Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CE-2n6Rp4Jh1U5zxhHkMvwHHJqM.roa
File: CE-2n6Rp4Jh1U5zxhHkMvwHHJqM.roa (raw, json)
Hash identifier: 7GPRGqcakZo/OWJGP1jdEiP5gP5xVdkd1afOqHkdK4o=
Subject key identifier: 08:4F:B6:9F:A4:69:E0:98:75:53:9C:F1:84:79:0C:BF:01:C7:26:A3
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019F655085F91DEF51075858ECFC17AD2B2D
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CE-2n6Rp4Jh1U5zxhHkMvwHHJqM.roa
Signing time: Wed 15 Jul 2026 10:26:43 +0000
ROA not before: Wed 15 Jul 2026 10:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34369
IP address blocks: 37.148.0.0/17 maxlen: 24
37.202.128.0/18 maxlen: 24
84.241.0.0/18 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
2a0e:38::/30 maxlen: 30
2a0e:3c:ffe0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:50:85:f9:1d:ef:51:07:58:58:ec:fc:17:ad:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 15 10:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=084fb69fa469e09875539cf184790cbf01c726a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:d1:09:e4:f7:04:15:6a:6e:64:99:0e:af:
2a:47:58:7c:57:9a:5b:1b:45:43:c4:67:ce:46:0d:
a9:ad:38:cf:4b:db:9f:a1:b3:ff:e1:d0:7d:95:f3:
73:7a:51:ca:02:e4:ae:71:2d:f7:3a:f2:77:f4:cc:
0c:8c:0a:60:90:b0:4d:52:75:ea:88:dc:5c:5f:2e:
85:4c:ff:db:c9:f0:e5:5e:8d:ce:4b:f0:59:9e:73:
33:9b:b6:6b:72:52:10:c4:7b:f5:71:71:dc:1d:07:
91:b4:04:4d:49:14:b2:06:54:f3:18:6b:89:76:6f:
ab:53:f9:40:7c:68:79:4a:97:cb:2c:3c:c6:d5:09:
a6:49:2d:89:58:8f:f2:b2:ac:80:35:3a:6f:51:62:
96:cd:13:83:00:33:31:84:d9:21:a9:66:57:61:50:
c9:56:12:59:59:e9:07:5e:43:0d:ff:68:d4:78:32:
f0:5c:b7:76:11:d2:1e:81:20:c4:ae:30:c0:99:d6:
a8:a6:67:ab:ff:4d:49:1d:a0:5d:c6:f2:00:fc:5a:
f3:f7:48:0f:cf:4e:0e:25:52:0c:3d:85:ea:a9:ec:
b9:78:a7:05:6e:01:45:89:6d:12:a1:60:9c:ab:61:
5e:c3:d4:97:1e:76:44:9b:44:af:3a:6c:03:ca:a6:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:B6:9F:A4:69:E0:98:75:53:9C:F1:84:79:0C:BF:01:C7:26:A3
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CE-2n6Rp4Jh1U5zxhHkMvwHHJqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0/17
37.202.128.0/18
84.241.0.0/18
94.182.109.0/24
94.182.151.0/24
IPv6:
2a0e:38::/30
2a0e:3c:ffe0::/43
Signature Algorithm: sha256WithRSAEncryption
83:11:f2:aa:90:60:5c:1d:8e:8d:9b:c6:5a:95:11:a3:64:ac:
35:02:1b:09:ec:95:2b:1f:0e:2a:3b:5c:96:d7:b7:89:3f:c9:
53:35:1e:0c:da:cb:c1:12:82:80:36:6b:80:1c:92:28:f5:4d:
86:25:57:00:b6:0f:94:31:90:9f:0a:10:eb:52:4f:ab:80:2c:
c5:b8:bf:dd:2e:fe:a5:d2:07:16:76:c8:25:6d:54:0d:1f:0e:
79:8c:10:b8:a7:f8:1f:3b:39:7e:02:6e:aa:fc:98:77:95:90:
a7:2a:9c:8c:e3:97:97:91:e3:50:c4:67:04:4b:f2:ef:fc:a0:
d5:dd:db:ce:df:4a:7a:22:11:42:6d:39:31:47:24:a8:54:1d:
bf:00:42:d9:8c:02:95:af:6d:69:c2:08:f5:1a:bf:5a:f8:e3:
89:44:b1:23:e2:c5:e9:1b:92:60:90:87:db:1a:fc:aa:34:fc:
fb:3a:bf:88:97:9e:1b:47:7f:ae:3e:d5:fd:c2:cd:5f:38:b7:
81:14:ae:35:29:b0:b3:0b:e6:39:05:c2:28:a0:75:6d:ae:b3:
35:b2:eb:d4:0e:8a:4d:df:09:94:17:b5:49:5f:1a:18:99:f8:
9d:20:fe:43:ed:f2:e1:80:44:e0:6d:51:7b:5e:10:ae:91:12:
26:b0:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:11 2026 by rpki-client