Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/F9rCqWJdm6vLp6haX3vYrI2gL_g.roa
File: F9rCqWJdm6vLp6haX3vYrI2gL_g.roa (raw, json)
Hash identifier: xEd7jJuHdAHJVsMe82Rl5fLSYY66Quy1HzmOZTDjeq8=
Subject key identifier: 17:DA:C2:A9:62:5D:9B:AB:CB:A7:A8:5A:5F:7B:D8:AC:8D:A0:2F:F8
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019EEB3E1158330B753700AE0D5056EDF9CD
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/F9rCqWJdm6vLp6haX3vYrI2gL_g.roa
Signing time: Sun 21 Jun 2026 17:32:53 +0000
ROA not before: Sun 21 Jun 2026 17:32:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61254
IP address blocks: 37.49.224.0/24 maxlen: 24
37.49.225.0/24 maxlen: 24
37.49.226.0/24 maxlen: 24
37.49.227.0/24 maxlen: 24
37.49.228.0/24 maxlen: 24
37.49.229.0/24 maxlen: 24
37.49.230.0/24 maxlen: 24
37.49.231.0/24 maxlen: 24
2a13:adc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:3e:11:58:33:0b:75:37:00:ae:0d:50:56:ed:f9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jun 21 17:32:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17dac2a9625d9babcba7a85a5f7bd8ac8da02ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:f7:9e:77:6c:bc:1e:54:7a:09:3e:96:92:
bf:6f:ed:be:55:5c:fd:ff:dd:9f:55:17:56:8c:b5:
ab:3c:8d:5f:75:08:c8:cc:c4:72:6b:75:2a:0a:3a:
3f:1d:cf:cf:9d:f4:46:d0:e8:55:11:f3:dd:17:cf:
4b:84:1b:84:e8:aa:7b:66:f3:a8:87:a2:12:a1:fe:
2c:1e:88:9d:cf:64:88:a8:df:4a:c1:6d:d5:7d:b8:
42:18:4f:11:a5:4a:2e:d6:51:34:e9:d3:e2:ca:27:
2f:b9:55:bd:cd:ad:ed:ed:c0:d6:2b:33:8e:19:c6:
30:d3:83:e6:4d:91:3f:08:ad:52:c7:67:73:51:0f:
98:f1:b9:93:56:cb:af:29:b5:4b:80:33:ef:70:05:
74:2d:91:58:56:01:4b:49:33:28:a5:50:08:a9:11:
3e:47:7b:70:ed:a9:19:32:0f:f7:63:98:c2:9d:63:
ce:71:d5:da:23:bf:1b:b1:9b:f2:90:c8:94:42:37:
05:1e:33:93:1e:ec:f6:26:d3:41:6f:d5:ad:34:8b:
23:02:a7:c7:b7:86:5b:b0:96:30:62:c5:d3:ef:32:
46:21:db:78:e8:4b:fa:cb:12:8c:25:76:50:6c:eb:
f4:ae:70:05:60:e3:a5:e6:0f:3b:8b:76:c0:db:02:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DA:C2:A9:62:5D:9B:AB:CB:A7:A8:5A:5F:7B:D8:AC:8D:A0:2F:F8
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/F9rCqWJdm6vLp6haX3vYrI2gL_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.224.0/21
IPv6:
2a13:adc3::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e3:b5:b5:e2:23:2c:a5:f0:4c:6c:53:35:01:19:65:bd:9f:
f6:1d:43:28:d4:e5:d7:65:83:ab:88:3b:69:2e:02:0d:de:d8:
75:e7:12:77:61:9c:d5:49:9a:88:ef:ee:3d:3a:38:5d:19:89:
1f:d9:3e:9e:a5:f3:09:56:9c:b8:83:c4:f6:0a:9b:df:a7:b4:
75:b9:64:3e:2b:ef:65:6d:28:35:aa:3c:b6:3a:b9:47:2e:70:
69:28:83:c6:da:be:40:bf:66:23:83:69:1e:1c:02:e1:3f:ba:
43:f5:d8:d4:7a:a4:f2:1c:e2:04:42:63:a3:db:e1:dc:3b:e7:
69:c5:ad:e3:f7:6b:c6:3a:8e:c6:a3:1c:7c:bf:fa:4c:cc:c2:
9b:44:c5:7d:56:80:0e:c1:b3:ee:cd:f6:bc:f7:65:12:b3:71:
99:59:54:36:fd:bf:eb:98:68:d8:d9:03:48:0c:2a:ce:5e:d1:
6e:73:63:71:7a:26:0b:4f:38:d7:a8:d6:32:a7:c8:f8:dd:21:
7a:78:c2:c2:fb:80:5a:2e:af:69:da:4a:71:22:18:31:59:fb:
c5:0c:5e:ca:92:ce:56:3e:e9:20:91:ad:b5:ef:ba:7a:70:af:
05:54:20:37:80:d6:d3:1c:70:09:90:30:8d:fc:c4:95:41:5f:
f8:ce:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:11 2026 by rpki-client