Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/34k5fyUZE8_jzTWCURobBugONa0.roa
File: 34k5fyUZE8_jzTWCURobBugONa0.roa (raw, json)
Hash identifier: qVz4AcRlLf/Yszaqj3dQkSlRn+YCca8piKQ/d12Vaow=
Subject key identifier: DF:89:39:7F:25:19:13:CF:E3:CD:35:82:51:1A:1B:06:E8:0E:35:AD
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019EFA66B2C6EF0B1F2C554E2BC2E3A47735
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/34k5fyUZE8_jzTWCURobBugONa0.roa
Signing time: Wed 24 Jun 2026 16:11:34 +0000
ROA not before: Wed 24 Jun 2026 16:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
185.36.127.0/24 maxlen: 24
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:66:b2:c6:ef:0b:1f:2c:55:4e:2b:c2:e3:a4:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jun 24 16:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df89397f251913cfe3cd3582511a1b06e80e35ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:49:23:96:a2:f0:e6:7a:19:9c:d4:95:0f:
5f:ca:ce:4d:88:57:c3:e3:a7:b6:57:8d:86:ee:d3:
f7:75:8e:92:81:b6:5e:8d:58:bc:75:93:70:97:24:
7a:61:12:b8:64:da:ea:28:14:26:ab:2f:50:67:0c:
79:40:d8:38:b8:ff:46:d9:da:5d:09:96:d9:af:28:
e6:7c:84:dc:25:e3:fc:e1:7b:92:3d:90:ba:ca:fa:
8f:31:ee:54:f1:07:8f:09:8d:b7:7d:40:17:26:64:
08:a0:98:3a:c6:84:81:1d:f1:37:2d:9e:9a:4e:f0:
01:63:24:ea:16:b3:7b:e0:12:b9:1c:f5:e1:1e:48:
56:c5:c8:8f:e7:d0:ff:26:d7:87:b0:b7:50:35:89:
6e:dc:40:dc:37:10:62:7a:1e:f5:f1:3b:57:4a:63:
b3:4f:00:65:42:ca:69:9b:b8:ab:6a:41:1a:41:16:
e1:c9:14:60:ad:5f:68:8f:78:cc:ca:15:36:d2:61:
c7:a8:a3:0d:c2:00:21:a2:23:23:19:27:0f:4a:65:
c3:e6:85:65:c2:82:59:0b:f5:9a:46:a5:13:0e:8e:
f9:67:f4:92:19:97:56:99:7a:87:4d:4c:3a:b0:a3:
45:ab:c7:de:8d:f2:5f:38:4e:65:0c:7f:31:73:fc:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:39:7F:25:19:13:CF:E3:CD:35:82:51:1A:1B:06:E8:0E:35:AD
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/34k5fyUZE8_jzTWCURobBugONa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
9c:fe:82:fb:31:85:26:bc:63:ca:ef:04:4d:7d:b4:07:64:67:
31:7a:ee:cb:93:20:91:6e:46:e8:cf:36:33:da:2e:53:1e:cb:
f6:92:bc:7c:3b:0e:88:a6:9d:8c:94:a2:ac:f0:7f:29:0c:45:
35:76:6f:f1:94:df:a7:2c:40:4c:cd:9b:78:50:38:88:61:9b:
fb:68:62:3f:46:b3:3b:b7:4e:d1:87:1d:26:a8:15:5b:fa:70:
96:24:74:c0:7a:b9:04:f9:f7:bc:f9:ab:e7:67:a0:cb:b6:64:
13:6a:18:03:2c:35:f6:a0:0e:a4:f7:07:f2:b8:8b:38:a9:53:
61:dc:af:90:33:8a:4e:c9:ab:1f:04:6c:fc:11:e4:35:3a:8c:
f4:da:35:e1:3d:41:0a:9c:6b:05:52:95:5e:ef:39:1a:76:ca:
c1:00:09:23:16:99:77:d0:bb:dd:e7:54:76:fd:f9:26:85:4a:
60:ef:42:c9:6b:23:8d:4a:f7:97:c1:d6:cf:57:be:7d:6b:8b:
62:8d:04:8d:a2:22:6c:0a:b2:4b:44:0a:9d:4f:b9:6c:91:6a:
23:4d:8a:41:ca:c8:e9:f5:fb:71:2c:45:54:c1:86:ed:30:f0:
87:76:7b:73:75:fc:bb:dc:cb:7f:a8:08:67:25:88:d6:8b:c6:
13:dc:c8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:32:37 2026 by rpki-client