Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vM7Oj0sbOriOAVAR_2HTLCzXVjw.roa
File: vM7Oj0sbOriOAVAR_2HTLCzXVjw.roa (raw, json)
Hash identifier: P+O5C5q8hr6q/e1tYHnx3Cg1d5CEqyvqOB6DKXPjWxk=
Subject key identifier: BC:CE:CE:8F:4B:1B:3A:B8:8E:01:50:11:FF:61:D3:2C:2C:D7:56:3C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D3DF0B6301C31629A964A29C458300770
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vM7Oj0sbOriOAVAR_2HTLCzXVjw.roa
Signing time: Mon 30 Mar 2026 08:51:18 +0000
ROA not before: Mon 30 Mar 2026 08:51:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 37.60.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 13:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:f0:b6:30:1c:31:62:9a:96:4a:29:c4:58:30:07:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 30 08:51:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bccece8f4b1b3ab88e015011ff61d32c2cd7563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ab:ee:52:cf:b7:6b:98:d4:25:3b:62:f4:bf:
4f:46:23:26:93:ab:72:c3:51:ea:6e:42:b5:e2:d9:
8b:cf:a5:32:69:00:b2:59:52:55:b0:f8:4e:94:1d:
b5:b8:ac:50:a2:fd:c5:08:70:5d:c2:0e:5e:f3:15:
fe:fd:72:90:ee:9f:7f:be:c1:6d:3c:0c:1d:f8:61:
04:70:95:55:1c:d5:c6:f7:0f:44:be:26:aa:26:80:
c7:06:65:a8:84:d8:a6:c0:d6:16:c0:0d:21:38:4e:
13:0f:8d:c5:c7:e7:72:b0:42:b6:45:ac:a6:54:c3:
7e:bb:9b:c3:90:f6:ba:05:ec:d2:7c:36:7d:8a:8d:
2a:1c:4c:a9:21:5c:56:c1:5f:90:3c:64:61:6c:6d:
26:49:dc:a1:75:04:a9:40:c9:47:6e:0d:4e:48:b3:
94:c4:e3:50:ff:bf:54:b6:56:cf:b3:de:83:8e:a6:
fa:8c:44:7f:bd:8b:e6:32:3a:c9:11:ea:8a:ab:65:
d7:ea:c4:31:4a:7e:6d:31:6b:f6:0e:91:51:0e:b7:
01:81:fd:79:10:8c:d3:6b:0b:6d:92:c3:69:ec:70:
38:1a:d0:c6:44:27:ea:a9:45:33:e9:88:92:59:03:
b0:65:6b:b4:d4:6d:75:1d:b4:c5:fb:ab:8a:6a:9c:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CE:CE:8F:4B:1B:3A:B8:8E:01:50:11:FF:61:D3:2C:2C:D7:56:3C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vM7Oj0sbOriOAVAR_2HTLCzXVjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c7:ee:9f:52:16:a9:79:6e:ef:a2:9f:9b:15:9c:2c:da:31:
ee:a1:3d:a2:78:26:4d:3b:84:bb:7f:11:16:fc:b0:c3:f3:3d:
d4:5a:f8:23:9c:e8:3e:e8:98:1b:6a:a9:23:f7:50:60:b7:b3:
da:aa:d6:9f:28:ad:05:2d:a6:ac:59:08:f9:17:c2:42:cc:c2:
bd:91:71:90:25:76:3f:27:c6:36:cb:dc:ed:ab:75:a9:0e:68:
0a:11:a7:c0:db:6c:5c:9f:a9:a7:62:ed:23:45:e9:65:d2:fb:
5e:10:60:60:01:fe:ef:20:88:f1:0b:a1:b6:0e:02:42:d1:2b:
2b:15:0b:2f:1b:3b:e7:e4:96:d1:f6:4a:63:f5:98:82:f4:e0:
fc:f1:60:52:f3:ef:1c:92:20:48:10:1e:6e:d0:8e:59:74:14:
f5:9c:34:b5:f1:ac:0f:00:a2:bd:62:5f:90:17:6b:f6:d9:ac:
83:26:87:6b:34:92:fe:b0:3e:8e:5b:dc:3d:74:43:b1:71:6f:
2c:25:bd:08:c0:3e:62:3a:7d:8d:6b:66:ce:52:7c:92:3d:7b:
27:66:a7:6f:85:bf:0a:c2:c1:29:d8:6e:3c:9a:01:fe:c6:11:
5a:cc:60:eb:6f:df:a9:9d:69:96:fc:2a:eb:04:49:24:7b:c1:
29:e9:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 17:28:30 2026 by rpki-client