Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/tX9OyoBEYMF2XV4dez69hRjVkN4.roa
File: tX9OyoBEYMF2XV4dez69hRjVkN4.roa (raw, json)
Hash identifier: jRKxFIJbG2B0T0vVXLe06uc5pOJoGJLwsVGTSpeMt0E=
Subject key identifier: B5:7F:4E:CA:80:44:60:C1:76:5D:5E:1D:7B:3E:BD:85:18:D5:90:DE
Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial: 019B7F84719167E3E2B7425851323C9B3390
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/tX9OyoBEYMF2XV4dez69hRjVkN4.roa
Signing time: Fri 02 Jan 2026 16:22:24 +0000
ROA not before: Fri 02 Jan 2026 16:22:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8749
IP address blocks: 37.32.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:71:91:67:e3:e2:b7:42:58:51:32:3c:9b:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Validity
Not Before: Jan 2 16:22:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b57f4eca804460c1765d5e1d7b3ebd8518d590de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:09:1a:a6:ad:6e:6f:e5:1d:e4:c4:5f:3f:
25:f4:1d:d1:b9:40:da:de:ef:62:7f:f1:ac:96:60:
bc:1e:c0:ef:80:ac:c7:5d:ca:06:7c:4b:a9:dd:53:
b5:ae:4a:d3:c3:4e:2f:ea:ca:d0:b3:2f:28:6b:65:
20:0b:e5:78:95:21:77:8f:78:19:c3:71:42:45:92:
02:dc:e6:fb:e2:6b:50:9c:4e:9b:48:65:67:8f:fd:
38:ab:54:28:59:56:bd:a0:81:45:84:a5:02:4a:99:
97:42:7d:b8:69:f3:cf:2e:0f:64:53:ce:46:5a:24:
f2:c0:d8:cd:0b:fe:8f:6a:80:73:8a:02:77:9a:d4:
aa:2a:f3:be:8b:65:d3:62:88:de:22:31:69:47:c5:
23:78:9c:0d:db:e8:42:65:4b:cd:b2:dd:d0:35:a1:
59:ae:07:64:00:bf:61:70:3b:9c:17:5c:bf:de:98:
d9:d9:f6:d3:52:f6:b3:53:d7:09:86:a8:b0:25:66:
86:b2:d1:8f:5c:ed:f4:f2:03:31:0f:fe:f1:de:4c:
25:c1:e4:5f:29:67:65:fb:13:d2:5d:9b:98:d5:33:
10:ff:80:38:87:2d:21:09:aa:ae:5c:2e:26:6c:70:
18:41:be:bf:3d:54:df:37:5d:85:01:9e:00:aa:ee:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:4E:CA:80:44:60:C1:76:5D:5E:1D:7B:3E:BD:85:18:D5:90:DE
X509v3 Authority Key Identifier:
keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/tX9OyoBEYMF2XV4dez69hRjVkN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:70:ff:a3:de:58:28:7d:d1:1a:f4:47:38:78:1c:e4:36:7b:
04:67:c3:5d:c9:60:23:00:7c:2c:e6:66:f5:61:19:33:d8:28:
75:71:ae:0d:f4:6b:ae:fa:fd:85:3e:38:c6:a6:b2:0f:5d:31:
ea:ae:7f:27:f4:97:d8:8e:54:79:57:5f:b8:4e:32:6a:c2:7b:
f1:b4:04:99:95:54:13:9a:2b:43:f9:8b:77:2c:98:df:85:ca:
e4:6a:e9:0a:1c:1d:f3:43:ea:55:f3:ad:04:86:ce:8e:99:fb:
54:cf:4c:47:c0:ca:b2:25:1a:96:de:69:84:3f:aa:eb:e6:8d:
50:6a:8d:f4:19:08:bc:fa:cf:d9:b2:22:99:cf:ed:7e:d5:5e:
4e:9c:8f:af:a0:e1:37:8c:b0:5d:ad:7c:59:3e:dc:e6:c2:ad:
d0:f0:63:db:36:60:13:8f:c6:d2:27:cd:93:73:2d:aa:1a:a8:
4a:5a:d7:60:02:dd:e5:a3:42:c8:38:08:af:d8:61:7c:f4:81:
f6:70:55:ca:78:81:4e:60:fa:a9:b0:8a:de:8f:a5:ff:25:3b:
95:77:ca:78:43:df:77:65:3c:89:c6:87:63:e0:4f:c8:6b:9b:
c6:ed:ae:bd:f1:b9:ba:67:3d:4c:59:dc:0a:c7:10:95:47:40:
c5:29:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:26 2026 by rpki-client