Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa
File: bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa (raw, json)
Hash identifier: 4pgz3zfm1oyZFOz2biai8bwyEIr9GkWt9/WXYL3YjBk=
Subject key identifier: 6C:78:BE:55:01:5A:F4:CB:D7:21:DE:EC:C6:81:59:F1:A8:F4:26:E4
Certificate issuer: /CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Certificate serial: 019F23683B78C1AE738CB0D31379A017D371
Authority key identifier: 03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60522
IP address blocks: 37.131.179.0/24 maxlen: 24
37.131.180.0/22 maxlen: 24
185.212.52.0/22 maxlen: 24
2a0b:72c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3b:78:c1:ae:73:8c:b0:d3:13:79:a0:17:d3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c78be55015af4cbd721deecc68159f1a8f426e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:8c:2e:04:28:2c:88:8e:c1:bf:9f:1c:46:
9f:1e:9a:88:65:70:39:c8:70:09:3b:a0:fb:bc:14:
d2:0f:f1:7d:09:54:38:50:f2:1a:73:01:3c:96:8a:
93:8e:c7:55:8c:3a:d1:31:8d:7d:79:ed:6f:25:dc:
e1:f4:3e:2f:53:4b:31:c0:a4:d0:85:d3:72:30:c1:
d0:a9:a1:1a:df:32:fc:fd:17:01:b2:de:75:c9:4a:
ae:d8:85:5f:ef:6b:ed:60:a0:d7:19:17:5b:f0:a4:
29:cb:b1:4a:7b:b0:ad:bc:d9:c3:37:75:54:a5:f9:
88:b8:fd:3c:7b:f0:cb:87:63:44:a2:23:4a:a7:b9:
4e:aa:ae:86:ca:c2:97:3f:67:d4:f3:55:46:b3:e2:
5b:c4:da:e9:81:06:d1:97:f2:df:df:a1:2d:1d:7d:
cb:32:e5:da:4a:48:cd:b5:b1:5e:5c:a8:41:89:1d:
66:c8:ab:f6:09:e9:21:19:e5:40:4e:41:e5:df:6e:
af:27:a4:33:cb:1e:08:88:51:23:ee:fd:1b:3c:94:
0c:06:48:34:62:4d:46:0b:4b:44:6f:b3:6c:9f:f9:
eb:51:e5:2c:4a:f9:d7:0c:92:cb:b8:27:51:a8:1f:
98:5e:43:6e:b2:cd:67:f9:b0:c7:21:fb:27:d9:ef:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:BE:55:01:5A:F4:CB:D7:21:DE:EC:C6:81:59:F1:A8:F4:26:E4
X509v3 Authority Key Identifier:
keyid:03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.179.0-37.131.183.255
185.212.52.0/22
IPv6:
2a0b:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:ea:7c:8e:47:48:9f:af:41:42:af:90:17:c0:75:d1:d0:d2:
f8:18:9b:ff:df:e3:9a:65:d6:04:c6:f7:2b:ac:20:52:c6:ad:
54:5c:cd:8b:42:c6:74:65:f1:dd:96:55:8e:0c:9c:b8:68:d3:
ab:36:2b:29:2b:e6:1b:7b:a8:c0:f8:53:03:72:97:31:2c:4b:
75:dd:23:b4:7d:33:06:e8:06:06:f9:4b:b5:6b:10:54:2a:05:
b8:21:37:24:8b:0b:e8:df:68:16:38:7c:3d:2e:c3:0a:9b:71:
44:0b:7b:e1:63:d2:ac:e2:4e:73:d5:60:f6:34:13:67:37:93:
e9:a0:ac:01:de:5f:51:ff:27:10:6d:85:65:59:d5:69:8c:10:
f2:b0:e6:be:30:41:ee:a1:81:db:5f:4e:57:a8:09:c8:ac:07:
5c:53:0b:9b:fa:21:50:6c:be:20:1e:56:d9:38:68:8e:4d:46:
b7:39:cb:58:bb:ab:b0:d4:70:a0:64:10:f0:41:b2:3d:16:6d:
9c:57:ea:f6:1f:7a:b9:b3:a0:78:be:ff:89:49:0a:6d:53:1e:
b7:3e:8a:dd:75:02:15:87:da:e2:48:c6:49:c0:54:73:35:f6:
58:49:f1:aa:26:3b:8a:81:3e:ae:9b:8a:a6:19:cd:ec:08:60:
4e:5b:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:48 2026 by rpki-client