Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/vLRVDoqJhEnm4t8SoVeIpa28fIY.roa
File: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (raw, json)
Hash identifier: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=
Subject key identifier: BC:B4:55:0E:8A:89:84:49:E6:E2:DF:12:A1:57:88:A5:AD:BC:7C:86
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019E4035A0A22947889813F26A76E9E31CA1
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/vLRVDoqJhEnm4t8SoVeIpa28fIY.roa
Signing time: Tue 19 May 2026 12:28:36 +0000
ROA not before: Tue 19 May 2026 12:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29134
IP address blocks: 37.46.80.0/21 maxlen: 24
62.109.128.0/19 maxlen: 24
130.193.8.0/21 maxlen: 24
171.33.136.0/21 maxlen: 24
185.100.92.0/22 maxlen: 24
185.102.20.0/22 maxlen: 24
185.102.76.0/22 maxlen: 24
213.109.164.0/22 maxlen: 24
217.31.48.0/20 maxlen: 24
2001:1ab0::/32 maxlen: 32
2a00:ca80::/32 maxlen: 32
2a03:b780::/32 maxlen: 32
2a09:ec00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:35:a0:a2:29:47:88:98:13:f2:6a:76:e9:e3:1c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: May 19 12:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcb4550e8a898449e6e2df12a15788a5adbc7c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:88:93:85:49:c3:64:e5:cf:db:f3:9c:ca:
c2:0c:dc:62:4e:b6:ae:7e:62:f7:eb:2a:4d:52:75:
4d:ca:05:fc:1b:ef:2d:73:97:87:52:71:5d:3e:e0:
cf:77:9e:f1:92:54:1a:0d:27:e0:1a:f5:39:fa:26:
a3:30:60:01:c9:86:b5:b8:6b:98:84:8b:86:bf:34:
dc:f0:10:61:80:40:b5:9e:9d:89:18:0c:19:43:1a:
43:7a:88:b8:4a:bb:b3:a9:2c:ee:48:ac:70:23:cd:
c6:8f:92:b9:51:39:80:1e:4a:a6:4c:0b:7d:0e:de:
ab:43:26:b1:3e:7f:fb:8b:34:71:ee:7a:f6:bf:cf:
5a:2d:17:c8:cd:f0:25:a6:dd:89:d5:ed:c5:9e:6e:
44:f4:5a:66:69:89:9a:21:75:be:5b:e6:a9:fd:53:
51:79:85:a1:c7:3b:49:e6:97:8b:f9:d3:6b:dc:89:
1c:4d:25:4d:22:0a:e4:57:cc:f3:a1:7e:9b:ad:25:
5c:20:7b:26:85:ab:01:2f:61:6b:0c:c4:28:96:1c:
67:53:0e:5d:c2:c9:4c:20:98:5a:c5:4c:fc:89:17:
ce:1b:6a:24:83:3e:a6:d4:fc:59:2c:63:59:3c:0b:
60:6d:4f:aa:26:11:1e:ac:cf:a9:2f:73:15:ee:d0:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:55:0E:8A:89:84:49:E6:E2:DF:12:A1:57:88:A5:AD:BC:7C:86
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/vLRVDoqJhEnm4t8SoVeIpa28fIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.80.0/21
62.109.128.0/19
130.193.8.0/21
171.33.136.0/21
185.100.92.0/22
185.102.20.0/22
185.102.76.0/22
213.109.164.0/22
217.31.48.0/20
IPv6:
2001:1ab0::/32
2a00:ca80::/32
2a03:b780::/32
2a09:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
03:a6:4f:05:be:be:44:e2:d0:9d:d1:e2:2b:d2:04:85:55:36:
02:67:bb:10:4f:a5:93:0b:4e:99:a8:2a:3e:5b:82:f1:fe:75:
be:c8:7c:53:5d:3e:98:7f:99:d3:a1:79:b5:90:c6:e7:91:67:
b9:14:5f:64:83:bb:bd:4c:37:f0:dd:62:28:28:be:f9:34:ca:
ed:ba:6f:d9:03:2d:09:03:de:ed:de:62:6b:84:27:3f:00:c7:
42:27:bb:a9:83:b1:67:53:1d:18:7d:d7:ce:2a:32:ae:d5:d8:
ae:3a:ed:03:18:37:4f:52:3c:be:d4:13:06:44:b5:c6:15:1c:
23:a3:66:d7:44:1a:2f:f9:c5:e2:af:a9:5d:ae:ea:7d:b6:46:
b0:57:61:f0:6e:80:41:70:3e:18:bd:63:62:b9:2d:7e:3e:2e:
c2:05:b6:05:0a:46:8c:6a:05:98:bd:aa:07:ef:03:d9:57:a9:
2d:aa:cb:3c:2c:6c:d6:ed:c1:11:b5:90:c6:0f:39:1e:e5:61:
84:9b:55:d3:63:0a:16:4a:cb:a5:2a:f4:9c:92:ce:47:6e:1e:
83:69:dd:0f:1d:ab:c4:05:9c:7a:b8:44:53:30:47:07:fe:59:
49:09:8e:d0:46:b0:32:5e:aa:4b:0f:5f:2f:a3:55:ed:3f:44:
09:d4:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:30 2026 by rpki-client