Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/SczvjYYK5nld6MzW-faIC7ezPu0.roa
File: SczvjYYK5nld6MzW-faIC7ezPu0.roa (raw, json)
Hash identifier: O1Bz/8a2Ks8omEaPLLDeQnXY6v+h1TehDDmwSh6scXw=
Subject key identifier: 49:CC:EF:8D:86:0A:E6:79:5D:E8:CC:D6:F9:F6:88:0B:B7:B3:3E:ED
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 019FA8AEC70A38C6985FBB08477F884DF193
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/SczvjYYK5nld6MzW-faIC7ezPu0.roa
Signing time: Tue 28 Jul 2026 12:24:14 +0000
ROA not before: Tue 28 Jul 2026 12:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 37.98.224.0/21 maxlen: 24
85.113.90.0/23 maxlen: 24
85.194.196.0/22 maxlen: 24
109.205.112.0/21 maxlen: 24
167.160.5.0/24 maxlen: 24
176.28.73.0/24 maxlen: 24
185.58.12.0/24 maxlen: 24
185.58.14.0/24 maxlen: 24
185.76.32.0/22 maxlen: 24
185.98.157.0/24 maxlen: 24
185.181.52.0/22 maxlen: 24
192.161.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:ae:c7:0a:38:c6:98:5f:bb:08:47:7f:88:4d:f1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jul 28 12:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49ccef8d860ae6795de8ccd6f9f6880bb7b33eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:8f:75:88:98:80:0f:33:fc:ee:12:0b:44:
a1:22:ab:31:9b:0e:9c:79:56:c4:3d:f9:4e:34:e2:
21:53:ae:66:53:9d:cd:b7:8c:6c:47:f3:b6:3d:5f:
f7:c3:6f:f5:03:34:33:bb:5b:3d:cc:10:6e:04:a0:
7d:47:9c:d3:a0:3b:ad:1e:9b:bd:23:7d:52:7b:be:
37:12:a2:2c:36:50:1f:30:6a:fe:04:bb:50:ea:5f:
3b:8b:a6:e3:48:2d:b7:ed:99:af:2c:39:7b:2c:d2:
59:60:bc:7b:ab:60:40:24:e1:ee:89:a0:5b:94:d7:
7b:a9:bf:fd:5c:4c:b2:33:43:f3:9f:2a:2d:ae:d8:
98:d5:cb:58:f2:4c:2d:0e:0b:2a:24:8c:21:db:71:
ca:7f:05:a9:56:d9:ae:65:5a:ff:77:6f:16:a3:c6:
f8:7e:99:d9:9f:86:df:70:04:a3:5d:12:56:3b:10:
45:cd:98:98:9d:96:37:f2:96:6e:cf:cc:78:c7:c7:
fc:ea:99:f8:79:17:43:cb:39:52:68:60:18:3f:9e:
c2:79:dc:92:b8:93:9a:25:50:ae:9e:5e:8a:87:ee:
d3:d2:bc:19:7f:34:00:be:35:7d:a8:17:5b:d8:03:
52:77:a7:4f:86:c0:6a:54:3e:5b:b9:a6:f7:41:b7:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:EF:8D:86:0A:E6:79:5D:E8:CC:D6:F9:F6:88:0B:B7:B3:3E:ED
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/SczvjYYK5nld6MzW-faIC7ezPu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
167.160.5.0/24
176.28.73.0/24
185.58.12.0/24
185.58.14.0/24
185.76.32.0/22
185.98.157.0/24
185.181.52.0/22
192.161.6.0/23
Signature Algorithm: sha256WithRSAEncryption
