Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/8L93OfrXNzkgMRsqTKLGqIh_Piw.roa
File: 8L93OfrXNzkgMRsqTKLGqIh_Piw.roa (raw, json)
Hash identifier: DHNZYsv/LygcgjjRo9/VWopDIXTk+Rujtrd6cyZ7HBQ=
Subject key identifier: F0:BF:77:39:FA:D7:37:39:20:31:1B:2A:4C:A2:C6:A8:88:7F:3E:2C
Certificate issuer: /CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
Certificate serial: 01A06C3A8A7D37B4617DFDF9139B5F69BC1E
Authority key identifier: E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/8L93OfrXNzkgMRsqTKLGqIh_Piw.roa
Signing time: Fri 04 Sep 2026 11:42:50 +0000
ROA not before: Fri 04 Sep 2026 11:42:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61029
IP address blocks: 37.72.96.0/24 maxlen: 24
37.72.97.0/24 maxlen: 24
37.72.98.0/24 maxlen: 24
37.72.99.0/24 maxlen: 24
37.72.100.0/24 maxlen: 24
37.72.101.0/24 maxlen: 24
37.72.102.0/24 maxlen: 24
37.72.104.0/24 maxlen: 24
37.72.106.0/24 maxlen: 24
37.72.107.0/24 maxlen: 24
2a00:8240::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:3a:8a:7d:37:b4:61:7d:fd:f9:13:9b:5f:69:bc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
Validity
Not Before: Sep 4 11:42:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0bf7739fad7373920311b2a4ca2c6a8887f3e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:c0:d0:3e:23:2c:fe:00:d2:b1:8b:15:cc:
7c:19:be:50:ee:d7:f1:1b:9c:12:02:03:43:e1:bf:
29:93:03:6d:05:18:90:89:22:c3:aa:6c:ec:51:e2:
00:81:18:af:f3:97:06:e4:64:84:70:a9:09:18:0f:
9e:80:d5:9c:d5:c3:1d:e1:16:83:be:5e:51:aa:28:
9f:03:2e:69:e5:3b:96:8f:d1:6c:24:f6:7d:20:7f:
d0:e4:57:a6:81:75:af:1a:81:53:5a:3a:76:5c:72:
0b:bc:01:8e:5f:96:3b:39:18:30:b0:6d:db:76:7e:
b2:69:ce:4e:50:29:18:b6:5b:76:91:4e:64:88:9c:
b6:dc:67:ca:5e:c4:35:91:50:fc:5c:23:9c:77:cd:
2f:48:b0:2d:ad:2c:e9:3d:22:24:40:3d:b9:7e:75:
27:7a:59:9b:2c:9e:1b:79:f7:33:18:69:9f:8f:58:
69:9f:cc:5d:02:79:46:de:ea:db:ca:75:7e:4c:2b:
a5:9a:89:ea:e5:4e:b4:85:52:43:94:8e:b9:1f:84:
ae:06:92:37:b5:15:a3:f4:37:d0:14:31:f7:17:c7:
ac:01:a0:06:d2:22:e5:05:9c:8b:0d:ee:70:76:1b:
29:59:41:7c:45:6b:81:c2:d2:9e:05:f4:59:f7:7f:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:77:39:FA:D7:37:39:20:31:1B:2A:4C:A2:C6:A8:88:7F:3E:2C
X509v3 Authority Key Identifier:
keyid:E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/8L93OfrXNzkgMRsqTKLGqIh_Piw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.96.0-37.72.102.255
37.72.104.0/24
37.72.106.0/23
IPv6:
2a00:8240::/29
Signature Algorithm: sha256WithRSAEncryption
40:67:d8:09:6c:7f:be:9f:71:92:0c:73:9e:ad:68:d0:3a:27:
61:93:3c:ad:da:17:5b:42:eb:ce:ac:35:07:ca:0a:11:72:07:
f2:cd:d2:5e:34:f8:9b:c6:55:d4:45:90:06:05:4b:49:03:ee:
2d:23:4f:9e:f8:74:60:20:23:b1:45:e8:7a:60:c5:9f:10:3e:
79:60:80:a0:06:01:41:eb:a7:94:68:64:41:12:ad:99:0e:e5:
0a:17:fd:f9:68:46:d9:0a:71:be:3b:8b:e6:e8:0d:a4:c2:a6:
b8:e6:12:ce:26:77:dc:d1:9f:8d:f7:95:28:a8:5c:89:7f:4d:
03:c4:00:49:96:7d:2d:97:e8:ad:76:45:e0:a6:db:8b:78:92:
00:80:ea:9e:c2:44:15:6b:95:da:f3:e4:2e:35:86:00:16:56:
47:38:47:46:ab:8c:e5:68:e7:c4:e2:78:ae:76:2a:c7:43:6d:
d7:c5:53:11:1f:58:ac:f6:bd:a9:30:41:02:b4:c6:05:f2:55:
ec:60:56:be:22:56:70:2b:cf:8a:3e:25:ff:ac:e8:13:6e:4c:
b4:9d:4d:5f:fd:93:a5:de:83:80:52:f7:8c:99:08:97:06:d2:
b0:ab:e6:74:5f:b4:a1:e3:c9:eb:c6:5e:14:a3:7d:c2:af:64:
b8:4b:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:21 2026 by rpki-client