Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/dleueFbcrUNzhI-WHDBU63rPOz4.roa
File: dleueFbcrUNzhI-WHDBU63rPOz4.roa (raw, json)
Hash identifier: Y5zt8stld/BRdnSi9EHJWekh5P1SDCXmMFuSagdeCrU=
Subject key identifier: 76:57:AE:78:56:DC:AD:43:73:84:8F:96:1C:30:54:EB:7A:CF:3B:3E
Certificate issuer: /CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Certificate serial: 01A072596345B50F513101505A53357768D6
Authority key identifier: 73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/dleueFbcrUNzhI-WHDBU63rPOz4.roa
Signing time: Sat 05 Sep 2026 16:14:15 +0000
ROA not before: Sat 05 Sep 2026 16:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213166
IP address blocks: 37.44.214.0/24 maxlen: 32
86.105.182.0/24 maxlen: 32
91.194.110.0/24 maxlen: 32
2a0f:ea81::/32 maxlen: 48
2a0f:ea81:bebe::/48 maxlen: 48
2a0f:ea83::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:59:63:45:b5:0f:51:31:01:50:5a:53:35:77:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Validity
Not Before: Sep 5 16:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7657ae7856dcad4373848f961c3054eb7acf3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:19:ab:b8:a6:6d:d5:a0:e8:95:c5:11:2f:
70:42:97:1f:26:0b:1f:46:80:db:b1:22:33:f8:df:
70:ef:3f:5b:b4:7b:16:a5:0a:00:ea:b4:a4:6e:1e:
97:ba:5e:90:dd:07:b0:52:92:02:c8:3b:6b:e9:0e:
ee:87:76:a7:df:b2:7a:17:a2:d6:06:3b:9b:21:30:
13:31:a1:07:12:e4:2a:b9:cd:df:4b:90:a5:60:8d:
ad:0e:23:8e:e9:7a:dc:c8:bb:c0:b8:57:c0:88:a2:
08:2b:d0:1f:bf:3a:a5:dd:44:26:9d:6b:11:6c:b6:
c0:2b:8f:54:e8:ac:9b:7f:f2:23:bd:be:8b:78:b7:
07:96:90:f6:14:2e:25:1f:e6:94:09:e3:00:6e:5f:
fd:87:be:81:46:1c:6f:f3:f5:78:1e:ef:de:01:87:
1e:6e:da:d7:7e:ec:ae:7a:7d:cd:8b:32:48:04:41:
30:64:99:ea:8c:ab:f9:8b:53:c7:48:b6:54:70:b2:
9f:fc:89:66:87:e7:ab:de:1a:bc:44:6d:02:a7:0e:
64:39:b5:21:fa:a3:bf:87:41:20:b4:80:87:c5:7f:
9e:e6:7b:7a:ad:2e:24:6f:03:c1:e7:9f:d1:18:d1:
ce:32:f3:ae:0f:31:0f:a5:63:5f:e0:e0:6e:06:1c:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:57:AE:78:56:DC:AD:43:73:84:8F:96:1C:30:54:EB:7A:CF:3B:3E
X509v3 Authority Key Identifier:
keyid:73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/dleueFbcrUNzhI-WHDBU63rPOz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.214.0/24
86.105.182.0/24
91.194.110.0/24
IPv6:
2a0f:ea81::/32
2a0f:ea83::/32
Signature Algorithm: sha256WithRSAEncryption
61:c9:4c:7e:64:37:a6:a4:cd:83:2a:bd:f2:86:15:7c:1b:6f:
76:1b:ac:94:59:56:c0:66:e8:10:42:72:9f:28:29:be:46:97:
d5:2f:b4:8b:85:62:6b:83:07:9f:9e:69:12:31:32:31:1d:41:
45:6d:ad:da:b4:fa:da:e8:b2:50:2d:95:0b:43:69:ec:16:08:
d6:f0:98:ae:26:21:6a:a2:f0:06:76:7b:dd:a1:d3:0f:28:c1:
38:fa:1d:ae:56:e0:c6:7d:87:27:85:6d:ea:e7:bd:ff:d0:41:
00:a1:81:c9:59:1d:a9:55:2b:f5:ea:aa:94:b1:5e:7d:2e:7f:
89:e3:13:60:eb:48:45:bd:f8:80:da:96:39:e4:ab:8c:ca:2f:
08:f3:93:5f:f0:82:1a:70:7c:bc:ce:1c:f9:b6:a4:be:d7:18:
62:8c:9b:73:06:e0:70:1f:55:9a:25:74:47:74:b5:cc:3d:0f:
38:aa:f1:7e:59:db:b8:55:cf:58:4e:9a:22:4b:11:b1:ca:a8:
aa:c3:71:14:ea:03:8f:d1:01:ed:43:86:99:c0:fb:ce:c1:2a:
e1:f4:60:c3:3b:3f:40:0d:29:21:b2:f0:74:72:a1:88:2e:4e:
74:aa:f8:14:e1:b4:52:91:c0:87:8e:07:2d:f5:69:7a:23:77:
86:b2:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:45:29 2026 by rpki-client