Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/SMUfV1VgX4lxkWggtCXTGrpS4_I.roa
File: SMUfV1VgX4lxkWggtCXTGrpS4_I.roa (raw, json)
Hash identifier: cOixoxLuG6f3VZBKrEwI4Ozi+XfMy1PvxOAoqMauztM=
Subject key identifier: 48:C5:1F:57:55:60:5F:89:71:91:68:20:B4:25:D3:1A:BA:52:E3:F2
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 019F4747026E03189FA5D40806AB0364FDA4
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/SMUfV1VgX4lxkWggtCXTGrpS4_I.roa
Signing time: Thu 09 Jul 2026 14:27:43 +0000
ROA not before: Thu 09 Jul 2026 14:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41608
IP address blocks: 88.151.32.0/22 maxlen: 24
88.151.32.0/24 maxlen: 24
88.151.33.0/24 maxlen: 24
88.151.34.0/24 maxlen: 24
88.151.35.0/24 maxlen: 24
185.213.172.0/23 maxlen: 23
185.213.172.0/24 maxlen: 24
185.213.173.0/24 maxlen: 24
185.213.174.0/24 maxlen: 24
185.213.175.0/24 maxlen: 24
195.170.165.0/24 maxlen: 24
195.170.167.0/24 maxlen: 24
195.170.172.0/24 maxlen: 24
2a0b:8bc0::/29 maxlen: 29
2a0b:8bc0:1::/48 maxlen: 64
2a0b:8bc0:2::/48 maxlen: 64
2a0b:8bc0:3::/48 maxlen: 64
2a0b:8bc0:4::/48 maxlen: 64
2a0b:8bc0:9999::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:47:02:6e:03:18:9f:a5:d4:08:06:ab:03:64:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jul 9 14:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48c51f5755605f8971916820b425d31aba52e3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:95:9f:20:04:70:a5:2f:b9:13:b5:ef:62:
78:15:59:30:b9:ea:63:de:f6:c7:97:45:b5:aa:90:
a5:7e:ac:06:97:9b:82:a6:37:fa:bd:9d:52:16:c9:
d7:50:b2:10:e4:75:a7:da:28:c3:8a:93:13:be:b6:
30:b8:f2:9e:ac:3b:33:93:2a:28:82:cb:30:b1:36:
10:6a:64:4d:3e:ad:3c:0f:0a:aa:cc:d1:32:33:61:
d7:6e:f6:4b:88:1d:48:d3:b8:2b:f1:a2:98:24:62:
f8:c3:53:ef:89:80:b4:3d:db:74:70:51:11:05:00:
3f:79:2c:f1:1e:f2:71:2d:bb:c4:84:10:ff:4c:54:
98:9a:1f:ee:6a:ca:0b:33:00:b7:65:91:4a:83:73:
47:73:43:51:8f:b4:52:86:b3:a2:38:a6:1b:aa:4e:
8b:c4:1d:7f:de:a9:88:2f:6a:bd:89:40:4c:2d:c6:
6f:46:53:9e:f9:a9:90:cf:2f:84:c5:03:58:20:19:
69:7e:67:b1:4e:90:8c:ca:26:ec:87:e6:79:82:90:
d1:2b:55:17:c7:c6:3b:ae:0a:47:f8:dd:9c:82:95:
86:32:2e:d7:07:39:2b:be:e9:2e:48:fd:83:77:85:
77:17:42:d3:d6:12:49:a1:09:27:fd:b8:1f:05:6a:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:1F:57:55:60:5F:89:71:91:68:20:B4:25:D3:1A:BA:52:E3:F2
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/SMUfV1VgX4lxkWggtCXTGrpS4_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.32.0/22
185.213.172.0/22
195.170.165.0/24
195.170.167.0/24
195.170.172.0/24
IPv6:
2a0b:8bc0::/29
Signature Algorithm: sha256WithRSAEncryption
15:25:59:42:3d:cb:c8:1b:2e:c7:e1:f4:96:51:30:59:46:e7:
1f:c4:1d:4b:b0:9e:7b:44:41:ab:aa:78:88:c3:e9:65:01:0d:
c3:a4:78:d5:b1:da:71:45:2b:6d:c7:af:4f:30:2d:3e:ab:97:
84:1f:e6:0d:55:17:42:22:8f:04:6b:68:16:91:e1:11:24:9f:
f7:14:49:8d:e5:cf:82:3c:da:ad:23:d6:f1:c9:b0:1c:5f:7f:
b8:89:fc:4f:e5:b8:15:c7:99:5d:34:c1:22:c0:b8:5c:c6:a2:
4d:98:54:82:d1:83:ba:28:5f:f7:48:ee:39:ed:2f:c0:3f:84:
56:fb:0b:aa:79:78:0e:66:57:6f:93:29:43:3d:c4:df:9f:91:
ca:76:a3:25:2d:f2:41:33:05:66:d6:86:1f:6b:79:8d:76:a3:
d4:0e:af:4a:97:a6:45:42:91:50:53:07:32:d0:cb:f7:b7:e0:
54:2c:15:64:61:99:ab:17:cc:10:a7:c0:9f:21:c4:cb:fd:26:
14:96:8e:8a:28:53:eb:29:d5:ba:b5:79:72:55:b3:a5:db:07:
d5:e6:4b:81:2d:46:72:6e:45:ef:3f:bf:6e:f2:e2:99:61:59:
4a:0a:49:9d:13:9c:e2:eb:52:c9:08:f2:16:73:be:77:5e:f2:
4d:b0:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:14:38 2026 by rpki-client