Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UE4weRulHKd2U5hzedQBoBdW7EU.roa
File: UE4weRulHKd2U5hzedQBoBdW7EU.roa (raw, json)
Hash identifier: DosbwlBCkgxdag2oJAnKZZvqZ/yPmW0ETRIlz2+CQ04=
Subject key identifier: 50:4E:30:79:1B:A5:1C:A7:76:53:98:73:79:D4:01:A0:17:56:EC:45
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019D735CE1B2D837B21785052820AB0F4DF9
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UE4weRulHKd2U5hzedQBoBdW7EU.roa
Signing time: Thu 09 Apr 2026 17:49:20 +0000
ROA not before: Thu 09 Apr 2026 17:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:5c:e1:b2:d8:37:b2:17:85:05:28:20:ab:0f:4d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Apr 9 17:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=504e30791ba51ca77653987379d401a01756ec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:e4:51:56:3a:0d:bd:1e:e0:e2:ec:87:bb:
15:1b:79:49:68:3f:93:50:5e:86:f7:12:57:02:59:
2b:3b:2d:4f:ea:e2:f5:9b:3f:89:d8:40:b1:3c:b8:
e5:f8:a7:d7:72:69:c0:95:b5:a7:10:03:1e:ed:f7:
9f:bb:1d:51:7f:e0:39:25:fb:98:71:75:9a:30:af:
6b:f1:22:17:a4:44:f3:d5:6b:74:98:28:b8:7a:20:
ba:1f:ca:89:83:b9:0a:1a:6b:ba:5f:be:5a:e7:8e:
51:4c:2f:e3:06:02:24:a7:c6:81:03:fb:a7:9c:02:
4f:50:68:dd:06:b5:88:ee:46:94:11:ec:3f:93:12:
17:ed:de:db:76:d4:c6:17:9a:ad:6e:82:3e:d8:d1:
c1:22:9f:7e:3f:11:9c:20:86:47:e3:c4:3d:dd:56:
1f:91:64:59:43:48:5a:7d:06:9a:1e:d4:37:d4:af:
2a:33:13:9f:6e:a8:a1:78:d7:5a:a8:22:38:e9:d9:
72:b1:dd:f5:78:9b:77:11:14:8d:50:3c:24:1b:36:
44:97:66:cd:39:f2:71:9e:64:d5:a6:d5:86:cd:78:
d0:5c:5f:ba:7f:a8:a8:85:fb:88:79:89:d5:82:e5:
02:aa:09:f2:b2:c6:51:6c:8d:e9:f5:20:65:5b:49:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4E:30:79:1B:A5:1C:A7:76:53:98:73:79:D4:01:A0:17:56:EC:45
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UE4weRulHKd2U5hzedQBoBdW7EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
04:47:97:9f:c6:6a:62:a2:c1:09:2f:28:7f:3c:7f:99:88:7e:
d9:c5:a3:06:50:71:57:e7:8b:37:63:3e:54:e8:5d:de:6b:a8:
8b:26:9b:ef:8e:7f:af:af:4e:5c:1c:04:88:82:a8:12:82:f0:
c4:06:1f:52:b3:56:f1:5e:f3:4e:37:b4:cd:7a:b8:80:f3:17:
f8:64:98:72:55:48:70:4f:a4:03:4e:3d:6f:8d:05:9f:bc:7c:
16:a7:d7:bd:60:e7:19:55:43:77:9d:90:48:1b:b6:ee:93:56:
d6:f7:4f:e6:d4:c9:cc:88:fa:fe:e8:98:c8:be:69:9e:c7:1b:
fc:08:a2:7b:6a:c6:0b:0b:bd:fc:b1:c7:83:00:45:a9:3f:79:
72:de:d0:e5:46:7b:07:ab:51:bd:0d:01:15:f8:22:1f:5e:a1:
b1:9f:8f:4d:98:2e:bf:58:85:67:b3:80:5f:e6:32:07:a7:31:
5a:0d:b4:e5:46:80:fc:b3:d3:ab:6f:35:12:44:41:04:ec:55:
be:86:7d:7b:ab:d9:e2:3b:cb:bd:75:c0:73:3b:4d:ba:24:fe:
0a:7b:99:03:76:89:f7:27:ad:33:51:f1:1f:05:1a:21:ce:45:
b1:b7:4b:32:53:05:c6:6c:53:60:d8:03:1b:a0:03:d2:13:33:
ad:cc:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:51 2026 by rpki-client