Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/a3290QBUAW6JkZDMQMvV2AmGcpI.roa
File: a3290QBUAW6JkZDMQMvV2AmGcpI.roa (raw, json)
Hash identifier: U52wU/VVKKrKVnN6L8f5aOo6YSyIS3DGIvhyfpa7ooU=
Subject key identifier: 6B:7D:BD:D1:00:54:01:6E:89:91:90:CC:40:CB:D5:D8:09:86:72:92
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 01A075A32192AC90B03674A64B578266E1BD
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/a3290QBUAW6JkZDMQMvV2AmGcpI.roa
Signing time: Sun 06 Sep 2026 07:33:40 +0000
ROA not before: Sun 06 Sep 2026 07:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202468
IP address blocks: 37.32.0.0/19 maxlen: 24
37.152.176.0/20 maxlen: 24
94.101.176.0/20 maxlen: 24
185.97.116.0/22 maxlen: 24
185.143.232.0/22 maxlen: 24
185.206.92.0/22 maxlen: 24
185.220.224.0/22 maxlen: 24
185.226.116.0/22 maxlen: 24
185.228.236.0/22 maxlen: 24
185.231.180.0/22 maxlen: 24
185.239.104.0/22 maxlen: 24
188.121.96.0/19 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.241.0/24 maxlen: 24
193.176.242.0/23 maxlen: 23
2a07:3900::/29 maxlen: 48
2a0c:a7c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a3:21:92:ac:90:b0:36:74:a6:4b:57:82:66:e1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Sep 6 07:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b7dbdd10054016e899190cc40cbd5d809867292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:b2:c5:18:d4:74:81:50:a1:54:17:a0:c9:
73:0a:a7:24:ad:80:e8:15:99:3c:05:49:62:40:5d:
ee:3f:5c:1e:cf:55:63:7d:f5:a0:ed:7a:4f:7c:71:
e0:48:74:a2:97:48:e1:11:08:b5:b6:06:e4:1d:2e:
8f:e3:aa:e8:0b:b0:9c:27:3b:6c:49:97:f3:3c:17:
01:49:64:54:30:48:31:3d:42:ef:03:5a:d5:83:f6:
15:c0:41:79:e5:67:17:b0:c9:6a:d2:b8:3c:87:9b:
8e:ac:46:7d:73:c5:f7:d8:3e:d4:f7:81:a4:16:6a:
a7:ca:01:3a:31:2e:40:9f:f7:aa:37:d2:50:8a:e7:
06:a3:55:5c:41:92:82:28:63:5d:fa:38:09:84:5e:
be:4e:ec:13:ce:6d:42:8e:72:27:bb:ce:d4:e6:03:
1f:9e:23:f2:55:27:2f:37:ad:bd:8b:a6:fb:6d:7b:
57:e7:a5:d9:20:a6:69:f4:80:98:22:1e:33:dc:f0:
19:81:ba:5e:37:27:f9:e1:13:ab:51:1e:73:9a:b2:
75:31:f6:55:75:dd:87:44:2c:a1:fe:79:76:b9:a6:
7e:b3:23:b6:75:cb:3e:65:d1:1b:a9:5c:aa:bc:c8:
02:d7:70:b7:2b:b3:70:bb:b6:a9:9f:69:05:43:2e:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:BD:D1:00:54:01:6E:89:91:90:CC:40:CB:D5:D8:09:86:72:92
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/a3290QBUAW6JkZDMQMvV2AmGcpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
41:08:e7:c1:5a:d3:4c:c8:49:1f:21:83:08:16:48:6b:bd:b0:
d7:4f:a7:0e:aa:ee:8b:e3:68:de:93:7a:35:ea:0b:28:90:69:
97:0c:18:dd:3d:45:bd:77:9d:a0:2d:5f:d9:75:44:0c:98:39:
41:c2:cc:21:8a:d8:dd:2d:4c:69:46:59:ff:07:dc:c9:53:14:
35:06:7c:54:63:86:bf:42:44:8c:54:94:af:a0:ef:36:01:23:
fe:10:57:cd:2a:ca:1d:09:af:f6:92:21:a1:6d:30:87:e1:2b:
d0:06:70:bc:da:be:a2:62:eb:7e:dc:07:35:6e:bd:7f:a9:b0:
d6:83:de:6e:a2:e8:70:ce:f6:a1:f1:58:2e:23:6c:64:09:2c:
85:a4:aa:9e:70:18:8e:5b:18:68:f7:c4:6f:2a:ce:a2:b2:b4:
4c:3f:df:97:b4:81:f8:07:b4:2d:29:b5:ac:a8:33:e1:35:5e:
3c:bb:33:d2:b3:e6:10:47:c2:52:12:00:41:07:eb:0a:43:ab:
92:c2:8a:86:32:82:dc:19:cd:9b:e3:bc:52:10:51:9e:3b:86:
8c:ea:e5:0b:b9:93:65:08:05:0d:a5:3a:a0:42:8f:bb:60:7c:
82:6e:0c:bd:3d:04:cf:31:7e:ad:89:6d:19:91:2d:f3:ee:20:
a8:c8:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:06 2026 by rpki-client