Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/1zbSrO-R5EPLaorcxYcNiQyN3i4.roa
File: 1zbSrO-R5EPLaorcxYcNiQyN3i4.roa (raw, json)
Hash identifier: jSlaVuG5yvioxNNHW15Hf2Zmbh+CJCUdDeZRZAfs7g4=
Subject key identifier: D7:36:D2:AC:EF:91:E4:43:CB:6A:8A:DC:C5:87:0D:89:0C:8D:DE:2E
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 019B7E375940FC0B6514DB34DEEFFF3EBF7F
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/1zbSrO-R5EPLaorcxYcNiQyN3i4.roa
Signing time: Fri 02 Jan 2026 10:18:35 +0000
ROA not before: Fri 02 Jan 2026 10:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8867
IP address blocks: 147.237.0.0/16 maxlen: 16
147.237.0.0/24 maxlen: 24
147.237.1.0/24 maxlen: 24
147.237.2.0/24 maxlen: 24
147.237.3.0/24 maxlen: 24
147.237.4.0/24 maxlen: 24
147.237.5.0/24 maxlen: 24
147.237.6.0/24 maxlen: 24
147.237.7.0/24 maxlen: 24
147.237.8.0/24 maxlen: 24
147.237.9.0/24 maxlen: 24
147.237.10.0/24 maxlen: 24
147.237.11.0/24 maxlen: 24
147.237.12.0/24 maxlen: 24
147.237.13.0/24 maxlen: 24
147.237.14.0/24 maxlen: 24
147.237.15.0/24 maxlen: 24
147.237.69.0/24 maxlen: 24
147.237.70.0/24 maxlen: 24
147.237.71.0/24 maxlen: 24
147.237.72.0/24 maxlen: 24
147.237.73.0/24 maxlen: 24
147.237.74.0/24 maxlen: 24
147.237.76.0/24 maxlen: 24
147.237.77.0/24 maxlen: 24
147.237.80.0/24 maxlen: 24
147.237.248.0/24 maxlen: 24
2001:678:a3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:59:40:fc:0b:65:14:db:34:de:ef:ff:3e:bf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Jan 2 10:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d736d2acef91e443cb6a8adcc5870d890c8dde2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:db:72:33:00:02:ea:7f:9c:44:99:2b:e3:
e2:67:be:3c:85:37:9b:b5:73:c6:73:c6:0b:fe:60:
a9:74:da:85:54:31:1a:61:ac:ff:ca:96:32:8a:9c:
39:3f:de:18:49:37:1b:0d:f6:63:14:75:d8:d0:a7:
03:21:1a:67:5c:7b:20:0e:85:8b:de:3c:13:60:83:
a6:5c:ac:ed:71:80:a4:fb:16:79:0d:d6:1c:56:44:
eb:c3:48:94:f1:b6:aa:08:b1:85:6f:60:7e:ff:34:
92:ab:ce:c7:1a:9f:f5:72:0d:ce:63:3f:b1:cd:aa:
e2:76:5b:55:69:8c:dc:a8:c0:ba:60:0e:14:02:8d:
90:3d:99:7a:fa:c6:c8:23:08:5c:15:05:85:76:0b:
47:63:f6:db:c6:ec:fb:cf:68:2d:32:c5:ec:4d:fb:
2e:5c:30:79:08:c5:58:ce:b7:64:fe:1a:d0:e8:89:
87:c4:ff:c8:72:b3:3f:d2:41:3d:9f:91:ee:d9:69:
b7:25:23:b6:26:69:c3:b1:17:c3:1e:3d:28:0f:0d:
fc:9e:f7:f3:3a:00:71:22:3f:1b:bd:7d:b4:d2:d9:
17:2a:79:40:6a:c8:c0:43:3e:e0:ea:8a:10:80:68:
dc:96:8e:e6:aa:72:db:a1:ce:6e:ee:ca:22:34:41:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:D2:AC:EF:91:E4:43:CB:6A:8A:DC:C5:87:0D:89:0C:8D:DE:2E
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/1zbSrO-R5EPLaorcxYcNiQyN3i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.237.0.0/16
IPv6:
2001:678:a3c::/48
Signature Algorithm: sha256WithRSAEncryption
28:20:2c:06:25:ed:eb:f2:b3:7b:de:1f:3a:a8:37:09:e7:91:
82:4d:23:bb:5c:d4:84:0c:5b:bf:73:07:08:58:7d:9d:13:2d:
5b:75:f1:21:84:0f:b5:fe:00:25:72:4a:d0:d5:97:b1:35:82:
7b:ab:c6:f1:63:8c:38:f4:24:88:a3:38:a1:a8:77:bd:95:d4:
60:26:65:e7:8f:e5:d1:c0:86:8b:8c:a4:6a:73:2b:68:e4:b0:
6a:6a:c9:05:67:0f:3d:7c:f7:ab:3d:39:b8:75:43:eb:c8:6e:
08:01:99:94:b9:f5:fc:6e:0b:1c:40:fa:bd:63:59:b0:4f:cc:
65:81:3b:bf:5b:73:6c:1b:30:b1:c5:66:22:2b:c0:b9:ef:6d:
c1:06:c6:e8:f4:01:28:51:35:20:fe:e2:8e:68:8b:00:f0:ba:
ce:05:a2:ac:2a:d5:f4:c5:17:5a:58:97:b3:60:17:ad:f0:74:
9f:32:d6:3d:3b:be:56:fa:39:75:8f:34:7f:7a:db:c3:11:24:
f6:4a:c8:de:05:e7:fc:6f:89:e9:80:a9:69:3d:9c:86:cb:06:
df:64:c2:e2:f0:cd:1f:4e:45:55:f7:de:ae:a2:ce:79:a8:c7:
9b:b4:86:86:8f:04:95:69:ac:40:87:09:52:c1:2d:57:db:e3:
2b:52:db:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:19 2026 by rpki-client