Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/N0LI8tlSqD7HEN8M-dEnsSlhvA0.roa
File: N0LI8tlSqD7HEN8M-dEnsSlhvA0.roa (raw, json)
Hash identifier: 8dXb1WBqAxcqGEYFoKwW+6mVw7RlRq7OBfv6dXfNk9E=
Subject key identifier: 37:42:C8:F2:D9:52:A8:3E:C7:10:DF:0C:F9:D1:27:B1:29:61:BC:0D
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 01A06282E3E1AE1F9C07E480833E8F941582
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/N0LI8tlSqD7HEN8M-dEnsSlhvA0.roa
Signing time: Wed 02 Sep 2026 14:25:40 +0000
ROA not before: Wed 02 Sep 2026 14:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 37.221.72.0/22 maxlen: 24
185.126.154.0/23 maxlen: 24
2a09:ea00::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:82:e3:e1:ae:1f:9c:07:e4:80:83:3e:8f:94:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Sep 2 14:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3742c8f2d952a83ec710df0cf9d127b12961bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:4a:85:c1:17:ca:05:2b:3b:10:86:f0:4e:
93:ef:d1:55:d5:87:fb:cc:e3:c0:5a:24:62:a7:55:
16:16:2b:3f:9a:26:85:5a:0e:d0:1a:b1:ac:e1:80:
75:b0:fb:2d:f8:5d:34:2c:b4:95:a4:a5:4f:99:60:
29:dd:f8:59:d3:74:cf:2d:44:00:11:ad:c6:a8:4c:
9f:4d:0e:b8:cc:10:d6:bd:97:98:96:dc:3c:59:a3:
4f:f1:cd:0c:a5:23:13:cd:2c:74:5c:c7:f6:59:11:
a0:e0:09:a3:b3:3c:49:2a:73:b7:d2:c3:88:04:a4:
e4:48:7b:b0:31:0d:b4:43:23:e8:cf:65:fa:ea:a2:
b2:b1:0d:0c:08:0b:af:cf:2d:bd:42:13:05:df:71:
64:15:e3:32:e1:58:cb:31:ec:86:c5:01:5a:19:73:
b3:33:59:94:a4:b0:87:97:69:06:23:ee:70:b3:4a:
99:d6:7f:14:b3:a5:39:12:65:21:dc:51:5e:ff:95:
26:4c:fe:e6:84:be:4e:66:fc:3b:ad:b9:02:f9:6d:
8b:ff:ef:32:aa:08:ed:49:30:d5:62:25:a2:15:51:
0b:86:9f:5c:3c:27:a5:c0:4c:20:0a:c7:d8:8a:04:
02:44:ab:26:e8:44:ef:01:b8:50:4d:f8:f3:9f:53:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:C8:F2:D9:52:A8:3E:C7:10:DF:0C:F9:D1:27:B1:29:61:BC:0D
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/N0LI8tlSqD7HEN8M-dEnsSlhvA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.72.0/22
185.126.154.0/23
IPv6:
2a09:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
5b:0f:ba:69:f6:a0:e4:75:40:a1:53:0a:cc:d2:81:07:09:61:
ff:9d:67:86:e3:29:a0:2c:25:fa:16:3e:35:bb:f5:c8:40:5b:
0c:63:5d:b9:63:22:ac:58:99:1b:eb:2e:13:c5:ea:ab:ed:5e:
17:d3:35:7a:62:1c:17:bd:c4:6e:ce:24:5e:47:ad:6f:44:f6:
7a:29:0f:d1:b7:99:18:3f:86:20:54:22:76:68:2a:61:72:90:
ef:b5:69:70:7b:06:de:46:84:df:d9:f2:82:1f:be:2a:38:11:
ef:63:36:31:e6:37:d8:1c:62:5e:71:ad:98:29:dd:51:14:1d:
cb:54:ca:b6:4c:f1:81:94:38:70:20:51:52:dc:5b:2d:6b:40:
10:8a:65:34:a5:12:a5:83:b5:d1:ce:d8:c0:1c:f1:5a:09:2b:
17:7b:da:06:86:a3:b2:17:7c:91:ba:8d:42:6e:e0:35:89:64:
04:74:e3:73:0b:54:65:66:b5:75:db:5a:bb:84:d9:09:6b:71:
60:79:2b:b5:aa:36:6e:3b:2d:16:2b:b7:b7:22:b8:ef:96:07:
6c:f3:8f:e9:89:81:03:2c:c1:5a:e4:7d:7d:3b:aa:19:45:7b:
92:52:49:63:1a:e1:b1:ad:7c:f2:18:16:06:c0:dc:c0:f3:ce:
75:ec:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:48 2026 by rpki-client