Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/e64_xv_SVSzH8QHXc4fcsscKyJs.roa
File: e64_xv_SVSzH8QHXc4fcsscKyJs.roa (raw, json)
Hash identifier: eCSwYZ7VkqoI2LvR6sLb6i00/lc9o3/Z5vZFSSuJFtQ=
Subject key identifier: 7B:AE:3F:C6:FF:D2:55:2C:C7:F1:01:D7:73:87:DC:B2:C7:0A:C8:9B
Certificate issuer: /CN=f85177d8101c888118b59df235a60358217b13bc
Certificate serial: 01A0D2A9C4195F07DF3706CA1E6EC00EA762
Authority key identifier: F8:51:77:D8:10:1C:88:81:18:B5:9D:F2:35:A6:03:58:21:7B:13:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/e64_xv_SVSzH8QHXc4fcsscKyJs.roa
Signing time: Thu 24 Sep 2026 09:05:36 +0000
ROA not before: Thu 24 Sep 2026 09:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 140.184.32.0/19 maxlen: 24
140.184.32.0/24 maxlen: 24
140.184.33.0/24 maxlen: 24
140.184.34.0/24 maxlen: 24
140.184.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a9:c4:19:5f:07:df:37:06:ca:1e:6e:c0:0e:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85177d8101c888118b59df235a60358217b13bc
Validity
Not Before: Sep 24 09:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bae3fc6ffd2552cc7f101d77387dcb2c70ac89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:cf:af:e3:ed:4f:f3:48:4a:82:f5:02:e7:
2e:38:57:b5:37:ec:d0:94:7c:aa:da:d1:c6:53:f9:
a5:88:fa:74:22:c5:3e:7e:69:bb:73:24:f3:a8:6e:
2e:94:9c:b3:5f:97:40:f2:9e:fb:b0:73:62:b6:29:
ac:7b:85:6a:e9:57:af:e1:71:c6:b0:1b:01:eb:a7:
5a:37:b4:40:15:04:6b:57:5d:be:a5:40:cb:6e:48:
07:e9:47:a8:c1:7d:31:15:74:89:a3:78:00:c5:ae:
26:59:c6:d2:a0:bc:ce:4a:c9:f2:52:3e:ba:e6:5f:
17:1a:6a:a5:a8:59:0c:7b:ef:df:c6:8a:fa:73:a8:
2b:da:00:a8:ad:07:9c:2e:a6:7c:51:57:4e:d3:cc:
37:35:43:8c:30:a9:27:fe:26:66:3d:56:09:9f:88:
42:b8:85:17:a6:ed:04:bb:b5:b9:7d:f0:49:0e:73:
60:7b:35:dd:ee:bc:79:54:af:32:37:03:6a:ac:7e:
19:e6:0b:79:5f:af:aa:a2:21:cf:16:ab:c8:10:46:
28:c4:aa:a7:26:e0:67:f3:78:9c:18:68:45:01:c1:
2a:23:d0:65:29:49:cb:57:34:f8:8e:3b:ce:81:8e:
ee:d1:1e:db:1e:c0:7e:c0:6c:cb:37:86:67:61:96:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AE:3F:C6:FF:D2:55:2C:C7:F1:01:D7:73:87:DC:B2:C7:0A:C8:9B
X509v3 Authority Key Identifier:
keyid:F8:51:77:D8:10:1C:88:81:18:B5:9D:F2:35:A6:03:58:21:7B:13:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/e64_xv_SVSzH8QHXc4fcsscKyJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.184.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:b3:5a:eb:7c:66:e0:74:f9:ba:0a:77:01:82:9a:88:0a:5a:
