Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/OVRZqerAEA6FdBHYTHLhizGh3Lk.roa
File: OVRZqerAEA6FdBHYTHLhizGh3Lk.roa (raw, json)
Hash identifier: W21lAIvc4nqkkHrKrS73psgIVNPGbE549XUQirrqwIg=
Subject key identifier: 39:54:59:A9:EA:C0:10:0E:85:74:11:D8:4C:72:E1:8B:31:A1:DC:B9
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019EAC97371711BE558D43F1C82E44B50A25
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/OVRZqerAEA6FdBHYTHLhizGh3Lk.roa
Signing time: Tue 09 Jun 2026 13:34:11 +0000
ROA not before: Tue 09 Jun 2026 13:34:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43362
IP address blocks: 37.153.64.0/22 maxlen: 22
37.153.64.0/23 maxlen: 23
37.153.68.0/23 maxlen: 23
37.153.70.0/23 maxlen: 23
37.153.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:97:37:17:11:be:55:8d:43:f1:c8:2e:44:b5:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Jun 9 13:34:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=395459a9eac0100e857411d84c72e18b31a1dcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:6f:43:6d:2e:c5:23:e1:21:ed:78:a8:38:
03:d5:4e:31:4f:55:4b:8c:15:b7:87:55:d9:7e:69:
90:da:2b:6a:00:18:9f:5b:98:e3:5b:0b:87:f8:6d:
0c:77:7a:28:48:4b:ac:8e:a0:bf:8e:26:7c:fb:9b:
91:46:4f:50:1a:52:1c:13:d2:3f:b3:34:32:a2:38:
03:0c:91:7b:c8:d1:90:28:a5:33:3b:4a:fc:e9:83:
fb:8c:c3:ff:ce:4f:c3:99:66:91:a6:4c:4b:05:7b:
6c:f8:73:d6:5f:26:2a:38:ea:67:db:e3:a2:ef:43:
6f:1f:07:21:98:d6:f0:c1:be:d7:50:0d:18:96:ff:
e3:5d:be:8b:b4:fe:95:4c:94:1c:e9:8e:9c:0a:11:
28:7c:61:74:96:1a:28:a0:75:d4:b1:b2:e5:82:f0:
d9:9b:6b:c4:16:df:e0:92:43:35:0f:80:d7:e4:ff:
74:5d:eb:4c:b8:c9:f6:b6:29:be:b8:b9:d3:51:a1:
c9:97:b9:a6:6a:0d:4b:ba:20:06:00:c7:08:a1:3b:
26:47:65:33:17:cc:50:6c:26:22:7a:83:7b:50:24:
26:e7:66:3c:45:8e:4e:4b:f1:80:ae:97:5e:7f:38:
95:37:6c:6f:c7:d2:7b:2b:8d:bd:6b:16:da:28:6e:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:59:A9:EA:C0:10:0E:85:74:11:D8:4C:72:E1:8B:31:A1:DC:B9
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/OVRZqerAEA6FdBHYTHLhizGh3Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.64.0/21
Signature Algorithm: sha256WithRSAEncryption
11:57:cd:93:d2:79:05:24:2b:72:e0:19:f5:17:1b:bc:2c:20:
7a:5f:80:87:9a:3d:b1:84:6d:68:7b:bd:0c:0b:79:63:ba:7a:
0f:22:50:fb:49:8b:81:55:a3:ea:68:12:7f:5c:7b:52:ea:80:
b5:91:06:fc:51:fd:1d:9c:78:c7:fb:bc:91:e6:bc:1e:02:45:
21:f2:0c:01:97:8f:d1:a7:c6:68:2b:d1:ff:00:48:d5:21:b6:
66:dd:c3:59:9c:96:dd:7b:1c:51:03:cb:f5:27:47:3a:52:e3:
84:52:63:77:ce:3b:76:3d:22:9b:b4:12:47:de:7f:dd:94:78:
3f:f8:a3:6b:ac:16:b1:39:86:e1:11:42:55:b0:7c:cc:6a:e9:
85:de:17:51:0e:6a:0c:1e:49:3b:5c:16:b4:15:70:cd:f3:99:
4a:fd:85:a3:c9:7c:98:60:c5:1f:9e:6a:2e:46:65:f8:97:f5:
0e:79:89:ee:f9:12:6d:67:92:ba:01:f1:82:fc:bf:73:09:df:
0d:6c:48:99:db:94:e0:3a:24:b3:88:b1:c1:7b:98:30:bb:73:
4b:19:00:3f:ea:86:5d:a3:1b:29:bc:24:19:0f:01:bf:ee:ba:
0a:71:06:2c:12:81:00:b5:26:c5:b0:55:26:d1:e5:b7:67:3a:
09:aa:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:58 2026 by rpki-client