Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/84QPNs99F2FLKJtQBYoOZt3F3p8.roa
File: 84QPNs99F2FLKJtQBYoOZt3F3p8.roa (raw, json)
Hash identifier: EjdzLhSfZiaXxVtxCqo06jqnawXCpF2ar+1qQ5nt39k=
Subject key identifier: F3:84:0F:36:CF:7D:17:61:4B:28:9B:50:05:8A:0E:66:DD:C5:DE:9F
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 019E7B21B47C76A0FC83E71B70C85D36009B
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/84QPNs99F2FLKJtQBYoOZt3F3p8.roa
Signing time: Sat 30 May 2026 23:04:26 +0000
ROA not before: Sat 30 May 2026 23:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202651
IP address blocks: 37.205.116.0/22 maxlen: 24
37.205.116.0/24 maxlen: 24
37.205.117.0/24 maxlen: 24
37.205.118.0/24 maxlen: 24
37.205.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:21:b4:7c:76:a0:fc:83:e7:1b:70:c8:5d:36:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: May 30 23:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3840f36cf7d17614b289b50058a0e66ddc5de9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:61:2e:c0:10:5c:05:30:69:46:2a:e7:95:
fd:11:71:f3:3a:a8:42:17:76:74:09:9c:a6:97:7f:
79:f7:67:69:32:5e:c2:fe:60:e0:31:58:08:82:ba:
00:4d:fa:d3:8c:59:26:7b:3b:ec:6f:c5:1c:b4:b8:
cc:77:9d:e2:f5:bc:c7:e1:8b:fb:19:36:02:74:77:
35:b6:0a:55:56:ec:1c:9c:cc:d8:10:86:85:d2:5c:
b9:2d:d6:4a:7c:64:a5:0e:63:aa:83:70:0e:a6:93:
28:32:e1:61:82:59:fd:56:fa:10:be:f9:20:3c:f8:
5e:81:bb:39:08:6d:1c:00:af:7e:c1:07:63:5d:c9:
33:cd:3d:5a:6a:9c:b8:72:65:3a:f9:b2:b1:ce:ee:
91:65:2d:7b:12:c4:0a:b9:a3:35:99:f0:6c:83:73:
6d:aa:1a:b5:c6:9d:62:c5:b8:51:72:ff:a5:36:89:
ae:5e:7f:2a:bd:d7:f4:53:e7:d8:15:f7:0b:b6:70:
0b:0b:b6:2a:57:ca:f4:25:eb:67:21:b5:2c:76:77:
0a:dc:91:1e:4e:e8:55:e5:17:cf:47:b8:48:b8:79:
ae:b7:33:97:9f:e1:ae:60:0c:bb:6a:88:71:99:01:
55:6c:1c:a5:04:42:94:f8:14:35:c7:f6:dc:d9:05:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:0F:36:CF:7D:17:61:4B:28:9B:50:05:8A:0E:66:DD:C5:DE:9F
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/84QPNs99F2FLKJtQBYoOZt3F3p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:4b:59:47:c2:62:29:71:7b:6b:bb:bf:e5:b2:f0:80:33:87:
e1:0e:5a:9d:06:4a:20:cf:9c:0d:9e:12:70:13:42:9e:bf:ea:
b2:00:8f:19:88:59:c7:f4:7a:24:59:12:09:a0:b8:f7:b6:3f:
a8:fa:99:32:c8:cf:80:a9:fa:48:95:f7:a9:96:b7:e2:b2:a8:
5a:0d:2a:c8:64:4c:b2:3b:7d:91:5e:75:ed:dd:a8:46:8f:5d:
ea:bf:1a:9e:5c:76:87:00:39:0c:ba:e5:cf:7a:c1:a8:69:74:
34:b4:37:96:1c:c0:5e:dc:cb:75:a0:41:c7:5e:ab:ad:68:1b:
5c:f6:b8:47:85:9f:4e:3d:ad:ca:a7:e5:7c:16:a6:d8:e4:13:
40:26:66:96:c1:15:9b:84:8e:5d:04:b9:30:df:63:27:3c:5a:
17:84:2f:d0:57:11:9d:05:7b:e2:96:16:45:79:65:3a:9d:08:
29:37:29:63:2c:90:c4:33:c7:ad:27:19:16:14:5e:3f:b0:c6:
14:be:f3:44:06:ca:b5:07:8c:01:ec:d5:74:63:a6:67:cf:f5:
40:f9:54:6b:eb:5e:6b:d4:6a:4d:7d:fb:81:51:83:85:7a:df:
43:22:65:40:c4:73:77:69:b5:a4:8f:c4:1c:f8:8c:19:ed:77:
e7:65:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:20:29 2026 by rpki-client