Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/pppwjW6syoCZJ8jen55X47VvJxQ.roa
File: pppwjW6syoCZJ8jen55X47VvJxQ.roa (raw, json)
Hash identifier: m69cp7PEMu5tnrCPxMt3wLbjAk2ze5OhHKSkGVl+xYs=
Subject key identifier: A6:9A:70:8D:6E:AC:CA:80:99:27:C8:DE:9F:9E:57:E3:B5:6F:27:14
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 01A05CF3BC1401574B5CC0E268B6EEB4F39A
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/pppwjW6syoCZJ8jen55X47VvJxQ.roa
Signing time: Tue 01 Sep 2026 12:31:12 +0000
ROA not before: Tue 01 Sep 2026 12:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 37.221.72.0/22 maxlen: 24
37.221.72.0/24 maxlen: 24
185.126.154.0/23 maxlen: 24
2a09:ea00::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:f3:bc:14:01:57:4b:5c:c0:e2:68:b6:ee:b4:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Sep 1 12:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a69a708d6eacca809927c8de9f9e57e3b56f2714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:23:ae:34:0d:70:f2:5f:c8:25:7e:12:96:
2f:ba:af:91:e7:39:b9:97:0c:cc:2c:ca:9f:21:f2:
91:ae:71:cc:8f:83:8a:8a:71:a1:f1:3c:c2:82:fa:
03:f0:a1:bd:5d:d0:c0:dd:c0:2d:fd:88:dd:2e:69:
e9:c5:94:46:48:16:00:13:c6:00:f7:15:40:5c:02:
78:2f:ef:22:b4:10:99:7a:c0:a7:12:b3:94:a3:3c:
1f:8b:78:c4:ad:fe:a0:aa:15:f7:34:b9:02:77:bc:
17:c8:36:b7:dd:11:2e:38:65:a2:ca:05:68:f5:65:
74:05:f3:04:4a:8d:a6:90:24:ca:48:76:c8:41:b2:
c2:12:0e:ed:85:ae:e5:14:c7:5a:f7:6b:a7:1d:15:
53:4b:63:50:3a:72:3f:58:f3:a3:fb:69:a8:b7:77:
46:35:56:6d:f6:e5:16:f7:08:b6:92:74:7c:9b:2d:
fb:5d:cd:44:67:78:1e:6e:43:57:7e:0b:02:ce:c8:
48:46:ba:2b:43:29:59:38:9c:91:9c:f5:50:5b:73:
4a:7b:14:6c:6b:b5:dd:27:5f:00:81:e4:ea:21:3f:
be:60:2d:b9:09:16:47:10:70:56:65:12:a9:67:3f:
a0:47:2f:8b:ed:8b:91:82:80:bb:5f:5b:52:bd:3b:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9A:70:8D:6E:AC:CA:80:99:27:C8:DE:9F:9E:57:E3:B5:6F:27:14
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/pppwjW6syoCZJ8jen55X47VvJxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.72.0/22
185.126.154.0/23
IPv6:
2a09:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
6f:c3:04:3a:dd:c0:3a:5f:5c:61:f5:1e:73:03:dc:46:dc:e3:
68:d5:05:65:1a:0b:4e:de:6f:45:1d:ef:77:fb:8c:27:36:13:
38:e3:67:f5:6b:57:ba:c7:0a:0b:3d:f7:02:24:2d:4a:db:30:
03:49:94:b9:e8:ae:e4:c7:e4:82:ce:12:d0:06:8a:ad:77:c6:
d9:14:b7:3e:75:14:13:1d:fa:cb:b9:59:4f:fc:04:f9:7c:b3:
54:0f:51:94:9d:08:d8:d5:3d:2e:88:16:52:83:e3:09:44:68:
93:9a:9a:97:7e:c8:33:6d:0f:36:1d:0a:3e:3f:31:6b:46:d7:
de:f9:6d:79:bd:8e:42:aa:eb:c1:45:48:5a:31:3d:1f:99:b6:
56:62:ba:0f:b9:d5:a8:82:a2:64:8d:61:6e:62:9d:47:a3:ab:
0b:ef:ee:72:d2:3e:e6:d1:79:b4:7d:37:65:8f:bc:e3:ff:3e:
80:c1:5b:c9:a0:bf:02:6d:20:66:33:a9:9b:c8:f8:78:75:b7:
32:5a:90:32:da:c0:20:5d:55:25:52:9e:21:6d:70:f0:39:b5:
23:af:60:b2:2a:35:f1:1f:ca:77:1b:cd:ed:60:27:8a:0b:dc:
11:53:f9:99:c6:7d:7e:88:89:0b:66:76:70:41:82:9f:0b:c4:
d1:be:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:44:30 2026 by rpki-client