Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/8m7_97JdtIrtkt5WGrRYcuLHU4c.roa
File: 8m7_97JdtIrtkt5WGrRYcuLHU4c.roa (raw, json)
Hash identifier: Q6RA6PmCpSPDArG885+olHtRWfj1tfr4lBv19llFNwA=
Subject key identifier: F2:6E:FF:F7:B2:5D:B4:8A:ED:92:DE:56:1A:B4:58:72:E2:C7:53:87
Certificate issuer: /CN=f96df8cceebd9f667aed20412083f6165456afc7
Certificate serial: 019F23687782D592219C8A0CC1DBABEF5777
Authority key identifier: F9:6D:F8:CC:EE:BD:9F:66:7A:ED:20:41:20:83:F6:16:54:56:AF:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-W34zO69n2Z67SBBIIP2FlRWr8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/8m7_97JdtIrtkt5WGrRYcuLHU4c.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8680
IP address blocks: 37.18.136.0/21 maxlen: 24
37.18.136.0/23 maxlen: 23
37.18.138.0/23 maxlen: 23
37.18.138.0/24 maxlen: 24
37.18.140.0/23 maxlen: 23
46.31.200.0/21 maxlen: 24
46.31.202.0/23 maxlen: 23
46.31.204.0/23 maxlen: 23
46.31.206.0/24 maxlen: 24
46.31.207.0/24 maxlen: 24
185.48.76.0/22 maxlen: 24
185.48.78.0/24 maxlen: 24
2a04:b240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-W34zO69n2Z67SBBIIP2FlRWr8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:77:82:d5:92:21:9c:8a:0c:c1:db:ab:ef:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96df8cceebd9f667aed20412083f6165456afc7
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f26efff7b25db48aed92de561ab45872e2c75387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:b0:13:b2:7d:8e:d7:55:f1:d4:d2:63:6f:
30:88:c3:29:6b:f4:00:f9:b3:b4:8b:83:7b:fb:c9:
c3:ce:7f:5a:10:04:b3:51:61:de:f8:ff:2a:96:06:
f3:fd:85:ac:34:10:ef:eb:8d:6a:91:84:7e:fb:15:
2c:47:9f:ac:55:ed:f1:26:81:50:17:f5:95:c1:61:
23:4c:26:e5:e6:d6:9f:59:19:ee:83:30:cb:3a:6d:
b6:97:e6:75:1c:54:77:f8:a5:0c:19:c1:5a:f2:38:
47:4e:39:51:9c:07:47:8f:17:cb:65:6e:9e:58:8f:
ba:86:1d:32:82:70:ff:46:3b:f7:ea:5d:6f:e5:b0:
9f:8b:0b:3c:cc:f4:0a:91:c7:54:fc:e2:59:ae:13:
b4:cb:5f:c4:b5:f0:f8:19:75:8e:8f:59:04:9b:68:
8a:ea:3a:ea:1c:5f:78:58:c9:2a:94:17:df:a5:58:
93:cb:b8:31:89:49:c3:ec:05:19:13:2a:34:24:0e:
ab:30:c2:0c:d2:f5:d9:a5:ab:fb:a7:ed:c3:8b:63:
95:fa:f8:dd:10:37:d7:6b:2a:ba:03:82:ab:94:31:
1f:01:99:a9:53:74:e2:ab:dc:76:7c:f5:8d:04:95:
a8:e2:a8:88:ad:dc:ae:f1:66:94:6f:0b:5d:6a:70:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:FF:F7:B2:5D:B4:8A:ED:92:DE:56:1A:B4:58:72:E2:C7:53:87
X509v3 Authority Key Identifier:
keyid:F9:6D:F8:CC:EE:BD:9F:66:7A:ED:20:41:20:83:F6:16:54:56:AF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-W34zO69n2Z67SBBIIP2FlRWr8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/8m7_97JdtIrtkt5WGrRYcuLHU4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/1-W34zO69n2Z67SBBIIP2FlRWr8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.136.0/21
46.31.200.0/21
185.48.76.0/22
IPv6:
2a04:b240::/29
Signature Algorithm: sha256WithRSAEncryption
74:2e:de:b7:7a:06:0d:5f:9d:18:2b:63:a6:f1:d7:d1:77:0e:
9b:02:f3:8d:3c:1b:e0:b4:58:9c:e1:f9:d3:9f:35:90:c1:5d:
05:2a:70:40:fc:7f:2d:57:f9:a0:da:13:b3:b5:93:06:1c:db:
fa:67:dc:95:1c:06:61:19:12:cc:7d:8f:9a:df:00:45:b7:0f:
cd:53:eb:0c:f0:76:75:a3:ef:11:a8:ad:b9:27:c0:25:22:9a:
02:d0:71:ff:22:9c:0f:8a:04:20:69:96:ce:26:7c:e6:10:aa:
e1:4a:35:4f:5d:39:7d:8e:a5:33:29:36:f0:02:2d:08:12:84:
9b:94:27:4e:fa:da:8b:0a:c6:13:8a:e7:5f:8f:6a:c3:92:22:
cb:ef:ba:b1:a7:46:81:82:44:ae:a2:bf:7f:87:db:c0:66:63:
1a:c9:50:89:6d:73:01:53:7c:61:24:42:1e:a9:89:35:7b:03:
ba:f3:68:c1:97:26:98:1e:ea:bd:f3:cd:f3:5f:9d:3c:ff:5b:
4e:34:00:3d:28:dd:bf:4e:c7:09:49:ab:2b:8d:3c:ef:86:e1:
af:c8:dd:19:fc:f8:9c:0c:67:43:fc:1a:5a:6c:c1:58:9c:f6:
8a:38:fd:99:62:6c:b9:7f:84:67:bb:52:01:f5:1d:d6:7a:0d:
6a:11:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:13 2026 by rpki-client