Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aHkZcdILEbStX2lV0OAmUTvlyq0.roa
File: aHkZcdILEbStX2lV0OAmUTvlyq0.roa (raw, json)
Hash identifier: PIeIO3lzuEjiVtkfsgyiXq3bzux5FhNrY609V9vIY1E=
Subject key identifier: 68:79:19:71:D2:0B:11:B4:AD:5F:69:55:D0:E0:26:51:3B:E5:CA:AD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C1C8C721B63E986A222F5240182AD7077
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aHkZcdILEbStX2lV0OAmUTvlyq0.roa
Signing time: Mon 02 Feb 2026 04:11:32 +0000
ROA not before: Mon 02 Feb 2026 04:11:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214693
IP address blocks: 37.202.197.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:8c:72:1b:63:e9:86:a2:22:f5:24:01:82:ad:70:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 2 04:11:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68791971d20b11b4ad5f6955d0e026513be5caad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:90:fe:b1:6e:54:bb:96:87:c3:40:41:8d:
43:a6:0b:3d:00:c5:16:f4:01:9c:f2:e0:83:30:17:
fd:eb:ba:9f:18:e7:56:d7:ef:4c:5e:1d:67:0d:d9:
f1:bd:a4:98:4f:2f:9f:69:82:1c:d5:6d:f8:9a:77:
d0:af:51:72:87:0e:78:d8:bd:78:b8:69:df:e4:f3:
b8:f9:01:84:9c:c0:99:5b:fa:e1:86:1c:4b:de:e1:
ba:57:6a:9f:a1:5c:7b:c4:fd:a3:45:c6:b8:01:45:
5e:fe:a9:71:b9:0d:6a:ae:fd:e7:69:18:b6:7d:07:
76:8d:88:46:7b:f2:e3:59:b4:a0:3e:e1:be:f7:97:
f2:4d:85:b6:be:93:3b:af:e4:a1:bf:9c:4b:99:2e:
62:df:f1:e9:a0:1a:ba:33:28:61:34:2f:60:c2:99:
75:ad:3c:cf:97:31:ef:88:b9:d2:bd:be:20:5c:3a:
51:06:3d:13:7b:44:2c:34:99:74:7e:78:fa:40:1e:
b4:e0:7d:ae:02:e2:05:b7:d0:e5:f5:06:79:f9:a0:
ba:39:32:d5:57:28:f3:f5:8c:20:4a:a3:d3:3d:a1:
3c:21:82:e8:13:d3:1a:a3:0f:33:f4:58:a3:10:4d:
dc:c4:c9:3b:2d:d2:db:20:3b:3c:b3:51:77:af:7d:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:19:71:D2:0B:11:B4:AD:5F:69:55:D0:E0:26:51:3B:E5:CA:AD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aHkZcdILEbStX2lV0OAmUTvlyq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.197.0/24
151.242.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:81:38:db:9c:e5:88:57:bc:81:ed:1d:2d:bb:3b:47:f5:3d:
e2:b1:9f:41:2b:34:51:10:5d:1d:5c:ae:ff:2c:a1:2c:0a:02:
14:fa:9c:b4:44:62:94:88:c9:a8:c4:64:92:38:d8:ca:74:c9:
ed:eb:ad:cc:4b:de:bc:b8:c0:9f:51:8c:59:e2:74:7b:e8:b3:
3d:b6:be:3b:56:09:6d:ae:cd:9e:bb:05:04:b0:45:0b:74:d9:
ed:d6:cf:15:89:de:32:0b:9d:eb:4f:58:76:60:d6:f6:44:b8:
8f:f9:75:dd:b8:01:78:a2:20:4e:1a:a5:0d:c1:cb:3c:d4:64:
a5:4c:01:32:41:2c:95:62:61:77:ea:7d:da:13:a9:51:09:88:
de:4d:a5:3b:16:b1:0f:11:4c:63:a8:f7:24:18:72:42:37:56:
62:80:6f:e5:ad:d9:5f:1b:32:92:d2:be:21:57:89:c2:ae:19:
89:7a:dc:c8:9f:d4:0d:5f:56:65:f6:6b:78:94:40:e4:24:87:
86:be:b1:0b:1e:08:fa:5b:0a:d0:11:29:a4:6f:ef:11:dc:ed:
d8:a7:b2:d0:63:4c:3e:ed:0e:65:88:4e:54:c8:9e:67:27:81:
ed:b7:51:75:69:9b:3f:6a:bd:9c:f5:f3:cb:63:18:32:c2:b5:
90:3b:5a:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwcjHIbY+mGoiL1JAGCrXB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMjAyMDQxMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODc5MTk3MWQyMGIxMWI0YWQ1ZjY5NTVkMGUwMjY1MTNiZTVjYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE+Q/rFuVLuWh8NAQY1Dpgs9AMUW
9AGc8uCDMBf967qfGOdW1+9MXh1nDdnxvaSYTy+faYIc1W34mnfQr1Fyhw542L14
uGnf5PO4+QGEnMCZW/rhhhxL3uG6V2qfoVx7xP2jRca4AUVe/qlxuQ1qrv3naRi2
fQd2jYhGe/LjWbSgPuG+95fyTYW2vpM7r+Shv5xLmS5i3/HpoBq6MyhhNC9gwpl1
rTzPlzHviLnSvb4gXDpRBj0Te0QsNJl0fnj6QB604H2uAuIFt9Dl9QZ5+aC6OTLV
Vyjz9YwgSqPTPaE8IYLoE9Maow8z9FijEE3cxMk7LdLbIDs8s1F3r32RAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGh5GXHSCxG0rV9pVdDgJlE75cqtMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYUhrWmNkSUxFYlN0WDJsVjBPQW1VVHZseXEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrFAwQA
l/LCMA0GCSqGSIb3DQEBCwUAA4IBAQCrgTjbnOWIV7yB7R0tuztH9T3isZ9BKzRR
EF0dXK7/LKEsCgIU+py0RGKUiMmoxGSSONjKdMnt663MS968uMCfUYxZ4nR76LM9
tr47Vgltrs2euwUEsEULdNnt1s8Vid4yC53rT1h2YNb2RLiP+XXduAF4oiBOGqUN
wcs81GSlTAEyQSyVYmF36n3aE6lRCYjeTaU7FrEPEUxjqPckGHJCN1ZigG/lrdlf
GzKS0r4hV4nCrhmJetzIn9QNX1Zl9mt4lEDkJIeGvrELHgj6WwrQESmkb+8R3O3Y
p7LQY0w+7Q5liE5UyJ5nJ4Htt1F1aZs/ar2c9fPLYxgywrWQO1qK
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:50 2026 by rpki-client