Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/yhbmtNgTPh6ZvOVEnEZRW09FwZs.roa
File: yhbmtNgTPh6ZvOVEnEZRW09FwZs.roa (raw, json)
Hash identifier: Hd+8gWQugJfcQ7r+Nd8R/dMyBy5OWauZLsunwsqUxNI=
Subject key identifier: CA:16:E6:B4:D8:13:3E:1E:99:BC:E5:44:9C:46:51:5B:4F:45:C1:9B
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019FC0D24D8B251FAAB6FBB5547856010085
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/yhbmtNgTPh6ZvOVEnEZRW09FwZs.roa
Signing time: Sun 02 Aug 2026 04:53:55 +0000
ROA not before: Sun 02 Aug 2026 04:53:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34369
IP address blocks: 37.148.0.0/17 maxlen: 24
37.202.128.0/18 maxlen: 24
37.202.252.0/22 maxlen: 24
84.241.0.0/18 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
2a0e:38::/30 maxlen: 30
2a0e:3c:ffe0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c0:d2:4d:8b:25:1f:aa:b6:fb:b5:54:78:56:01:00:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Aug 2 04:53:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca16e6b4d8133e1e99bce5449c46515b4f45c19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:61:2d:1a:2b:5d:18:ca:fe:25:80:b1:ee:
62:4d:14:2f:d4:e9:7e:c0:6f:dd:96:a6:f9:cd:e5:
f9:b5:b2:a6:b3:5c:76:af:a4:da:e8:14:b0:e8:2b:
ae:e1:cf:65:40:61:34:f2:ef:4f:23:4c:9c:42:d9:
f8:29:df:fd:d9:79:e9:f6:86:64:e4:b1:e9:e1:0e:
5a:3b:89:a8:db:04:db:91:8c:02:32:67:cd:30:1f:
a4:ee:75:6e:cf:2a:69:4c:a7:66:96:34:1e:41:8c:
d2:cb:76:c7:6a:59:78:39:59:8e:15:f0:3d:d8:1e:
2b:e4:8c:79:e2:d8:33:4c:73:16:34:c3:e8:b6:d3:
01:58:bb:a3:86:3c:c8:a0:41:f0:ed:24:d4:e4:bc:
69:bf:29:18:ac:db:6f:e2:ca:78:fb:21:9e:38:95:
e8:e1:00:2e:f3:5e:d4:05:bc:28:7a:d3:7c:31:fc:
9e:60:e5:48:4a:0a:d0:0b:cd:b0:ce:c8:0e:71:0f:
d6:09:aa:3e:28:a8:8b:d2:28:d4:a4:8a:7a:89:2d:
fd:3b:af:9b:df:31:8d:76:2d:72:f8:49:cb:ae:7a:
ce:eb:92:72:7a:6d:5e:a3:26:c2:b8:53:74:c8:19:
50:4d:cb:44:9c:b3:43:ea:44:28:ce:e2:78:7f:5d:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:E6:B4:D8:13:3E:1E:99:BC:E5:44:9C:46:51:5B:4F:45:C1:9B
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/yhbmtNgTPh6ZvOVEnEZRW09FwZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0/17
37.202.128.0/18
37.202.252.0/22
84.241.0.0/18
94.182.109.0/24
94.182.151.0/24
IPv6:
2a0e:38::/30
2a0e:3c:ffe0::/43
Signature Algorithm: sha256WithRSAEncryption
a5:b8:2d:c9:83:b4:f0:f4:cd:f0:8e:4c:e0:2b:49:90:40:fd:
7b:c5:9f:c3:5e:0e:32:98:fe:93:d6:f4:e5:3e:84:17:c1:3e:
07:f4:03:2c:9a:06:97:53:bd:6a:3d:91:cf:fa:5d:9e:d6:44:
19:71:d3:1e:3b:62:5f:e5:37:70:0a:5e:51:7a:55:9b:37:1b:
bf:24:10:cd:73:4e:3c:ad:d9:0b:89:64:ea:77:7f:ab:23:69:
a0:6c:2b:52:c1:35:b0:c6:d6:42:4d:12:e4:a5:4e:67:2f:97:
df:95:18:64:05:9b:8b:9a:1b:1c:c3:b2:61:eb:e5:be:3b:4e:
a1:f4:b1:17:15:f9:a9:ac:a9:a0:89:11:1a:77:26:95:b1:4b:
fc:58:3b:40:5a:3d:70:5b:6c:50:69:27:8a:30:2f:0c:22:cf:
f7:75:49:29:3e:79:74:74:c8:ab:8f:4f:d2:28:32:b9:ad:b9:
f4:7f:7d:03:b2:d7:2f:3a:69:1b:e6:43:5c:32:59:71:01:9a:
49:be:d7:8a:79:22:5c:38:b2:5d:59:02:c1:e4:a6:a9:18:23:
a8:b6:1c:1d:45:bc:5f:d1:41:a6:4a:7e:20:bd:87:b6:8e:a0:
d9:0e:33:2f:1a:f3:9c:c4:72:19:7b:28:7c:65:fd:0f:19:62:
24:d6:ba:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:20:59 2026 by rpki-client