Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/iPnTc91ebSMaofS6kDoPi4bQbv0.roa
File: iPnTc91ebSMaofS6kDoPi4bQbv0.roa (raw, json)
Hash identifier: ciyDlM9rMaewWpDyGPla/vLzi7InCFea7o3EX2VoNsQ=
Subject key identifier: 88:F9:D3:73:DD:5E:6D:23:1A:A1:F4:BA:90:3A:0F:8B:86:D0:6E:FD
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01A0D27CE85FD1ABFB7FEA3A88853CA26E6F
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/iPnTc91ebSMaofS6kDoPi4bQbv0.roa
Signing time: Thu 24 Sep 2026 08:16:36 +0000
ROA not before: Thu 24 Sep 2026 08:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.0.9.0/24 maxlen: 24
37.0.13.0/24 maxlen: 24
37.0.14.0/24 maxlen: 24
37.0.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:7c:e8:5f:d1:ab:fb:7f:ea:3a:88:85:3c:a2:6e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Sep 24 08:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88f9d373dd5e6d231aa1f4ba903a0f8b86d06efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:7d:4d:24:0b:82:c7:45:81:05:82:d0:00:
14:4c:c1:b9:96:fa:ec:47:30:2c:05:d7:f4:3d:b1:
3b:44:61:5b:40:59:0d:1c:0c:27:65:3f:29:91:7c:
5e:c6:d2:d1:93:e1:0f:e7:fc:b5:1d:b9:6b:60:c1:
59:a9:ae:a8:66:7f:d8:97:a0:14:78:04:1b:f0:99:
38:2d:68:22:73:71:99:55:66:c4:d4:4e:ce:e9:af:
8c:ef:b6:e0:25:ce:95:ae:f4:a2:f7:8f:bb:f7:bf:
1b:d9:40:34:48:98:03:eb:eb:3a:98:9c:5f:c0:09:
ea:59:33:29:18:b5:2e:c6:90:d6:da:40:e3:67:ad:
7a:7c:44:44:b6:e1:1e:46:ec:be:40:dd:c5:2f:b2:
2f:ae:7c:de:41:58:60:e4:54:b3:b2:09:c2:c8:a8:
c2:1a:94:5a:30:da:e4:65:6e:8d:ab:8e:d1:f3:92:
f0:f8:9b:6e:09:09:87:c5:0e:03:87:b0:36:dd:fa:
a4:49:ac:16:7b:67:af:b2:3e:05:ff:fa:e7:46:9d:
7e:04:c3:29:32:97:26:b8:62:15:c5:26:2a:9f:ee:
6b:8e:66:8d:06:6e:6d:66:fb:05:03:65:ee:92:a8:
0a:78:97:fa:59:98:a0:88:38:15:a3:dd:89:69:90:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F9:D3:73:DD:5E:6D:23:1A:A1:F4:BA:90:3A:0F:8B:86:D0:6E:FD
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/iPnTc91ebSMaofS6kDoPi4bQbv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.9.0/24
37.0.13.0-37.0.15.255
Signature Algorithm: sha256WithRSAEncryption
68:a3:30:d5:a7:94:b1:03:80:97:b8:7b:f9:df:92:f3:bd:51:
2a:00:ee:5e:fe:15:68:f7:38:57:ea:c8:14:29:c7:14:6f:66:
38:f5:61:fe:43:62:63:59:86:21:57:b6:10:2b:09:bf:df:62:
84:2c:f7:95:59:cc:f8:41:0f:e9:0a:86:cd:3b:f2:d4:aa:7f:
ee:a4:c2:df:30:fd:34:1b:ef:a1:4a:98:ef:9a:1e:fb:76:bc:
04:cf:58:7b:31:9f:86:47:d7:49:9c:7a:25:ae:01:07:10:af:
1f:8e:4a:ae:84:d0:c3:5d:c4:86:c2:e3:b0:f1:ae:08:79:1a:
e3:73:30:cf:38:05:c1:f9:d9:bf:1e:86:af:ff:6a:23:ef:1b:
36:75:af:40:f4:2e:a5:fa:2b:1f:8f:44:91:74:55:8c:30:e6:
73:6b:47:ca:4b:27:d0:35:29:5c:81:ef:c7:01:28:87:bf:49:
e4:2b:65:58:67:a4:c1:08:d6:01:16:f2:99:8e:9e:d6:49:2b:
92:9b:5b:a5:18:dc:e5:24:c5:a5:e7:8e:5c:98:78:27:49:18:
42:62:70:0d:f8:59:bd:b7:69:2e:f3:11:6f:38:c7:46:de:c4:
a8:77:b5:c4:48:b8:0e:b4:e8:39:67:17:d6:30:0a:c8:ea:3a:
1a:fb:2a:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:45:53 2026 by rpki-client