Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/h37Ma_jDL67Y4SGxQzdtg6FsgA4.roa
File: h37Ma_jDL67Y4SGxQzdtg6FsgA4.roa (raw, json)
Hash identifier: GKjbwNQvNj09wzTdJDEoXyV8IVLp5NDpGRUuVbT5bO0=
Subject key identifier: 87:7E:CC:6B:F8:C3:2F:AE:D8:E1:21:B1:43:37:6D:83:A1:6C:80:0E
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019FA8F630556721E036F2949655470A01E9
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/h37Ma_jDL67Y4SGxQzdtg6FsgA4.roa
Signing time: Tue 28 Jul 2026 13:42:14 +0000
ROA not before: Tue 28 Jul 2026 13:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 94.231.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:f6:30:55:67:21:e0:36:f2:94:96:55:47:0a:01:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jul 28 13:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=877ecc6bf8c32faed8e121b143376d83a16c800e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:1e:d7:5f:35:d7:74:3f:37:f4:d1:64:8c:
62:fc:73:9a:b9:72:9f:fd:84:cf:ce:99:5d:fb:ca:
fe:9b:f6:f0:a7:60:7e:3d:81:25:04:c9:81:85:47:
8d:53:56:f1:ef:42:eb:c6:9e:f0:38:2c:b4:67:77:
e6:ac:7b:44:7b:b3:21:28:d0:f5:8d:a5:37:b2:5f:
62:b2:48:33:29:21:6c:24:81:b9:49:e0:b4:0f:28:
f6:88:bc:a3:91:12:86:7d:07:ae:aa:17:41:20:79:
42:be:75:aa:2d:50:2b:77:06:d5:a4:23:b9:7f:3e:
a3:de:d8:a8:33:5d:3e:e3:bc:c5:4d:8a:83:96:ab:
0c:0b:89:22:7b:82:9f:65:12:05:e7:eb:91:0e:23:
d1:24:c0:e1:8a:ed:0e:d7:fd:19:97:59:38:86:53:
31:a5:94:f2:d0:63:a5:8c:c1:4c:90:25:c8:4e:52:
0b:c4:69:a1:04:ff:30:3a:df:52:35:a9:8e:62:89:
57:01:dc:98:36:04:15:a0:cb:82:a4:56:e9:a9:c7:
3d:7f:2f:9c:9b:44:d1:23:a3:60:5e:b4:b2:07:71:
95:b0:85:92:41:76:5d:12:c4:80:1f:fc:85:b1:6f:
67:03:74:68:e6:a5:15:e3:e1:05:37:e0:86:9c:e1:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7E:CC:6B:F8:C3:2F:AE:D8:E1:21:B1:43:37:6D:83:A1:6C:80:0E
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/h37Ma_jDL67Y4SGxQzdtg6FsgA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.237.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0f:da:27:07:2b:c8:8b:63:2e:3a:6f:5e:f8:d7:ad:da:0f:
53:77:cf:33:53:16:24:93:78:d0:f1:e8:00:6d:8b:60:d3:fe:
a1:4d:17:2d:3b:3f:43:87:cc:ba:fc:3f:c8:07:68:3c:a0:a7:
2e:33:2b:d3:e3:22:82:0e:98:cc:af:7a:39:7a:6f:94:dd:2a:
0c:dd:38:fb:5a:01:ed:1a:66:b3:8d:6d:42:23:e0:4a:2f:30:
dc:39:c6:80:f2:2d:02:9a:a4:20:61:57:f6:98:f8:e2:3c:db:
df:57:40:b9:1c:48:85:b6:49:9a:72:5e:32:23:e9:c2:43:12:
b1:9b:7a:2b:8c:28:30:21:bb:86:bc:47:99:ab:af:32:f4:36:
6d:c6:74:e4:8a:dc:6a:1d:fd:cd:3a:e2:d7:a0:99:c0:30:ab:
ce:4a:5c:c1:09:c6:15:c0:b4:e6:f7:43:fb:c5:d4:bc:2f:16:
f4:04:11:76:de:c7:c4:32:09:7f:02:ea:ea:49:ce:a3:9c:e2:
56:6a:22:ab:51:1d:e0:ab:65:1f:62:ab:4f:f1:3a:8b:7e:ba:
44:ec:1b:4b:f6:f5:87:1f:3f:03:3c:48:82:e8:68:ae:c9:b1:
f3:e2:aa:97:33:ab:e0:d7:f8:4b:d9:36:22:77:d3:cf:a4:b3:
e8:6f:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:23 2026 by rpki-client