Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Hs0MVhH6lVkB8wgswrmN8eJDYdk.roa
File: Hs0MVhH6lVkB8wgswrmN8eJDYdk.roa (raw, json)
Hash identifier: OKO98CA4vA43S/LdbL3vE/qLPP39IvvDMhRMI87wcZ4=
Subject key identifier: 1E:CD:0C:56:11:FA:95:59:01:F3:08:2C:C2:B9:8D:F1:E2:43:61:D9
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 01A0672683BCED4859F1B0FA0569E118A2A7
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Hs0MVhH6lVkB8wgswrmN8eJDYdk.roa
Signing time: Thu 03 Sep 2026 12:02:52 +0000
ROA not before: Thu 03 Sep 2026 12:02:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6823
IP address blocks: 37.202.48.0/21 maxlen: 21
37.202.48.0/24 maxlen: 24
37.202.49.0/24 maxlen: 24
37.202.50.0/24 maxlen: 24
37.202.51.0/24 maxlen: 24
37.202.52.0/24 maxlen: 24
37.202.53.0/24 maxlen: 24
37.202.54.0/24 maxlen: 24
37.202.55.0/24 maxlen: 24
95.133.138.0/24 maxlen: 24
95.133.139.0/24 maxlen: 24
178.251.40.0/21 maxlen: 21
178.251.40.0/24 maxlen: 24
178.251.41.0/24 maxlen: 24
178.251.42.0/24 maxlen: 24
178.251.43.0/24 maxlen: 24
178.251.44.0/24 maxlen: 24
178.251.45.0/24 maxlen: 24
178.251.46.0/24 maxlen: 24
178.251.47.0/24 maxlen: 24
2a01:6be0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:26:83:bc:ed:48:59:f1:b0:fa:05:69:e1:18:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Sep 3 12:02:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ecd0c5611fa955901f3082cc2b98df1e24361d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:b9:df:e0:69:b3:a4:a6:b1:0c:dc:7a:7d:
4d:93:31:3e:d1:28:0e:9f:a6:8e:d0:8b:ad:77:60:
fa:6a:9d:b8:fd:5a:d4:b4:f3:54:d5:b2:ff:c2:60:
c3:78:1a:fd:fd:4b:55:cc:f8:79:fe:c7:59:45:4d:
44:a1:c0:1e:08:99:3c:af:2a:11:42:85:70:60:d2:
03:eb:71:06:d4:ee:89:f4:eb:d1:2b:8b:ad:6c:d6:
38:5c:6c:26:13:9d:62:b4:74:6f:4b:91:9e:93:d7:
9c:75:b8:1e:d9:f3:d8:07:bc:c0:3f:10:76:f5:b7:
d4:10:19:da:e2:d0:37:f0:db:1a:16:a6:ac:9b:79:
9f:e3:ac:bc:85:95:06:28:6f:7b:ca:f6:4e:2e:f5:
9b:79:27:d5:a7:a1:44:1f:fa:76:99:07:d7:47:0d:
58:27:53:4e:cb:97:2e:e6:7b:e3:c8:70:d5:00:85:
79:28:1e:fb:a2:40:18:22:89:b7:af:9c:08:83:50:
d8:d8:66:fb:e4:89:01:4d:74:65:53:71:e1:f5:99:
dd:e5:f9:d1:3e:7a:37:68:4c:80:80:97:46:86:da:
b0:08:fb:54:d4:7d:ab:67:ac:05:d2:fe:1b:28:65:
17:5c:aa:a0:b4:e4:af:73:07:19:ba:ab:80:76:0e:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:0C:56:11:FA:95:59:01:F3:08:2C:C2:B9:8D:F1:E2:43:61:D9
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Hs0MVhH6lVkB8wgswrmN8eJDYdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.48.0/21
95.133.138.0/23
178.251.40.0/21
IPv6:
2a01:6be0::/32
Signature Algorithm: sha256WithRSAEncryption
be:88:f1:5a:46:ed:b5:8a:1d:a9:12:54:02:db:b3:ce:7f:43:
2c:c3:74:24:6e:4a:20:08:78:da:41:2e:61:ef:86:a1:80:99:
ac:b5:14:47:b6:3f:54:8a:11:8d:5a:6b:97:cd:6d:d3:44:6e:
ba:15:fd:bd:d1:01:e4:fd:2d:73:e5:86:45:da:35:77:d9:a4:
30:f5:fb:20:e5:fb:22:da:1e:f4:b7:af:41:eb:5f:d6:20:33:
a0:85:11:04:92:2e:a7:08:f5:ee:a2:0b:41:45:dd:08:92:38:
99:e7:de:86:af:ec:61:b1:79:c6:b4:44:de:fc:8d:3f:9e:c0:
27:c0:91:81:2e:8c:09:89:45:3e:9d:d1:7c:b3:78:43:dd:df:
22:17:df:c6:5a:fd:3d:47:16:3a:b8:5f:cf:eb:2b:f2:f8:0a:
cf:6c:e9:b6:ff:92:a4:61:d9:53:23:a1:7e:60:63:01:2e:68:
38:83:de:c4:70:76:b2:ad:c8:b9:78:fc:4e:1e:46:37:3c:3f:
17:a6:32:7a:8b:a2:27:0b:cc:1f:32:93:77:e1:e4:23:4e:fc:
52:7f:a9:fd:f6:4e:30:4f:d4:28:bc:21:c3:d0:5a:01:f9:8b:
f0:aa:7a:21:86:a7:03:89:12:70:d8:a3:a3:8b:1a:2d:ef:a9:
50:22:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:24 2026 by rpki-client