Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/yi1fK_-RnGIR53EDaGJ-NbFb4cw.roa
File: yi1fK_-RnGIR53EDaGJ-NbFb4cw.roa (raw, json)
Hash identifier: 8qVvUWprWEP3+o1dHxaz8tb18/xPwq5gKAudzTrXXEM=
Subject key identifier: CA:2D:5F:2B:FF:91:9C:62:11:E7:71:03:68:62:7E:35:B1:5B:E1:CC
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019D63A7F84F6F1D8FE89E96315588A5145A
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/yi1fK_-RnGIR53EDaGJ-NbFb4cw.roa
Signing time: Mon 06 Apr 2026 16:37:25 +0000
ROA not before: Mon 06 Apr 2026 16:37:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61254
IP address blocks: 37.49.230.0/24 maxlen: 24
37.49.231.0/24 maxlen: 24
2a13:adc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:a7:f8:4f:6f:1d:8f:e8:9e:96:31:55:88:a5:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Apr 6 16:37:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca2d5f2bff919c6211e7710368627e35b15be1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:6f:8d:dd:d7:c7:0c:67:63:06:f3:db:10:
a2:8f:9b:3d:43:04:37:68:66:11:d4:dd:4b:20:dc:
17:3e:98:48:aa:2a:d0:22:b6:a0:2b:d5:2f:40:f7:
d3:b1:80:6b:7a:d2:97:80:0f:5e:59:cc:fb:79:37:
ac:c5:92:24:0d:9e:8d:ae:5a:8e:0b:7e:e4:10:af:
36:3b:87:2d:22:58:e0:31:d3:ab:2f:55:d0:5a:60:
bd:49:5f:75:40:a5:6d:f0:37:ab:26:f5:7b:06:f5:
5e:c4:d3:2f:76:05:dc:bf:45:ff:7d:a8:2a:80:4d:
27:55:28:63:3f:f3:35:af:e2:c6:fb:ef:67:5e:71:
3b:de:c5:4a:6f:64:92:90:5e:76:27:c6:ce:4a:9d:
a9:84:bd:e4:c4:0a:21:ad:56:d0:a5:3d:41:cf:b9:
7c:4c:fa:37:49:3c:dc:9e:7f:b4:ef:a4:58:4a:ae:
13:1e:61:39:71:03:b6:66:36:f1:44:d2:37:c6:e2:
9f:8a:60:6b:ad:54:f5:1c:0c:fa:2a:cc:8a:b7:11:
d0:34:92:4d:d7:d8:32:2a:cc:01:ab:b2:a2:48:06:
9f:38:cb:a8:dd:26:3e:67:4c:bd:02:b9:6f:b1:0f:
03:7e:2b:7c:4c:1e:9b:74:94:ad:17:1e:5c:a4:9a:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:5F:2B:FF:91:9C:62:11:E7:71:03:68:62:7E:35:B1:5B:E1:CC
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/yi1fK_-RnGIR53EDaGJ-NbFb4cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.230.0/23
IPv6:
2a13:adc3::/48
Signature Algorithm: sha256WithRSAEncryption
3c:b9:17:8a:47:a3:93:15:ab:4f:16:54:55:a8:94:5f:4e:44:
d9:6e:d1:cd:9b:69:3f:b9:ef:f7:f4:a8:06:ca:82:2e:c4:49:
cc:4d:f4:f5:43:a6:80:78:d6:71:69:0c:19:04:7f:5c:78:93:
5f:fe:45:e3:95:e4:68:a2:bd:e4:11:55:f8:04:9c:a1:a2:99:
e9:b3:cb:ee:14:e2:9c:e8:29:69:4c:eb:da:5f:bb:4a:2e:22:
e3:81:44:d7:1a:de:c4:7e:7a:3f:ff:c2:d8:e3:0e:f3:bd:10:
37:4a:f7:d0:48:38:3b:5c:8c:45:56:c9:18:83:47:ab:d0:22:
0d:ab:53:9c:76:65:d2:b1:b2:55:1f:b6:d8:30:9c:11:83:e3:
ab:53:cc:93:af:48:fe:3e:04:0c:32:a0:94:23:35:fd:54:02:
3e:2c:fd:29:90:af:99:ea:f9:d8:9a:60:66:30:dc:df:38:0f:
ce:ba:36:88:a4:73:1c:5d:e1:01:5c:12:9f:d8:2d:52:cf:78:
f2:51:3d:d1:4c:51:64:47:61:21:cb:cf:ea:df:79:77:fc:c8:
b7:48:53:9a:35:dd:d5:6f:e3:7e:4d:9e:6b:7c:49:da:77:fa:
dc:92:e4:aa:a5:99:7c:59:0b:b9:80:d4:8f:1c:3d:3b:6b:ae:
96:e4:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:17:27 2026 by rpki-client