Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/uET18B3fP6TF53ydN0z1GoexerY.roa
File: uET18B3fP6TF53ydN0z1GoexerY.roa (raw, json)
Hash identifier: oCQ17pmu1C70yLpyS1j2FgjOr16VKoo4EWEK/xo0TJk=
Subject key identifier: B8:44:F5:F0:1D:DF:3F:A4:C5:E7:7C:9D:37:4C:F5:1A:87:B1:7A:B6
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01A09F93B739434358E116B820B45123B5AE
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/uET18B3fP6TF53ydN0z1GoexerY.roa
Signing time: Mon 14 Sep 2026 11:00:53 +0000
ROA not before: Mon 14 Sep 2026 11:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197309
IP address blocks: 37.230.137.0/24 maxlen: 24
37.230.162.0/24 maxlen: 24
37.230.210.0/24 maxlen: 24
37.230.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:93:b7:39:43:43:58:e1:16:b8:20:b4:51:23:b5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Sep 14 11:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b844f5f01ddf3fa4c5e77c9d374cf51a87b17ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:b5:b8:96:da:27:43:3d:ff:27:39:70:07:
c6:6a:ab:8f:b6:ee:fb:b2:40:ac:fd:a6:fa:4e:1b:
1b:39:25:a3:48:c6:ac:83:10:f7:d4:01:e8:3f:89:
a0:7d:48:0d:5c:17:a6:7d:28:e0:d2:85:cd:af:a5:
d6:7d:a1:ec:c2:af:95:69:51:0b:2b:40:50:b8:76:
a0:97:fc:72:25:25:23:e5:e2:db:82:ce:20:fd:cf:
a1:ba:51:9f:4a:6d:eb:67:d7:4f:b6:cf:27:be:0a:
cd:67:2a:c6:94:b3:5c:cd:5f:1f:60:c1:f4:f8:f1:
d2:95:ff:d0:bf:96:8c:e6:20:76:79:de:f6:89:76:
7c:e4:b2:06:e6:a9:dc:34:02:9c:1c:9c:9d:f4:f7:
88:8a:0e:3d:73:7b:0f:f8:37:7e:32:c0:15:9c:41:
c1:18:a0:fb:de:b7:d5:ac:cf:cd:dc:08:b6:89:b1:
f0:3d:a0:a2:13:32:a3:38:30:15:8f:18:10:00:24:
d9:49:a9:6c:fe:65:e1:21:1d:7a:c7:d1:2f:88:b4:
15:2d:95:75:49:70:6d:2e:c2:53:e2:ea:dd:c5:43:
ba:31:fb:d9:d9:5b:d8:9b:05:31:b1:9c:fd:b5:b5:
11:53:0d:c3:60:68:86:72:f2:71:78:78:a5:b4:23:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:F5:F0:1D:DF:3F:A4:C5:E7:7C:9D:37:4C:F5:1A:87:B1:7A:B6
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/uET18B3fP6TF53ydN0z1GoexerY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.137.0/24
37.230.162.0/24
37.230.210.0/24
37.230.228.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b9:af:76:9a:77:69:c5:e5:71:4f:fa:6f:32:5b:18:44:c7:
e1:11:68:82:41:56:46:f2:0a:4d:70:ce:fd:a2:3e:b4:8f:02:
19:4e:08:de:24:9c:eb:49:72:f2:28:5c:c0:1c:78:a0:b2:d2:
57:25:1e:92:fa:58:7b:7f:61:46:f3:ad:6c:98:9e:1d:32:1c:
a8:e1:3b:cd:4c:05:05:c7:7b:72:96:06:66:85:96:b6:63:94:
4d:e4:b9:7a:ba:39:d6:cf:93:3e:7e:f9:ba:47:5f:ed:bf:95:
b3:5a:ae:9a:88:9e:b0:61:31:86:ac:9e:c6:f7:58:46:b4:6f:
c8:c6:71:15:df:0d:08:94:cb:c6:c6:c8:c2:cb:63:40:7b:74:
55:24:5a:cb:d7:e1:0e:f6:46:e2:c3:b2:c7:9a:7b:b8:d8:89:
e7:7b:52:60:d1:44:14:9f:cc:58:c3:72:85:34:58:d1:38:89:
83:d7:89:9b:f2:29:88:87:04:8b:df:21:d0:e0:7c:7a:f4:ce:
8e:ed:ea:77:1c:22:f5:1e:a6:13:a0:de:db:67:ef:9d:cb:fe:
32:0d:17:02:39:9c:64:62:9b:de:25:f5:21:d8:f5:18:4d:9a:
44:6f:97:57:80:6b:5e:ff:f2:c0:7b:7c:a5:0d:37:39:06:ec:
46:88:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:46 2026 by rpki-client