Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFdgeXyJzaQXqawAZmyh_6uuX5k.roa
File: RFdgeXyJzaQXqawAZmyh_6uuX5k.roa (raw, json)
Hash identifier: 9nqya6lUrZRFhvWTm9DptAWjhBaMFWO/dD6cJBwy0vo=
Subject key identifier: 44:57:60:79:7C:89:CD:A4:17:A9:AC:00:66:6C:A1:FF:AB:AE:5F:99
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019FE624AD7FDBBE24FF46B49E281EECAB30
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFdgeXyJzaQXqawAZmyh_6uuX5k.roa
Signing time: Sun 09 Aug 2026 10:49:51 +0000
ROA not before: Sun 09 Aug 2026 10:49:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:24:ad:7f:db:be:24:ff:46:b4:9e:28:1e:ec:ab:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Aug 9 10:49:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=445760797c89cda417a9ac00666ca1ffabae5f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:f8:2b:7d:20:e9:e9:c2:28:8a:88:48:10:
a7:00:66:4e:c4:9f:ea:0a:fe:d8:95:92:98:88:ee:
b2:ac:b7:6d:01:8a:6d:06:49:85:13:7c:03:a2:ee:
5f:e5:97:ac:db:09:01:b9:7c:36:98:13:e4:0e:a1:
df:2c:08:5a:47:44:96:4c:9c:da:fe:60:b5:9d:b7:
c9:68:38:51:20:62:bd:c8:1a:bc:41:0c:a7:bf:22:
07:44:33:33:75:0d:07:ec:20:85:ab:dc:b7:2b:7f:
db:d3:ca:ff:b8:79:44:98:41:80:1b:21:49:19:cb:
a0:6e:f8:44:a9:d0:05:3c:6d:60:41:03:17:d6:2e:
52:79:00:5e:cc:db:26:26:bf:eb:1c:95:ca:3a:09:
e9:76:78:78:41:30:13:58:09:61:d6:1e:04:5b:66:
f3:c3:7e:ec:72:75:05:1f:e6:b1:69:78:69:5a:18:
b2:64:5a:94:10:ad:e1:86:ca:6b:e5:92:66:8b:7b:
7a:2c:b2:93:d8:9c:39:50:8c:32:f2:5a:3e:96:09:
6c:ce:a3:47:e2:68:6b:33:53:c5:de:ba:78:26:8c:
36:61:0b:43:5a:39:05:b1:6d:96:7a:1a:91:d4:f1:
ad:1a:dc:b0:23:6b:32:fb:6e:30:ab:11:6b:11:d8:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:60:79:7C:89:CD:A4:17:A9:AC:00:66:6C:A1:FF:AB:AE:5F:99
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFdgeXyJzaQXqawAZmyh_6uuX5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
97:eb:97:72:08:37:d7:c4:8d:aa:59:14:6e:1e:ec:d8:8c:2c:
1e:0c:0f:9c:e5:c5:68:0b:4d:4d:82:d6:2e:46:1a:60:c6:fe:
89:6f:cf:04:a2:5d:92:08:a1:60:f7:be:dd:d9:ce:c5:c5:77:
18:14:0b:63:07:3c:eb:8e:d3:5f:74:63:ab:1e:a1:51:7c:c9:
fc:3e:d4:df:4c:ee:56:99:e7:46:63:1a:25:67:11:8f:b4:51:
34:00:d1:e6:04:3f:3f:77:e9:79:d0:d4:b6:78:e1:d5:01:c6:
0d:b3:48:75:06:1f:96:78:18:c8:9c:91:b7:ac:11:c1:95:94:
ac:20:4b:d5:0d:e0:30:76:88:0a:ec:35:e2:55:dc:6d:70:bd:
bb:f0:d0:c1:22:4c:35:6f:63:d5:98:6a:01:35:8e:65:0c:95:
3a:7a:38:74:3b:5e:16:ce:fd:04:fa:77:96:0d:16:e6:93:70:
a0:58:0b:d3:7c:30:26:28:63:0f:ec:eb:2b:9f:6c:b6:14:cf:
b8:c0:87:6a:2b:e5:6a:33:81:ad:79:41:dd:cc:e3:9b:38:13:
3c:f7:58:e3:c1:6e:03:76:1d:58:69:35:71:ab:0e:bd:b9:89:
63:ee:19:fa:1a:d4:c4:fb:a7:e1:6d:f2:46:32:d1:82:45:d4:
8b:34:b9:e1
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZ/mJK1/274k/0a0nige7KswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjYwODA5MTA0OTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDU3NjA3OTdjODljZGE0MTdhOWFjMDA2NjZjYTFmZmFiYWU1Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9H4K30g6enCKIqISBCnAGZOxJ/q
Cv7YlZKYiO6yrLdtAYptBkmFE3wDou5f5Zes2wkBuXw2mBPkDqHfLAhaR0SWTJza
/mC1nbfJaDhRIGK9yBq8QQynvyIHRDMzdQ0H7CCFq9y3K3/b08r/uHlEmEGAGyFJ
GcugbvhEqdAFPG1gQQMX1i5SeQBezNsmJr/rHJXKOgnpdnh4QTATWAlh1h4EW2bz
w37scnUFH+axaXhpWhiyZFqUEK3hhspr5ZJmi3t6LLKT2Jw5UIwy8lo+lglszqNH
4mhrM1PF3rp4Jow2YQtDWjkFsW2WehqR1PGtGtywI2sy+24wqxFrEdiThQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFERXYHl8ic2kF6msAGZsof+rrl+ZMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvUkZkZ2VYeUp6YVFYcWF3QVpteWhfNnV1WDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAQl/NAD
BAEl/NQDBAAl/NcDBANtzQgDBAK5JHwwDQQCAAIwBwMFACoCANgwDQYJKoZIhvcN
AQELBQADggEBAJfrl3IIN9fEjapZFG4e7NiMLB4MD5zlxWgLTU2C1i5GGmDG/olv
zwSiXZIIoWD3vt3ZzsXFdxgUC2MHPOuO0190Y6seoVF8yfw+1N9M7laZ50ZjGiVn
EY+0UTQA0eYEPz936XnQ1LZ44dUBxg2zSHUGH5Z4GMickbesEcGVlKwgS9UN4DB2
iArsNeJV3G1wvbvw0MEiTDVvY9WYagE1jmUMlTp6OHQ7XhbO/QT6d5YNFuaTcKBY
C9N8MCYoYw/s6yufbLYUz7jAh2or5Wozga15Qd3M45s4Ezz3WOPBbgN2HVhpNXGr
Dr25iWPuGfoa1MT7p+Ft8kYy0YJF1Is0ueE=
-----END CERTIFICATE-----
Generated at Thu Aug 13 18:11:03 2026 by rpki-client