Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/sL2S2uE1FuPrLXqM3EeCBZkuRgk.roa
File: sL2S2uE1FuPrLXqM3EeCBZkuRgk.roa (raw, json)
Hash identifier: DvKW0qyOEQNSqBl1D5orEKAC7TVGVsPkW9YFeQ7MT7M=
Subject key identifier: B0:BD:92:DA:E1:35:16:E3:EB:2D:7A:8C:DC:47:82:05:99:2E:46:09
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D777DD862B109DAF4D968701A40F4E470
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/sL2S2uE1FuPrLXqM3EeCBZkuRgk.roa
Signing time: Fri 10 Apr 2026 13:03:49 +0000
ROA not before: Fri 10 Apr 2026 13:03:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 37.148.131.0/24 maxlen: 24
93.88.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:7d:d8:62:b1:09:da:f4:d9:68:70:1a:40:f4:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Apr 10 13:03:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0bd92dae13516e3eb2d7a8cdc478205992e4609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:7c:d5:f1:c8:7d:29:de:9d:84:06:dc:fa:
70:de:39:ab:dc:52:8f:1d:40:4c:7b:80:93:be:64:
c8:9f:87:42:34:3f:d0:76:d3:2f:94:c1:9d:c7:a9:
b9:5b:e9:09:45:3c:e4:17:97:98:d4:9f:48:65:b5:
0d:d7:83:00:64:44:fa:5c:45:81:b7:7a:da:4b:d0:
b3:1f:79:9f:3c:91:84:df:64:85:b7:71:2d:a8:da:
aa:00:b1:bd:51:92:05:cc:e3:82:52:4a:dd:32:18:
4d:bc:b6:1d:e7:76:1b:ee:28:cc:45:f3:11:9b:9a:
79:da:a0:82:7e:66:3d:67:db:30:8c:f7:0c:5e:00:
dc:2a:a2:2b:a3:cb:2b:49:db:b9:56:ef:9f:0f:c2:
55:31:ce:fd:5e:02:d4:eb:ac:82:c4:b2:8e:c2:38:
88:ab:21:39:30:f5:50:ea:b5:ca:0b:4d:f1:9c:8e:
81:ff:4c:4d:62:b7:2d:9f:8f:03:69:21:49:e2:39:
08:2a:dd:84:3d:d0:1e:4e:47:4b:fa:be:f1:20:c5:
d5:66:b7:f9:37:30:c6:b4:ef:66:5c:88:51:fe:b0:
ab:8a:09:cf:9c:18:21:78:d9:e5:e1:ca:b3:99:66:
f5:11:91:9a:9d:88:62:57:1c:9b:bb:8c:30:ad:97:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:92:DA:E1:35:16:E3:EB:2D:7A:8C:DC:47:82:05:99:2E:46:09
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/sL2S2uE1FuPrLXqM3EeCBZkuRgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.131.0/24
93.88.154.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a6:a7:87:2e:3a:3b:d3:e2:a3:ce:6b:15:36:70:1f:39:9d:
2f:1b:ed:b7:01:fb:1f:16:b3:b5:d0:2d:36:24:cd:53:8d:26:
a1:00:c4:bb:c4:ce:44:57:d9:d5:9f:9a:d5:7b:d5:fb:80:59:
d5:85:8f:7f:89:05:5a:2b:ab:12:a2:02:d8:d0:1d:4b:7e:f1:
5b:d2:6e:c4:f6:57:13:8b:c1:28:52:5c:ef:1b:28:af:2b:b3:
15:3b:79:dc:b5:a0:a1:77:9c:30:12:9b:74:02:ac:e6:fd:6c:
a2:f9:9e:e6:17:b4:33:65:0e:06:82:d6:83:b2:8f:e0:10:dd:
32:66:b1:d5:ae:49:9d:81:96:6b:8b:08:7c:b7:8a:cd:3a:7f:
90:15:75:12:80:c5:25:fc:f9:b7:86:f2:8d:79:8e:63:27:01:
75:5e:58:c7:d1:3a:e4:e3:e6:50:4f:ed:85:55:7d:09:70:ed:
30:cc:4d:be:f5:cc:e7:cd:52:d9:73:55:1b:03:25:2f:73:92:
5d:c8:dc:93:33:1b:59:68:5b:22:2a:96:48:bf:7d:6e:38:94:
20:c2:74:7b:ce:d3:ab:b8:76:61:1c:1e:17:ac:50:dc:42:d3:
0a:93:b0:c8:3a:19:9b:32:f1:dd:59:e9:d1:b9:41:79:81:81:
64:a7:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:52 2026 by rpki-client