Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/iueN0cPr5J-F_CpffmOLeXKH1YE.roa
File: iueN0cPr5J-F_CpffmOLeXKH1YE.roa (raw, json)
Hash identifier: RhVoBWM379UfAYCVQlM/MCysgsOBBa5Rp7XWtP056Rg=
Subject key identifier: 8A:E7:8D:D1:C3:EB:E4:9F:85:FC:2A:5F:7E:63:8B:79:72:87:D5:81
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019B7B368C40118CF429096F446000FE6EE6
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/iueN0cPr5J-F_CpffmOLeXKH1YE.roa
Signing time: Thu 01 Jan 2026 20:18:50 +0000
ROA not before: Thu 01 Jan 2026 20:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61044
IP address blocks: 37.148.192.0/21 maxlen: 21
37.148.196.0/24 maxlen: 24
185.40.92.0/22 maxlen: 22
2a03:10c0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:8c:40:11:8c:f4:29:09:6f:44:60:00:fe:6e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jan 1 20:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ae78dd1c3ebe49f85fc2a5f7e638b797287d581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:e2:48:07:5b:f2:4d:39:09:80:1f:ce:4a:
57:33:78:20:db:38:65:ca:34:28:2a:a2:d9:cd:25:
e1:67:d7:55:01:a9:0a:75:ff:1a:ba:28:c9:a7:6f:
07:ac:bd:85:d4:7d:af:9f:d2:30:cb:62:c3:e9:c9:
4f:ff:ee:29:93:d3:2c:21:51:53:22:3c:f0:9d:2c:
ea:a3:a4:da:59:e0:59:97:36:60:b6:bf:8b:37:37:
44:94:c7:64:64:f2:89:77:5b:89:e1:b2:09:83:b9:
df:8f:b7:83:72:69:73:53:36:47:18:c2:4b:f0:80:
a8:54:6c:75:39:79:b8:0c:7a:91:77:e3:3e:89:36:
52:1a:5d:d0:b7:70:f1:ab:d9:03:61:bc:0a:29:73:
e4:78:c6:47:32:c3:b3:8f:57:9e:fc:c7:54:ec:b4:
6d:32:b5:40:56:d0:72:97:84:89:a0:8b:af:5e:dd:
a9:45:5f:ec:e7:cb:3c:e9:a7:c8:66:d6:c5:6f:55:
ea:02:76:a4:26:62:48:53:98:b3:47:f0:b1:b7:f5:
da:10:ff:08:9f:51:9a:70:2d:41:af:b8:22:f4:f2:
5b:3c:91:fb:99:d8:58:ed:26:a7:bc:13:0e:e7:96:
82:dc:bb:3f:2a:02:98:40:55:21:95:63:f7:7e:56:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:8D:D1:C3:EB:E4:9F:85:FC:2A:5F:7E:63:8B:79:72:87:D5:81
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/iueN0cPr5J-F_CpffmOLeXKH1YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.192.0/21
185.40.92.0/22
IPv6:
2a03:10c0::/30
Signature Algorithm: sha256WithRSAEncryption
06:23:09:0a:b8:bf:70:3a:5f:01:86:7e:e6:ba:4f:d7:c8:24:
be:c3:0d:e1:24:00:b0:42:ee:33:78:a7:ce:9e:7b:1e:38:e6:
b6:72:b4:21:18:84:ce:e9:29:ec:78:95:a2:db:5a:03:5c:15:
71:63:2b:80:1f:19:90:22:28:6d:6e:99:d7:b8:e2:41:09:75:
fa:42:54:0e:7c:bf:e8:4f:ad:14:fb:e8:0e:de:39:98:74:a7:
6b:48:ca:3b:49:8d:cf:77:a2:c6:96:40:2d:4f:18:e8:a2:81:
86:81:57:fb:ac:40:94:a3:fd:e8:cf:2e:1a:98:58:c4:e5:fb:
3a:31:58:e6:3b:a2:6d:f9:ce:8c:4d:0e:b9:7d:29:8d:31:16:
61:f0:d5:53:3f:d5:9a:e3:ef:8f:6b:d7:a5:aa:53:1f:80:9b:
c0:fc:0b:0e:16:ff:10:53:28:59:0c:c9:40:c8:8e:66:54:16:
8b:de:b1:23:92:fa:47:d2:4b:95:7b:ce:25:5a:31:1e:03:d4:
55:04:8d:82:e5:db:47:f3:14:91:95:37:00:10:88:cd:fb:12:
dd:74:6d:e7:0f:3d:b7:e4:f1:91:7d:2a:dc:5e:0d:0a:ad:2c:
f2:60:59:cc:5e:64:73:99:bf:74:c9:64:d5:7c:ef:b9:43:3b:
38:44:46:30
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt7NoxAEYz0KQlvRGAA/m7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz
MTE1OWMwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWU3OGRkMWMzZWJlNDlmODVmYzJhNWY3ZTYzOGI3OTcyODdkNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX/iSAdb8k05CYAfzkpXM3gg2zhl
yjQoKqLZzSXhZ9dVAakKdf8auijJp28HrL2F1H2vn9Iwy2LD6clP/+4pk9MsIVFT
IjzwnSzqo6TaWeBZlzZgtr+LNzdElMdkZPKJd1uJ4bIJg7nfj7eDcmlzUzZHGMJL
8ICoVGx1OXm4DHqRd+M+iTZSGl3Qt3Dxq9kDYbwKKXPkeMZHMsOzj1ee/MdU7LRt
MrVAVtByl4SJoIuvXt2pRV/s58s86afIZtbFb1XqAnakJmJIU5izR/Cxt/XaEP8I
n1GacC1Br7gi9PJbPJH7mdhY7SanvBMO55aC3Ls/KgKYQFUhlWP3flboWQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIrnjdHD6+SfhfwqX35ji3lyh9WBMB8GA1UdIwQY
MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt
NjlkODA5MmI1NGUxLzEvaXVlTjBjUHI1Si1GX0NwZmZtT0xlWEtIMVlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx
LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJZTAAwQC
uShcMA0EAgACMAcDBQIqAxDAMA0GCSqGSIb3DQEBCwUAA4IBAQAGIwkKuL9wOl8B
hn7muk/XyCS+ww3hJACwQu4zeKfOnnseOOa2crQhGITO6SnseJWi21oDXBVxYyuA
HxmQIihtbpnXuOJBCXX6QlQOfL/oT60U++gO3jmYdKdrSMo7SY3Pd6LGlkAtTxjo
ooGGgVf7rECUo/3ozy4amFjE5fs6MVjmO6Jt+c6MTQ65fSmNMRZh8NVTP9Wa4++P
a9elqlMfgJvA/AsOFv8QUyhZDMlAyI5mVBaL3rEjkvpH0kuVe84lWjEeA9RVBI2C
5dtH8xSRlTcAEIjN+xLddG3nDz235PGRfSrcXg0KrSzyYFnMXmRzmb90yWTVfO+5
Qzs4REYw
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:37:23 2026 by rpki-client