A:9F:C4:2C:5C:9F:D7:12:45
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019F290FB75D13F377B97A6C030B1D728079
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/Ke8kTxOnrDSRnbMan8QsXJ_XEkU.roa
Signing time: Fri 03 Jul 2026 17:38:43 +0000
ROA not before: Fri 03 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35372
IP address blocks: 37.152.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:0f:b7:5d:13:f3:77:b9:7a:6c:03:0b:1d:72:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Jul 3 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29ef244f13a7ac34919db31a9fc42c5c9fd71245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:76:83:8e:a6:64:58:75:31:68:32:13:4c:
7d:92:e5:34:2b:89:3c:a1:a4:a0:7d:21:8e:36:dc:
5f:ce:55:f6:c9:6e:7b:d2:08:22:68:19:0c:02:18:
c6:c9:4b:d3:d8:04:0d:6a:a8:97:0d:ea:29:fb:60:
5e:ff:bb:6d:0a:cc:20:09:d3:8a:76:55:63:34:f4:
06:8c:1d:02:8e:cd:69:73:e3:57:a3:93:c5:77:64:
1c:e0:96:89:40:25:7e:b2:fa:db:e9:86:77:e4:09:
4e:7c:f7:f8:aa:a4:8e:41:ee:41:01:50:53:86:71:
e5:01:2d:c4:30:31:7d:1f:3e:f9:4c:5e:7d:e2:94:
db:f3:7d:3a:ce:56:ba:1f:0a:4a:84:e4:f0:e0:73:
17:8a:5b:a9:b7:d0:32:91:f1:00:db:82:ab:ee:c0:
11:6a:ca:26:20:d8:82:70:a2:0f:dd:3e:07:38:d1:
4d:29:24:8a:62:5d:d0:aa:fd:34:4c:6a:40:b8:1e:
f1:cb:e1:b2:b8:24:05:d6:d5:30:2b:4f:5b:36:e9:
7e:52:45:4a:d7:a0:62:d4:21:d1:ca:38:2b:66:9c:
32:4b:d8:07:33:e7:8a:e5:13:d9:ea:b9:db:b2:1c:
83:d5:95:23:d2:fe:43:eb:f8:71:55:ec:35:8c:cd:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EF:24:4F:13:A7:AC:34:91:9D:B3:1A:9F:C4:2C:5C:9F:D7:12:45
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/Ke8kTxOnrDSRnbMan8QsXJ_XEkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b3:e5:40:7c:55:4a:19:ae:42:29:a7:a3:a1:c0:4d:16:bf:
03:6b:2e:ad:af:fe:f1:2e:96:43:c2:2a:8e:75:34:ca:ff:a4:
51:f4:6b:d1:c6:1d:e7:3c:00:e5:7e:61:75:f7:2f:61:59:a7:
a0:8a:8d:54:ad:19:f6:51:6c:d5:48:59:05:9a:94:45:85:54:
e1:78:fe:d1:8e:af:12:18:5d:90:78:63:54:13:da:cc:93:34:
99:e8:02:bb:a4:45:dd:98:73:f5:cd:e0:61:9b:7d:9e:04:3c:
f3:63:52:35:9c:88:82:45:62:0b:55:3f:a4:fc:85:ef:10:1b:
10:0e:f0:91:45:75:8c:e6:0d:79:c9:83:4d:6d:64:ec:a2:50:
c4:5e:0a:81:7a:ea:ae:0e:c7:24:33:9a:e4:7c:03:89:2b:3f:
90:f0:e9:8b:0a:c6:c0:e9:bb:65:e2:84:3d:a9:cc:80:33:b6:
d2:48:9f:f0:9e:6f:2a:56:37:57:ab:57:18:ae:9e:a1:e5:7d:
9d:f1:7d:3a:90:79:17:7e:c7:f0:1e:74:3c:f3:f4:b7:00:34:
44:ff:0e:bf:b0:7a:b3:2f:18:18:61:f0:4d:1e:ac:f5:1f:1f:
cb:5c:58:fb:5a:c0:96:c5:d4:cc:29:fb:c4:f9:aa:ad:e7:38:
69:6b:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:19 2026 by rpki-client