86:8b:d2:49:9d:1c:11:1a:c3:98:8c:df:3a:de:76:dd:d4:f9:
a0:46:d7:06:13:c1:11:15:45:d8:be:f2:eb:90:ae:c5:18:28:
00:e6:84:0d:ff:89:42:bd:17:7b:63:6a:e1:44:7f:33:9d:33:
f0:5a:77:56:31:f5:38:81:69:b2:92:fb:48:cf:b4:34:c4:1d:
64:a2:b8:8d:82:82:7c:14:bd:94:dd:f8:ed:4c:0b:85:23:e4:
4b:e3:d8:98:a9:9e:91:a6:89:a4:5c:f9:7c:ac:94:f3:92:93:
56:f0:8a:59:3d:f5:f2:7d:de:f6:93:21:7a:01:15:3d:a7:5a:
da:04:30:9a:03:fc:b3:37:df:f4:35:be:05:49:ae:89:7a:d5:
10:da:dc:b2:dc:f4:06:5a:85:f1:a6:87:8f:1e:1f:d4:3e:4b:
41:54:d1:8d:ba:50:4f:46:3a:c3:4a:20:7a:e7:2f:a3:12:d3:
99:8f:24:be:52:d9:0b:e9:4a:92:e8:d1:69:15:1d:c7:96:43:
52:c1:0e:55:64:73:c6:48:cb:3a:fd:fe:ed:6b:45:1a:dc:94:
eb:57:29:72:12:59:27:63:06:8b:0b:15:de:13:89:bd:1b:9d:
64:c6:b0:e8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaDSqcQZXwffNwbKHm7ADqdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTE3N2Q4MTAxYzg4ODExOGI1OWRmMjM1YTYwMzU4MjE3
YjEzYmMwHhcNMjYwOTI0MDkwNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmFlM2ZjNmZmZDI1NTJjYzdmMTAxZDc3Mzg3ZGNiMmM3MGFjODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIrPr+PtT/NISoL1AucuOFe1N+zQ
lHyq2tHGU/mliPp0IsU+fmm7cyTzqG4ulJyzX5dA8p77sHNitimse4Vq6Vev4XHG
sBsB66daN7RAFQRrV12+pUDLbkgH6UeowX0xFXSJo3gAxa4mWcbSoLzOSsnyUj66
5l8XGmqlqFkMe+/fxor6c6gr2gCorQecLqZ8UVdO08w3NUOMMKkn/iZmPVYJn4hC
uIUXpu0Eu7W5ffBJDnNgezXd7rx5VK8yNwNqrH4Z5gt5X6+qoiHPFqvIEEYoxKqn
JuBn83icGGhFAcEqI9BlKUnLVzT4jjvOgY7u0R7bHsB+wGzLN4ZnYZaWWwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHuuP8b/0lUsx/EB13OH3LLHCsibMB8GA1UdIwQY
MBaAFPhRd9gQHIiBGLWd8jWmA1ghexO8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GRjMyQkFjaUlFWXRaM3lOYVlEV0NGN0U3dy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZjI4ZjBkLTIxNDEtNDMzMi04YWQ1
LWNjYmZmOGU5YmMzNy8xL2U2NF94dl9TVlN6SDhRSFhjNGZjc3NjS3lKcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZjI4ZjBkLTIxNDEtNDMzMi04YWQ1LWNjYmZmOGU5YmMz
Ny8xLzEtRkYzMkJBY2lJRVl0WjN5TmFZRFdDRjdFN3cuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWMuCAw
DQYJKoZIhvcNAQELBQADggEBAA2zWut8ZuB0+boKdwGCmogKWoaL0kmdHBEaw5iM
3zredt3U+aBG1wYTwREVRdi+8uuQrsUYKADmhA3/iUK9F3tjauFEfzOdM/Bad1Yx
9TiBabKS+0jPtDTEHWSiuI2CgnwUvZTd+O1MC4Uj5Evj2JipnpGmiaRc+XyslPOS
k1bwilk99fJ93vaTIXoBFT2nWtoEMJoD/LM33/Q1vgVJrol61RDa3LLc9AZahfGm
h48eH9Q+S0FU0Y26UE9GOsNKIHrnL6MS05mPJL5S2QvpSpLo0WkVHceWQ1LBDlVk
c8ZIyzr9/u1rRRrclOtXKXISWSdjBosLFd4Tib0bnWTGsOg=
-----END CERTIFICATE-----
Generated at Tue Oct 20 21:39:23 2026 by rpki-client