Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jVdBjO3vMHoXPhDFrOpXITDpD5s.roa
File: jVdBjO3vMHoXPhDFrOpXITDpD5s.roa (raw, json)
Hash identifier: Y+h1B6f1tcx/El2spy/K1jpdsFQDpDv6vBPWKGDsb0E=
Subject key identifier: 8D:57:41:8C:ED:EF:30:7A:17:3E:10:C5:AC:EA:57:21:30:E9:0F:9B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019D7B5FAAFE39345F6C6C0D2FC270099A01
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jVdBjO3vMHoXPhDFrOpXITDpD5s.roa
Signing time: Sat 11 Apr 2026 07:09:20 +0000
ROA not before: Sat 11 Apr 2026 07:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216344
IP address blocks: 37.32.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:5f:aa:fe:39:34:5f:6c:6c:0d:2f:c2:70:09:9a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Apr 11 07:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d57418cedef307a173e10c5acea572130e90f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:88:2f:08:cd:c4:19:e6:d0:ce:e1:ab:24:
c8:0a:60:12:d7:f3:98:6e:c3:02:f8:09:77:a2:b2:
4a:5a:eb:47:17:86:44:f6:4d:a2:09:1f:00:cc:23:
e6:11:a3:59:d9:d9:f9:0c:16:53:e9:fe:19:93:4a:
f9:9f:ac:69:78:c1:3a:c9:b0:d3:1e:17:6e:4a:c7:
46:93:a1:ee:e2:32:5d:dc:26:88:3c:d5:fa:1c:d5:
ba:61:e4:cc:eb:e2:d3:25:01:f0:50:3d:75:4e:e2:
ab:5a:d1:6a:0f:65:bc:3f:38:87:04:09:2a:7c:bf:
c5:49:83:53:08:c5:57:e9:4b:f0:d4:9d:70:a6:0d:
57:cc:0c:50:e0:34:57:9f:ee:ad:f9:28:b1:97:12:
7d:e3:49:c0:a7:d8:e9:2f:e7:72:fe:ed:87:57:77:
7a:41:43:a2:75:1b:8f:98:e7:34:86:0c:94:e8:04:
06:44:73:cd:44:d7:3d:cf:4e:d2:a0:fd:63:b1:fd:
86:da:75:63:6e:a1:87:cf:0d:a5:b5:d9:7a:0f:c4:
c0:fc:c8:9c:1f:c2:f5:51:f2:fe:31:b1:c3:47:4a:
54:34:07:fc:b5:97:77:3b:02:a3:6e:7a:58:90:ae:
7e:91:f2:d7:b2:dc:61:34:e7:48:cd:4c:db:b9:3e:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:41:8C:ED:EF:30:7A:17:3E:10:C5:AC:EA:57:21:30:E9:0F:9B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jVdBjO3vMHoXPhDFrOpXITDpD5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:02:98:5b:1a:7f:44:61:55:56:80:6f:d9:7f:9f:cd:25:e3:
66:5d:0d:26:c1:24:69:8f:16:07:4c:9b:59:e2:25:a8:7c:9c:
73:d0:c5:94:bf:de:c6:03:57:24:38:06:e1:22:fe:be:ca:a9:
0e:41:c4:bb:ca:a9:1a:bd:d9:76:46:a9:cb:f2:85:c7:88:99:
ba:21:67:45:25:2a:c0:6b:6e:8b:03:95:81:77:fa:39:0f:a0:
93:b8:70:73:0d:c8:b2:e4:da:e8:b0:a4:56:85:fa:2a:47:16:
1e:8d:24:2d:9b:f1:b4:c9:80:70:7b:38:2f:c5:83:6f:92:d2:
ef:e9:bf:2d:fc:e9:74:dd:ee:63:38:09:aa:42:f1:bf:fc:4f:
12:7b:4c:3d:d7:78:48:09:e8:63:a8:ac:71:20:97:23:0b:5d:
93:02:84:69:5b:19:6e:fc:38:d0:e9:61:b3:ea:b7:2a:6e:56:
db:36:e2:2d:70:75:df:4c:56:fd:ef:d1:8d:a4:97:c6:69:e2:
44:3d:95:b4:32:21:b5:04:81:82:3a:4c:c1:a3:8a:97:ef:81:
8e:7f:03:d4:c9:32:4c:56:51:d3:76:ad:2e:01:df:9f:31:ff:
47:c6:d7:2a:0c:e8:cc:22:46:84:d4:07:ab:24:bd:3e:cd:9f:
30:b1:71:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ17X6r+OTRfbGwNL8JwCZoBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwNDExMDcwOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDU3NDE4Y2VkZWYzMDdhMTczZTEwYzVhY2VhNTcyMTMwZTkwZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQGILwjNxBnm0M7hqyTICmAS1/OY
bsMC+Al3orJKWutHF4ZE9k2iCR8AzCPmEaNZ2dn5DBZT6f4Zk0r5n6xpeME6ybDT
HhduSsdGk6Hu4jJd3CaIPNX6HNW6YeTM6+LTJQHwUD11TuKrWtFqD2W8PziHBAkq
fL/FSYNTCMVX6Uvw1J1wpg1XzAxQ4DRXn+6t+SixlxJ940nAp9jpL+dy/u2HV3d6
QUOidRuPmOc0hgyU6AQGRHPNRNc9z07SoP1jsf2G2nVjbqGHzw2ltdl6D8TA/Mic
H8L1UfL+MbHDR0pUNAf8tZd3OwKjbnpYkK5+kfLXstxhNOdIzUzbuT700QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI1XQYzt7zB6Fz4QxazqVyEw6Q+bMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvalZkQmpPM3ZNSG9YUGhERnJPcFhJVERwRDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSAuMA0G
CSqGSIb3DQEBCwUAA4IBAQClAphbGn9EYVVWgG/Zf5/NJeNmXQ0mwSRpjxYHTJtZ
4iWofJxz0MWUv97GA1ckOAbhIv6+yqkOQcS7yqkavdl2RqnL8oXHiJm6IWdFJSrA
a26LA5WBd/o5D6CTuHBzDciy5NrosKRWhfoqRxYejSQtm/G0yYBwezgvxYNvktLv
6b8t/Ol03e5jOAmqQvG//E8Se0w913hICehjqKxxIJcjC12TAoRpWxlu/DjQ6WGz
6rcqblbbNuItcHXfTFb979GNpJfGaeJEPZW0MiG1BIGCOkzBo4qX74GOfwPUyTJM
VlHTdq0uAd+fMf9HxtcqDOjMIkaE1AerJL0+zZ8wsXE6
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:29 2026 by rpki-client