Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/l4QImOObZysd3ZnyZlrEsgrjht4.roa
File: l4QImOObZysd3ZnyZlrEsgrjht4.roa (raw, json)
Hash identifier: D4PFCUK0CjhbvSe1eoJTCIXJh8I+fx58ViRSrP71NaE=
Subject key identifier: 97:84:08:98:E3:9B:67:2B:1D:DD:99:F2:66:5A:C4:B2:0A:E3:86:DE
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01A10B95E9E4663056A0BC6852911FFFED1B
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/l4QImOObZysd3ZnyZlrEsgrjht4.roa
Signing time: Mon 05 Oct 2026 10:22:16 +0000
ROA not before: Mon 05 Oct 2026 10:22:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214875
IP address blocks: 37.97.0.0/18 maxlen: 18
37.97.0.0/20 maxlen: 20
37.97.2.0/24 maxlen: 24
37.97.3.0/24 maxlen: 24
37.97.48.0/21 maxlen: 21
37.97.57.0/24 maxlen: 24
37.97.58.0/23 maxlen: 23
37.97.62.0/23 maxlen: 23
45.13.240.0/22 maxlen: 22
188.228.0.0/17 maxlen: 17
188.228.0.0/24 maxlen: 24
188.228.4.0/22 maxlen: 22
188.228.8.0/22 maxlen: 22
188.228.14.0/24 maxlen: 24
188.228.48.0/23 maxlen: 23
188.228.50.0/23 maxlen: 23
188.228.54.0/24 maxlen: 24
188.228.64.0/23 maxlen: 23
188.228.68.0/23 maxlen: 23
188.228.78.0/24 maxlen: 24
188.228.80.0/22 maxlen: 22
188.228.88.0/22 maxlen: 22
188.228.92.0/23 maxlen: 23
188.228.96.0/22 maxlen: 22
188.228.102.0/23 maxlen: 23
2a00:fd00::/32 maxlen: 32
2a00:fd01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:95:e9:e4:66:30:56:a0:bc:68:52:91:1f:ff:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Oct 5 10:22:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97840898e39b672b1ddd99f2665ac4b20ae386de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:0c:d0:a1:e0:48:66:bf:8d:54:69:a7:81:
b1:67:13:fe:48:49:28:ac:e4:db:a1:29:15:af:fe:
b8:c2:17:62:7f:4a:c3:94:68:1a:d6:d4:d8:77:4b:
17:5f:ab:9c:1a:16:b1:e9:08:3f:e5:b1:19:e0:f2:
ed:af:21:b1:46:93:76:dc:ad:90:f4:78:8c:f7:d4:
c5:00:8b:60:df:d9:72:bd:26:cc:a1:e6:63:32:ed:
df:65:b7:b8:a1:c9:bd:fc:e9:03:7e:d0:ba:b4:bb:
51:93:bf:64:44:6b:f0:3f:5f:17:89:2f:b1:3c:df:
a3:50:28:93:24:00:48:64:99:cc:8f:a8:46:0b:58:
19:d3:26:b9:f2:f3:6b:a5:2b:67:5e:cd:6b:b3:ce:
19:56:3f:05:52:8e:f4:17:75:72:09:0a:00:4c:98:
07:5b:33:53:c7:f7:9b:27:ad:25:ad:2c:49:a4:e7:
38:3e:6f:1a:5d:f0:f7:e6:c5:17:71:66:15:25:ed:
c9:bb:c0:27:b4:82:81:ec:f9:fe:ee:78:97:75:dd:
3c:ff:fe:f6:1b:46:91:c8:77:26:c0:82:c4:9e:20:
fc:38:7f:52:f1:f4:68:4b:5b:e3:b8:75:9a:53:b6:
9d:24:bc:23:24:df:e3:da:8a:c7:a4:f9:9c:a6:91:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:08:98:E3:9B:67:2B:1D:DD:99:F2:66:5A:C4:B2:0A:E3:86:DE
