Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/0HFu2ez0f-PjGTXmzJlZ3XpHLOs.roa
File: 0HFu2ez0f-PjGTXmzJlZ3XpHLOs.roa (raw, json)
Hash identifier: 8VPupNM9ov/3KDuW2wWw7qPlgQCQZ2c9AZnzhuGy/Cc=
Subject key identifier: D0:71:6E:D9:EC:F4:7F:E3:E3:19:35:E6:CC:99:59:DD:7A:47:2C:EB
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019FBDA1A62A575F3F479363D2D00B6BBE8E
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/0HFu2ez0f-PjGTXmzJlZ3XpHLOs.roa
Signing time: Sat 01 Aug 2026 14:01:55 +0000
ROA not before: Sat 01 Aug 2026 14:01:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58256
IP address blocks: 37.143.144.0/24 maxlen: 24
37.143.145.0/24 maxlen: 24
37.143.146.0/24 maxlen: 24
37.143.147.0/24 maxlen: 24
37.143.148.0/24 maxlen: 24
37.143.149.0/24 maxlen: 24
37.143.150.0/24 maxlen: 24
37.143.151.0/24 maxlen: 24
91.108.128.0/24 maxlen: 24
91.108.129.0/24 maxlen: 24
91.108.130.0/24 maxlen: 24
91.108.131.0/24 maxlen: 24
91.108.132.0/24 maxlen: 24
91.108.133.0/24 maxlen: 24
91.108.134.0/24 maxlen: 24
91.108.135.0/24 maxlen: 24
91.108.136.0/24 maxlen: 24
91.108.137.0/24 maxlen: 24
91.108.138.0/24 maxlen: 24
91.108.139.0/24 maxlen: 24
91.108.144.0/24 maxlen: 24
91.108.147.0/24 maxlen: 24
91.108.148.0/24 maxlen: 24
91.108.149.0/24 maxlen: 24
91.108.150.0/24 maxlen: 24
91.108.153.0/24 maxlen: 24
91.108.154.0/24 maxlen: 24
91.108.155.0/24 maxlen: 24
91.108.156.0/24 maxlen: 24
91.108.157.0/24 maxlen: 24
185.42.213.0/24 maxlen: 24
185.42.214.0/24 maxlen: 24
185.42.215.0/24 maxlen: 24
185.83.28.0/24 maxlen: 24
185.83.29.0/24 maxlen: 24
185.83.30.0/24 maxlen: 24
185.83.31.0/24 maxlen: 24
185.83.184.0/22 maxlen: 22
185.83.184.0/24 maxlen: 24
185.83.185.0/24 maxlen: 24
185.83.186.0/24 maxlen: 24
185.83.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:a1:a6:2a:57:5f:3f:47:93:63:d2:d0:0b:6b:be:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Aug 1 14:01:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0716ed9ecf47fe3e31935e6cc9959dd7a472ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:ba:c8:7d:3c:6f:67:1a:73:94:96:57:c2:
aa:fd:c8:77:63:e4:7e:0b:ed:d9:11:be:dc:75:c3:
69:27:cf:f1:9a:a9:75:3e:ed:f3:76:55:f3:00:60:
dc:8c:ef:ed:76:82:79:bc:19:77:19:48:72:1c:2a:
94:8b:a5:09:14:08:2a:41:e2:df:4e:f4:f5:7b:51:
8b:10:56:29:02:fe:12:6c:dc:84:3b:d4:70:b8:16:
1f:ad:d0:9b:cb:05:49:3e:27:8b:11:0a:de:50:4e:
10:f5:8f:7a:fa:c5:2a:92:2d:c5:9c:ab:b7:33:9b:
ce:31:2b:51:c8:82:a8:86:89:60:62:99:6a:24:7f:
cb:8c:14:8e:0f:5f:87:4b:96:1d:66:71:46:cf:6c:
69:69:e1:8b:c9:ba:bc:c5:7a:90:e2:f3:67:f0:7f:
64:fc:ec:fc:78:1b:68:7d:ea:9e:61:03:82:78:80:
b2:ec:21:ff:2e:48:f4:d1:16:7f:55:a4:be:00:59:
db:9c:6c:fd:74:71:e2:aa:61:b9:e8:05:27:df:d1:
ce:ef:75:8a:6e:41:39:6a:d4:54:5a:19:81:bd:07:
37:ae:2b:35:7f:78:07:f8:d7:4c:c4:f7:1c:a5:1e:
b2:86:72:ad:0b:3a:97:1d:dc:e6:18:d2:cc:97:e4:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:6E:D9:EC:F4:7F:E3:E3:19:35:E6:CC:99:59:DD:7A:47:2C:EB
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/0HFu2ez0f-PjGTXmzJlZ3XpHLOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.144.0/21
91.108.128.0-91.108.139.255
91.108.144.0/24
91.108.147.0-91.108.150.255
91.108.153.0-91.108.157.255
185.42.213.0-185.42.215.255
185.83.28.0/22
185.83.184.0/22
Signature Algorithm: sha256WithRSAEncryption
43:94:c6:6d:88:e8:af:0d:62:c5:78:0e:07:76:17:6a:17:19:
a6:06:64:25:95:cf:02:4b:d9:41:9f:f3:94:7e:dc:aa:8a:b4:
b5:d3:e9:2f:e3:f5:04:ff:dc:0d:e0:25:fc:2b:cb:fb:6f:c4:
e3:6c:dc:f6:cf:81:5d:ac:eb:c6:bb:45:f1:0a:97:ae:d5:1e:
4f:ed:9b:3f:d8:d4:05:15:70:31:fb:35:7a:dd:32:5d:2d:3b:
f2:4b:cf:cf:0a:7b:57:31:ca:c3:d9:a8:52:5e:c1:33:c1:39:
7e:d8:2f:dc:48:3d:96:b5:f5:b5:a1:22:09:33:c6:77:e4:6f:
11:ea:28:e3:c5:69:c9:55:12:80:f5:3b:3e:89:09:b5:7c:37:
b2:8d:8a:97:53:55:2f:f8:9f:81:53:bd:c4:d1:99:2c:13:69:
2e:06:b7:bf:87:3a:d3:41:ee:b6:08:ca:31:2e:50:68:9b:60:
a6:50:ea:31:64:31:65:98:80:8d:53:43:32:85:59:14:be:13:
a7:01:39:72:3e:5b:1e:2d:5b:70:3a:da:52:18:e8:c4:38:f5:
e8:ad:1a:15:ae:7b:a7:ec:bc:a8:ae:99:a2:cc:40:7a:e8:0f:
a6:6b:05:8c:ec:4c:75:2b:f1:0d:e5:ce:07:95:48:1b:d8:c8:
4f:14:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:42 2026 by rpki-client