Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/aoxQba3i7QUm65BfMLv96JuOb74.roa
File: aoxQba3i7QUm65BfMLv96JuOb74.roa (raw, json)
Hash identifier: QIB1S/gkkRQGrocEZtGs9uUeW1n+BujIUCxe8lcxHAw=
Subject key identifier: 6A:8C:50:6D:AD:E2:ED:05:26:EB:90:5F:30:BB:FD:E8:9B:8E:6F:BE
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019F6596251A082213442F2429645E167BA0
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/aoxQba3i7QUm65BfMLv96JuOb74.roa
Signing time: Wed 15 Jul 2026 11:42:46 +0000
ROA not before: Wed 15 Jul 2026 11:42:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198569
IP address blocks: 37.152.160.0/24 maxlen: 24
37.152.161.0/24 maxlen: 24
37.152.162.0/24 maxlen: 24
37.152.163.0/24 maxlen: 24
37.152.164.0/24 maxlen: 24
37.152.167.0/24 maxlen: 24
37.152.168.0/24 maxlen: 24
37.152.169.0/24 maxlen: 24
37.152.170.0/24 maxlen: 24
37.152.171.0/24 maxlen: 24
37.152.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:96:25:1a:08:22:13:44:2f:24:29:64:5e:16:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Jul 15 11:42:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a8c506dade2ed0526eb905f30bbfde89b8e6fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:69:f4:49:74:ad:0e:09:53:9d:0a:01:71:
69:ea:00:e0:28:15:59:36:be:84:74:47:63:3a:31:
4d:8e:a2:27:56:72:73:74:ee:85:8b:4b:40:50:80:
c5:34:74:4a:18:ff:48:65:4d:86:ea:84:fa:3d:b9:
e6:ff:21:60:ce:96:a4:f9:d9:ea:13:ea:0f:66:22:
65:58:92:2d:a9:ea:cb:52:fc:e1:b9:20:b9:ec:00:
52:1b:e0:91:32:6c:a9:c0:72:62:bc:ad:b4:06:b1:
c3:98:ba:7f:8d:86:a0:e6:7c:2d:13:95:0a:88:9d:
4c:86:63:b4:68:d0:64:8c:09:03:fb:c4:2b:66:0b:
6d:17:e9:ae:83:72:df:6f:7c:87:4b:53:f9:e7:ad:
8a:2e:2e:58:e6:56:ef:22:a1:76:2d:59:a5:31:40:
6f:4e:99:50:0f:cb:c9:9a:4e:aa:6c:a2:9c:f7:cf:
48:1f:f3:25:c7:40:99:b7:df:58:6e:0d:0b:0d:c2:
df:d5:41:b1:6b:60:99:ec:f2:14:45:98:60:8e:d4:
15:79:cd:7c:64:3b:39:7f:1f:fe:55:e8:a9:09:68:
8e:07:bd:b1:b0:50:27:48:84:cf:8c:13:de:be:3d:
7f:7a:42:bb:97:82:a1:35:3f:0f:b0:f4:36:09:54:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:50:6D:AD:E2:ED:05:26:EB:90:5F:30:BB:FD:E8:9B:8E:6F:BE
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/aoxQba3i7QUm65BfMLv96JuOb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.160.0-37.152.164.255
37.152.167.0-37.152.172.255
Signature Algorithm: sha256WithRSAEncryption
8a:62:b1:37:a4:6c:26:71:72:83:61:19:06:56:35:f1:87:01:
05:2b:48:62:54:b6:79:41:a9:e2:a3:c5:a7:db:29:bb:19:52:
7e:c4:87:58:cd:24:10:9b:91:54:54:75:6e:4c:c6:57:c5:65:
d8:52:ed:81:c1:27:b5:ae:81:4d:de:2f:af:56:f5:3e:10:1a:
dc:5d:ea:96:f9:da:8a:30:45:78:6b:33:44:58:73:26:b2:8a:
cb:9d:00:a8:36:06:c4:93:86:ad:bc:aa:8d:09:0d:2f:e8:c6:
ab:1d:f5:de:07:b3:5c:00:79:29:2c:72:88:c5:a7:97:98:ac:
a4:50:c5:88:29:05:1d:9f:6d:94:89:68:a8:5d:ac:d1:74:14:
0e:3c:6b:aa:f6:81:4c:f7:ff:a5:80:6e:3e:de:1f:6d:71:e2:
65:05:79:86:af:31:9c:79:3a:65:10:1f:f7:28:50:cd:f6:a8:
f2:5e:d5:e5:8a:20:c3:a6:cf:22:b3:8d:de:03:0d:3a:0f:96:
ed:87:6f:71:ae:bf:33:32:ef:7d:1d:c2:8d:66:15:f5:70:9e:
e0:d6:7e:62:b4:05:f1:75:1f:e7:11:22:2b:a2:e0:a6:3f:b2:
ea:98:4a:89:ba:31:9b:8e:77:8b:04:f6:96:aa:1c:bc:33:d6:
64:94:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:39 2026 by rpki-client