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/l4QImOObZysd3ZnyZlrEsgrjht4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.0.0/18
45.13.240.0/22
188.228.0.0/17
IPv6:
2a00:fd00::/31
Signature Algorithm: sha256WithRSAEncryption
71:26:7a:5b:e1:0b:2a:88:3e:14:50:44:3d:bc:e5:d6:79:4e:
df:44:fe:5a:ad:6d:08:22:9b:c7:c0:42:a8:da:28:5f:6d:b4:
c2:73:bc:dd:22:6a:0b:43:1c:a6:c8:42:c8:a7:ba:0a:0e:d6:
93:c7:17:de:e4:bd:11:9f:3e:64:40:92:d4:70:ae:9f:17:eb:
46:b1:2c:c3:e4:4f:be:42:74:85:c5:c7:61:d1:a3:c1:1b:6f:
1e:8b:68:c1:b0:e6:bd:7e:36:45:00:70:4e:22:b8:d5:9f:34:
3a:e9:e7:41:43:18:4d:4e:d0:12:1f:42:54:8e:d7:a1:7c:fa:
00:9f:76:5b:69:c9:63:7c:6e:02:6b:bd:58:9b:d1:37:cf:55:
6d:3d:0e:21:17:71:3b:c1:ee:8e:84:f1:30:d6:1c:67:70:00:
10:47:c6:69:e1:a8:e0:7d:8c:04:c0:20:60:d3:8e:ad:ba:2d:
f5:ca:f1:6c:92:5d:b2:c8:23:0e:27:a2:b8:a6:0a:99:1e:4c:
8d:e1:be:74:50:24:76:78:95:d3:be:28:64:2c:86:a8:54:a4:
6f:3c:64:3d:63:d7:3c:1a:8a:c2:59:37:4d:62:98:7b:a3:63:
3f:88:dc:61:70:10:4d:c0:ae:40:c4:f6:88:f4:b5:b3:7f:32:
58:25:23:5e
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaELlenkZjBWoLxoUpEf/+0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjYxMDA1MTAyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzg0MDg5OGUzOWI2NzJiMWRkZDk5ZjI2NjVhYzRiMjBhZTM4NmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqkM0KHgSGa/jVRpp4GxZxP+SEko
rOTboSkVr/64whdif0rDlGga1tTYd0sXX6ucGhax6Qg/5bEZ4PLtryGxRpN23K2Q
9HiM99TFAItg39lyvSbMoeZjMu3fZbe4ocm9/OkDftC6tLtRk79kRGvwP18XiS+x
PN+jUCiTJABIZJnMj6hGC1gZ0ya58vNrpStnXs1rs84ZVj8FUo70F3VyCQoATJgH
WzNTx/ebJ60lrSxJpOc4Pm8aXfD35sUXcWYVJe3Ju8AntIKB7Pn+7niXdd08//72
G0aRyHcmwILEniD8OH9S8fRoS1vjuHWaU7adJLwjJN/j2orHpPmcppEKbQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJeECJjjm2crHd2Z8mZaxLIK44beMB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvbDRRSW1PT2JaeXNkM1pueVpsckVzZ3JqaHQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGJWEAAwQC
LQ3wAwQHvOQAMA0EAgACMAcDBQEqAP0AMA0GCSqGSIb3DQEBCwUAA4IBAQBxJnpb
4QsqiD4UUEQ9vOXWeU7fRP5arW0IIpvHwEKo2ihfbbTCc7zdImoLQxymyELIp7oK
DtaTxxfe5L0Rnz5kQJLUcK6fF+tGsSzD5E++QnSFxcdh0aPBG28ei2jBsOa9fjZF
AHBOIrjVnzQ66edBQxhNTtASH0JUjtehfPoAn3ZbacljfG4Ca71Ym9E3z1VtPQ4h
F3E7we6OhPEw1hxncAAQR8Zp4ajgfYwEwCBg046tui31yvFskl2yyCMOJ6K4pgqZ
HkyN4b50UCR2eJXTvihkLIaoVKRvPGQ9Y9c8GorCWTdNYph7o2M/iNxhcBBNwK5A
xPaI9LWzfzJYJSNe
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:39 2026 by rpki-client