34:74:74:fa:7a:30:8e:ff:ab:74:5c:6b:a5:52:9e:22:fa:0f:
bb:49:43:5d:c5:fa:cd:37:99:23:d1:8c:17:77:95:f9:99:a6:
49:e7:ef:5e:bd:f5:da:8d:ca:07:b6:31:10:e7:c5:45:d4:64:
d8:15:68:f9:e2:33:4c:fb:14:6f:b0:b6:b1:d1:65:54:8c:46:
24:7b:70:d2:a6:19:48:ac:d9:a1:9c:38:89:12:e5:7f:8c:67:
f1:92:84:59:5b:fc:80:a6:b8:88:7e:64:37:7e:86:ab:22:b4:
18:2d:26:33:af:a8:5d:5d:e0:bd:d8:0a:7e:a7:b0:fa:e7:16:
81:ac:26:9b:ee:0f:2e:71:8d:1a:e0:44:82:b0:01:49:cb:2c:
ce:44:b1:e7:7f:9b:a4:4b:ce:b7:d6:02:a1:8d:db:a8:0d:76:
a5:43:3b:e2:d9:28:52:02:49:b1:40:9b:30:30:15:65:b7:19:
d9:1d:f3:63:df:06:97:5e:86:33:1f:72:2e:30:2c:1f:77:a6:
4d:8a:28:e8:31:e7:8b:08:ae:1f:cb:2e:1c:29:cf:a8:20:bd:
37:18:60:82:54:9f:4d:a3:fa:90:a3:f6:b2:77:17:17:46:de:
69:6c:a6:e5:73:c7:f1:2b:e2:9a:38:ea:da:31:7d:9f:84:22:
72:d3:02:b8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZ+orscKOMaYX7sIR3+ITfGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjc2MGMwNTc3M2MxNWQ3MzY3NjQ1MDM0NDY2OGZlZmI3
MjM0NDcwHhcNMjYwNzI4MTIyNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWNjZWY4ZDg2MGFlNjc5NWRlOGNjZDZmOWY2ODgwYmI3YjMzZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xCPdYiYgA8z/O4SC0ShIqsxmw6c
eVbEPflONOIhU65mU53Nt4xsR/O2PV/3w2/1AzQzu1s9zBBuBKB9R5zToDutHpu9
I31Se743EqIsNlAfMGr+BLtQ6l87i6bjSC237ZmvLDl7LNJZYLx7q2BAJOHuiaBb
lNd7qb/9XEyyM0PznyotrtiY1ctY8kwtDgsqJIwh23HKfwWpVtmuZVr/d28Wo8b4
fpnZn4bfcASjXRJWOxBFzZiYnZY38pZuz8x4x8f86pn4eRdDyzlSaGAYP57CedyS
uJOaJVCunl6Kh+7T0rwZfzQAvjV9qBdb2ANSd6dPhsBqVD5buab3QbesqQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEnM742GCuZ5XejM1vn2iAu3sz7tMB8GA1UdIwQY
MBaAFOv3YMBXc8Fdc2dkUDRGaP77cjRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYt
NDkwOTg4OTdlZTRhLzEvU2N6dmpZWUs1bmxkNk16Vy1mYUlDN2V6UHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYtNDkwOTg4OTdlZTRh
LzEvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQDJWLgAwQB
VXFaAwQCVcLEAwQDbc1wAwQAp6AFAwQAsBxJAwQAuToMAwQAuToOAwQCuUwgAwQA
uWKdAwQCubU0AwQBwKEGMA0GCSqGSIb3DQEBCwUAA4IBAQA0dHT6ejCO/6t0XGul
Up4i+g+7SUNdxfrNN5kj0YwXd5X5maZJ5+9evfXajcoHtjEQ58VF1GTYFWj54jNM
+xRvsLax0WVUjEYke3DSphlIrNmhnDiJEuV/jGfxkoRZW/yApriIfmQ3foarIrQY
LSYzr6hdXeC92Ap+p7D65xaBrCab7g8ucY0a4ESCsAFJyyzORLHnf5ukS8631gKh
jduoDXalQzvi2ShSAkmxQJswMBVltxnZHfNj3waXXoYzH3IuMCwfd6ZNiijoMeeL
CK4fyy4cKc+oIL03GGCCVJ9No/qQo/aydxcXRt5pbKblc8fxK+KaOOraMX2fhCJy
0wK4
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:18 2026 by rpki-client