Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/N_VLmv3fffyBQ4NvUZxzFBXfHi0.roa
File: N_VLmv3fffyBQ4NvUZxzFBXfHi0.roa (raw, json)
Hash identifier: mZfe0pxjgZw/vy5h7bZ8jXIAoF63hWiKIbu7rTvMK3w=
Subject key identifier: 37:F5:4B:9A:FD:DF:7D:FC:81:43:83:6F:51:9C:73:14:15:DF:1E:2D
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019EA17527721132DC6F3FF3A44C9581BC71
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/N_VLmv3fffyBQ4NvUZxzFBXfHi0.roa
Signing time: Sun 07 Jun 2026 09:41:09 +0000
ROA not before: Sun 07 Jun 2026 09:41:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.104.0/21 maxlen: 22
37.98.112.0/21 maxlen: 24
93.119.208.0/20 maxlen: 24
178.131.0.0/18 maxlen: 24
178.131.64.0/19 maxlen: 22
178.131.96.0/20 maxlen: 24
178.131.112.0/21 maxlen: 22
178.131.128.0/18 maxlen: 24
188.211.0.0/20 maxlen: 24
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 24
188.213.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:75:27:72:11:32:dc:6f:3f:f3:a4:4c:95:81:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jun 7 09:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37f54b9afddf7dfc8143836f519c731415df1e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:90:d7:29:03:b7:45:44:ac:9e:64:88:bd:
06:47:b3:87:cb:fa:06:0a:b4:a6:1a:f2:e6:f8:a4:
ce:bd:98:d9:39:cb:cc:68:7a:6c:df:ff:b6:0b:e5:
31:b8:11:b3:94:12:77:99:cd:a5:8e:f0:47:3b:17:
01:19:bb:23:14:2c:cc:ae:df:5a:5f:97:07:a6:22:
a5:9d:7c:3e:80:4a:6d:54:0e:3d:39:e9:ae:fa:eb:
14:25:89:f0:d5:89:31:21:ed:c5:a9:76:b1:96:5c:
ec:ec:ab:6c:2e:f3:8d:40:ce:30:b3:63:9a:b8:ad:
18:8f:86:50:3b:7b:7a:b5:33:74:7c:e0:13:8d:12:
74:87:ba:8b:1f:ef:b3:e5:1d:39:1a:87:4b:d7:bb:
57:9f:87:da:ce:ac:88:13:da:69:00:9b:8f:35:11:
3c:74:e9:75:58:48:fc:e3:c5:dd:6a:a7:06:ed:af:
e1:48:c3:f2:17:fa:92:e4:81:79:53:de:43:2a:7d:
14:ea:2d:bd:72:27:77:31:d8:8f:50:a1:c4:79:0c:
17:10:47:6f:06:dc:10:44:05:0c:21:64:61:31:35:
1b:19:f6:d8:1c:55:51:b6:76:05:87:90:21:c3:4c:
3c:2e:2f:a7:36:a4:cd:7d:c3:1c:4c:df:4c:62:87:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:4B:9A:FD:DF:7D:FC:81:43:83:6F:51:9C:73:14:15:DF:1E:2D
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/N_VLmv3fffyBQ4NvUZxzFBXfHi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.104.0-37.98.119.255
93.119.208.0/20
178.131.0.0-178.131.119.255
178.131.128.0/18
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:bb:b2:8b:bf:29:cc:cb:45:0a:ea:3e:a5:84:5b:ac:53:c7:
6f:99:59:36:58:b1:b5:20:a5:89:cd:95:f3:7b:7b:d7:a3:cc:
15:08:c6:01:12:77:fc:9e:28:fe:d4:92:d7:0b:d1:19:11:61:
ba:d6:09:d1:e9:86:b2:a7:6d:7e:58:c4:7b:91:e5:a6:3d:ba:
cd:51:35:a8:9f:d3:c0:ed:25:3b:49:a2:c2:58:86:a9:5c:e3:
3c:a2:b1:bc:75:19:dc:07:8f:64:b0:49:0a:9b:31:7f:7c:48:
ce:4b:ab:29:bf:1e:d7:39:17:29:f3:78:f9:76:f8:55:3b:45:
8c:04:2e:ab:8b:08:aa:f1:b6:34:43:57:ac:d5:fa:ae:0b:99:
c7:ce:4a:b7:46:5f:a3:49:a8:cf:f2:25:19:fb:11:ac:bd:42:
3f:81:ba:bb:b4:0f:ff:bf:80:23:6f:e9:7f:39:81:1e:02:72:
a2:2e:d3:82:20:f3:76:de:be:f4:9b:c4:f3:b1:2e:20:f8:c5:
86:da:a4:a3:d4:98:14:d4:1d:ba:e5:4b:2a:44:e5:37:e1:46:
ed:df:73:f3:b2:d6:fc:45:14:0b:44:27:24:65:3d:f9:50:9b:
a5:1f:47:ee:a6:05:c7:0e:d0:7a:0b:b0:ad:ca:3d:e0:6f:6a:
af:85:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:39 2026 by rpki-client