Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/e44guLfP35rbMYmq1et0-pJl0Xg.roa
File: e44guLfP35rbMYmq1et0-pJl0Xg.roa (raw, json)
Hash identifier: xefm7hUzpQcUW8PNo6qYp/Qx0pr2/QhPaTWWMRnSDm8=
Subject key identifier: 7B:8E:20:B8:B7:CF:DF:9A:DB:31:89:AA:D5:EB:74:FA:92:65:D1:78
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019E9870317AB05616DD0CA8398FFE4A4808
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/e44guLfP35rbMYmq1et0-pJl0Xg.roa
Signing time: Fri 05 Jun 2026 15:39:09 +0000
ROA not before: Fri 05 Jun 2026 15:39:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210079
IP address blocks: 37.153.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:70:31:7a:b0:56:16:dd:0c:a8:39:8f:fe:4a:48:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Jun 5 15:39:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b8e20b8b7cfdf9adb3189aad5eb74fa9265d178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:f3:8e:4c:d2:f9:55:13:e7:97:bb:1e:57:
19:89:ca:b8:dc:28:2c:e9:be:e9:f0:dc:a4:38:21:
43:19:fc:3e:93:05:45:e7:63:b5:08:8d:16:cb:e6:
f0:2f:d0:ae:15:88:e7:3f:ef:4d:f3:a8:97:ce:e4:
45:5f:d1:16:2d:7c:0d:64:0a:c2:e5:e1:fe:e1:90:
19:d3:ba:e1:ec:2f:ff:fa:01:37:09:10:d6:f4:c0:
aa:3c:47:18:f9:1e:ab:b9:84:54:a3:95:85:4a:58:
1c:c0:95:5e:14:06:4a:a6:3b:1e:9f:e2:11:ee:66:
2c:ac:19:33:83:5d:18:09:f3:fe:d2:9d:bb:90:a5:
36:4f:77:df:f9:e1:27:94:c0:52:6c:5b:f8:48:da:
47:b9:98:4f:a2:2f:a2:fd:65:f9:e7:6b:ef:ca:fb:
eb:99:65:67:90:be:a5:6e:e9:c9:85:c0:9b:81:29:
2b:17:fe:6a:ad:76:79:20:1c:f5:73:bf:5d:fe:95:
86:4e:00:5c:9c:b2:75:30:a4:d9:ed:61:ef:64:ca:
16:41:c7:2d:dd:ae:b8:1c:fb:5d:7b:45:0e:b2:9a:
13:55:70:ae:6c:04:30:42:35:d3:5e:1d:7d:21:cf:
1e:cd:02:7c:23:cc:13:4a:ed:4c:44:cc:8f:e6:d7:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8E:20:B8:B7:CF:DF:9A:DB:31:89:AA:D5:EB:74:FA:92:65:D1:78
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/e44guLfP35rbMYmq1et0-pJl0Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.71.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6e:0b:38:c9:0e:7b:8c:b0:a8:c4:e3:b1:f3:36:2a:27:af:
1c:09:8c:37:d4:08:ea:3d:4c:c1:b4:a4:59:99:09:9b:42:a5:
59:e8:82:5a:8e:d8:57:90:0e:6e:a5:10:e9:20:03:32:84:c6:
47:e0:a1:ed:8f:d9:90:cb:dc:f4:cc:78:04:cb:4e:14:b4:f5:
40:74:4c:49:f3:78:60:e0:d1:a1:27:b3:68:dc:8b:2e:16:e4:
0a:19:04:1f:74:b4:cc:cd:5d:6e:a5:18:44:32:70:2f:59:fc:
51:90:c5:de:e4:25:2a:6f:a4:ed:c5:86:b6:3e:7d:dd:56:62:
44:e9:bd:05:cb:4e:5b:2f:d0:95:22:c3:53:b7:33:52:e1:e3:
38:0c:94:77:2f:2f:79:ec:ee:9a:26:a8:c3:91:10:85:1a:eb:
5f:78:2e:b3:91:5b:81:62:72:90:74:8e:ef:d9:18:d1:92:a8:
33:69:43:9b:c4:e2:9f:62:9e:1f:72:ab:4e:cb:ce:c4:25:ad:
77:16:00:78:d6:be:c2:a9:14:c5:49:57:61:cf:31:80:5e:cb:
75:c5:3a:98:1e:58:2d:d4:75:a3:4d:5f:92:6b:dc:ae:27:b3:
b3:95:6d:a8:97:86:cb:83:c8:c1:a0:7c:dc:e8:b4:a5:85:ad:
3a:41:fb:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6YcDF6sFYW3QyoOY/+SkgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTQ1OThlMjE3MzY1MDFhNzM5NDRjMTA3MTE0Yzg1MGM3
ZDhiMDkwHhcNMjYwNjA1MTUzOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjhlMjBiOGI3Y2ZkZjlhZGIzMTg5YWFkNWViNzRmYTkyNjVkMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgszzjkzS+VUT55e7HlcZicq43Cgs
6b7p8NykOCFDGfw+kwVF52O1CI0Wy+bwL9CuFYjnP+9N86iXzuRFX9EWLXwNZArC
5eH+4ZAZ07rh7C//+gE3CRDW9MCqPEcY+R6ruYRUo5WFSlgcwJVeFAZKpjsen+IR
7mYsrBkzg10YCfP+0p27kKU2T3ff+eEnlMBSbFv4SNpHuZhPoi+i/WX552vvyvvr
mWVnkL6lbunJhcCbgSkrF/5qrXZ5IBz1c79d/pWGTgBcnLJ1MKTZ7WHvZMoWQcct
3a64HPtde0UOspoTVXCubAQwQjXTXh19Ic8ezQJ8I8wTSu1MRMyP5tc/QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHuOILi3z9+a2zGJqtXrdPqSZdF4MB8GA1UdIwQY
MBaAFD3kWY4hc2UBpzlEwQcRTIUMfYsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMt
N2Q2MDhiZWUzMTY3LzEvZTQ0Z3VMZlAzNXJiTVltcTFldDAtcEpsMFhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMtN2Q2MDhiZWUzMTY3
LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZlHMA0G
CSqGSIb3DQEBCwUAA4IBAQBxbgs4yQ57jLCoxOOx8zYqJ68cCYw31AjqPUzBtKRZ
mQmbQqVZ6IJajthXkA5upRDpIAMyhMZH4KHtj9mQy9z0zHgEy04UtPVAdExJ83hg
4NGhJ7No3IsuFuQKGQQfdLTMzV1upRhEMnAvWfxRkMXe5CUqb6TtxYa2Pn3dVmJE
6b0Fy05bL9CVIsNTtzNS4eM4DJR3Ly957O6aJqjDkRCFGutfeC6zkVuBYnKQdI7v
2RjRkqgzaUObxOKfYp4fcqtOy87EJa13FgB41r7CqRTFSVdhzzGAXst1xTqYHlgt
1HWjTV+Sa9yuJ7OzlW2ol4bLg8jBoHzc6LSlha06QfuZ
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:45 2026 by rpki-client