Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/j_e68P-AYa2rmUhuYOkm9hzEeD4.roa
File: j_e68P-AYa2rmUhuYOkm9hzEeD4.roa (raw, json)
Hash identifier: fu5OUQBQJIV8KAmP0Ju9hs+ANS87d5jd3QwiV+u9mQY=
Subject key identifier: 8F:F7:BA:F0:FF:80:61:AD:AB:99:48:6E:60:E9:26:F6:1C:C4:78:3E
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019F29144B77C366A2FF181159D8CC060052
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/j_e68P-AYa2rmUhuYOkm9hzEeD4.roa
Signing time: Fri 03 Jul 2026 17:43:43 +0000
ROA not before: Fri 03 Jul 2026 17:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 37.152.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:14:4b:77:c3:66:a2:ff:18:11:59:d8:cc:06:00:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Jul 3 17:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ff7baf0ff8061adab99486e60e926f61cc4783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:73:6f:ab:48:38:c6:f2:a0:ff:3c:5e:06:e0:
a2:6a:3a:8a:65:77:ea:38:75:0e:c3:7b:1d:68:16:
50:cd:df:99:e0:96:f9:f9:73:33:6a:e8:61:8b:b8:
bc:ed:de:67:20:73:d6:89:ff:72:9b:35:ed:a3:6a:
e9:6e:fd:6c:08:25:40:34:60:27:c1:a6:d2:86:58:
e7:5e:61:de:fb:83:e9:4a:f0:de:2c:b3:b6:61:7c:
3b:a3:1c:9a:bd:a4:52:36:e4:56:2c:75:8b:42:72:
90:a2:45:33:7e:45:23:28:73:42:6f:10:97:50:c6:
a0:3f:da:fa:a4:68:58:96:20:2b:2e:8f:a8:14:9c:
46:6f:b2:f1:8f:de:1e:68:9e:d0:01:92:88:c0:35:
40:1b:ff:a3:cb:72:a2:fe:ff:11:d6:24:2a:a5:e4:
f1:63:36:18:f7:21:90:eb:5a:ec:13:24:95:18:c9:
4c:43:03:95:6b:96:f7:4f:3d:94:24:c8:56:2c:58:
2b:d2:11:3e:9a:7e:31:11:ca:29:27:54:73:f9:a3:
e5:dd:d4:5d:50:7a:bf:dd:2c:68:ec:46:23:a6:41:
8e:8f:f3:52:b6:fb:70:e2:85:b5:9b:b3:e9:51:1c:
53:67:30:43:79:f0:4d:eb:85:14:e5:16:12:8b:9b:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:BA:F0:FF:80:61:AD:AB:99:48:6E:60:E9:26:F6:1C:C4:78:3E
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/j_e68P-AYa2rmUhuYOkm9hzEeD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1f:33:f0:1a:cd:ff:7e:44:1a:c5:28:da:1c:ba:29:5e:48:
b4:03:aa:b1:87:50:ea:3c:aa:b8:a7:17:64:b7:2a:50:bc:15:
31:d9:13:e5:c5:9b:25:ce:dd:7c:f1:30:54:09:d0:a3:58:d8:
76:78:07:2e:82:34:fa:63:a2:dd:a6:ea:15:7f:77:44:24:36:
e2:73:13:38:38:0b:73:3a:8e:fd:ac:52:c8:ae:aa:4c:ff:a9:
db:b3:09:67:23:52:1b:44:92:fa:73:96:f7:12:d6:4a:a3:67:
6f:3e:5b:78:7e:02:38:c8:ab:7c:b0:bf:d9:a9:49:fb:81:fb:
fa:4d:51:a0:07:19:25:aa:32:4b:38:b7:f1:78:a6:39:c2:c9:
34:98:d0:99:46:36:70:4b:70:db:e9:0d:7e:cc:c1:be:ff:41:
60:c5:60:ed:e4:b7:e3:e8:24:9e:02:78:37:cd:61:be:ba:5b:
a6:5b:12:1d:47:59:62:d0:34:8f:3a:82:e7:ab:eb:65:ae:d1:
d6:7d:0d:a6:5b:29:1f:ee:13:28:7a:45:2f:67:9b:97:de:30:
a9:ab:f7:5c:62:80:d2:41:a9:12:b6:a7:bc:b2:c0:bb:1b:24:
db:92:65:77:8c:49:8f:9a:4f:96:1d:98:d1:ea:ab:bb:ce:0a:
14:23:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:57 2026 by rpki-client