Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/hIwb7_2amNokm6JgMm4qjVwwsfY.roa
File: hIwb7_2amNokm6JgMm4qjVwwsfY.roa (raw, json)
Hash identifier: z6Tdio5T4pmKdRiyHl5VQF+mCNzIsXm/cdRBtIDIBvQ=
Subject key identifier: 84:8C:1B:EF:FD:9A:98:DA:24:9B:A2:60:32:6E:2A:8D:5C:30:B1:F6
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019F70A2A2915BF1450CE126454E51E2FCB8
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/hIwb7_2amNokm6JgMm4qjVwwsfY.roa
Signing time: Fri 17 Jul 2026 15:12:14 +0000
ROA not before: Fri 17 Jul 2026 15:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51173
IP address blocks: 37.203.48.0/24 maxlen: 24
37.203.49.0/24 maxlen: 24
37.203.50.0/24 maxlen: 24
37.203.51.0/24 maxlen: 24
37.203.52.0/24 maxlen: 24
37.203.53.0/24 maxlen: 24
89.106.136.0/24 maxlen: 24
89.106.137.0/24 maxlen: 24
89.106.138.0/24 maxlen: 24
89.106.139.0/24 maxlen: 24
89.106.140.0/24 maxlen: 24
89.106.141.0/24 maxlen: 24
89.106.142.0/24 maxlen: 24
89.106.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:a2:a2:91:5b:f1:45:0c:e1:26:45:4e:51:e2:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jul 17 15:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=848c1beffd9a98da249ba260326e2a8d5c30b1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:67:07:d1:8b:75:57:25:af:c9:28:ee:1c:
6e:fa:b8:3c:45:6c:ff:f8:45:f5:2e:92:e6:42:56:
56:bd:48:09:f4:c0:c2:cd:bf:25:f0:2c:7d:4f:b0:
99:20:32:23:4f:39:a6:a9:e7:95:5a:58:0e:80:f5:
07:10:e1:c2:7f:bf:ad:20:c0:9d:d6:83:67:51:b9:
9a:8f:90:72:cc:6c:8f:a7:df:4b:e8:8f:3b:e9:7b:
7b:b7:58:8a:ce:03:5c:bd:2f:af:26:fc:59:1f:43:
d4:67:cc:bf:ac:67:85:81:87:6f:44:16:8f:d8:af:
40:9f:e3:51:a5:79:58:de:b6:8e:bf:57:e1:7a:2d:
f4:4d:1e:dc:85:ca:7c:dc:63:22:45:ad:29:1b:9b:
4c:c1:99:67:67:f2:31:67:42:19:1b:9f:6a:d6:94:
96:0d:94:cd:f6:9b:16:57:f4:c4:53:b1:59:59:57:
f7:55:40:07:7c:f2:65:64:79:46:f1:1d:4f:32:38:
e7:7c:18:cc:0c:e7:aa:22:db:38:93:a1:a8:d1:a9:
90:75:10:e2:a9:d0:62:b0:89:62:d6:d6:07:8b:80:
49:b6:a9:13:c4:4c:8d:0e:3b:d4:60:98:71:37:9a:
f6:41:3f:96:60:ed:62:98:f7:9d:54:09:ec:52:10:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:1B:EF:FD:9A:98:DA:24:9B:A2:60:32:6E:2A:8D:5C:30:B1:F6
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/hIwb7_2amNokm6JgMm4qjVwwsfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.48.0-37.203.53.255
89.106.136.0/21
Signature Algorithm: sha256WithRSAEncryption
90:ff:a6:49:3e:6a:db:8b:89:30:24:20:29:dd:bb:5b:96:95:
68:16:b9:35:c6:77:5f:e7:ab:d9:21:99:8c:60:7b:fa:9d:09:
94:bd:48:3b:6a:34:ec:39:08:de:9e:1e:3b:84:02:d9:5a:e8:
40:d5:d0:26:cc:4e:32:6b:78:90:d4:25:7c:66:d8:a0:78:3b:
4d:32:76:f3:81:fd:82:75:88:14:1f:9b:37:01:b7:62:62:6a:
ac:05:39:c6:cb:d6:4b:d8:46:72:ee:bf:17:81:0f:07:87:7b:
8a:58:1e:54:2c:f3:b8:90:34:62:40:b1:72:55:64:7a:fc:a2:
dd:47:f7:4e:05:95:ec:97:3f:c5:b1:cc:20:8c:a7:6c:d5:52:
00:c8:51:f9:8e:cf:49:e9:47:7f:8e:e6:a0:0c:be:d8:1b:11:
c1:13:9c:87:c2:2a:b7:3e:e2:f2:cb:65:85:88:71:df:5d:96:
49:0c:b2:36:46:18:bd:2e:bd:8c:14:c9:10:02:5e:82:8e:2c:
c9:d2:16:5d:c7:18:9d:bf:cd:56:73:64:a5:0e:7e:8b:4d:84:
01:b8:5f:81:79:81:3a:9c:e5:2b:04:83:30:78:8e:e1:e9:d5:
38:45:83:66:7b:b3:f4:f1:1c:d4:e0:e0:16:a1:3e:f1:c4:70:
06:e2:0b:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:48 2026 by rpki-client