Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/cmUlm2I9heblm6BuC62yGes7ANM.roa
File: cmUlm2I9heblm6BuC62yGes7ANM.roa (raw, json)
Hash identifier: rhyjQh15EhFSoa15cdt1Yt2vilqUIZZMK5yJYabj/x4=
Subject key identifier: 72:65:25:9B:62:3D:85:E6:E5:9B:A0:6E:0B:AD:B2:19:EB:3B:00:D3
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019E2555705FE66E80A643A0E32B0715D5AA
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/cmUlm2I9heblm6BuC62yGes7ANM.roa
Signing time: Thu 14 May 2026 07:13:36 +0000
ROA not before: Thu 14 May 2026 07:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 37.34.80.0/21 maxlen: 24
82.163.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:55:70:5f:e6:6e:80:a6:43:a0:e3:2b:07:15:d5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 14 07:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7265259b623d85e6e59ba06e0badb219eb3b00d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:3a:3a:bd:2a:37:bf:cd:e5:17:9d:fd:ef:
1b:83:2d:db:3e:0f:67:b0:44:07:20:3b:d8:d6:2b:
24:19:7a:2c:82:4c:8a:0e:94:93:f7:6e:27:18:01:
3f:aa:03:d3:4e:25:8d:2e:57:e9:13:00:d0:8e:72:
15:78:48:50:fc:42:f9:d0:aa:d4:c9:93:e0:13:c6:
22:e7:f0:bf:d6:9c:da:84:1d:c7:96:f1:27:d4:8e:
d6:84:27:47:e7:38:a9:7e:fa:69:1a:1d:26:c2:a0:
3e:b1:11:de:98:b4:0a:11:02:ad:d4:ea:69:de:9f:
b2:25:f5:e1:24:a5:87:fc:1d:45:d1:ed:15:03:68:
7c:43:5f:3e:8b:9d:6e:63:f0:37:a9:ec:c7:0d:ea:
4e:e3:cc:a9:2c:ca:c3:1f:d9:36:2a:6e:70:29:d3:
31:e2:72:b0:f4:4b:58:ee:50:90:47:40:77:65:a0:
ed:44:28:8d:70:30:3f:1f:29:64:1a:1a:82:5e:7d:
41:14:72:1c:6e:b6:22:74:cb:32:62:b3:f3:e4:01:
9c:06:72:c8:ed:2d:32:b6:6a:96:26:13:53:ba:10:
58:48:93:ac:a6:59:70:aa:fc:21:d9:d9:3b:fc:63:
dc:71:5e:16:c1:02:fb:a6:3a:3b:d8:78:8f:a5:14:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:25:9B:62:3D:85:E6:E5:9B:A0:6E:0B:AD:B2:19:EB:3B:00:D3
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/cmUlm2I9heblm6BuC62yGes7ANM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.80.0/21
82.163.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:2b:11:31:c5:fc:61:d7:4c:ea:bf:bd:40:13:c1:65:d7:7f:
cd:f3:74:b5:65:1d:44:8f:ff:d4:45:83:fd:af:89:e2:f7:40:
ab:9d:e5:dc:53:22:7a:da:59:97:38:87:bb:00:6e:ad:3e:b3:
86:5d:e8:9c:0e:f8:7b:81:72:98:46:d8:be:a6:7a:a1:95:b6:
85:08:73:e6:ff:eb:b0:65:4d:1e:99:fb:80:ae:11:57:0d:74:
b5:22:db:e6:e0:f2:7a:09:97:51:b8:26:40:26:43:7c:c7:7f:
54:22:9a:22:19:16:c2:c3:70:ed:93:08:68:72:ca:bb:44:ad:
9f:53:5b:e6:8a:52:6a:0e:1b:e5:30:8c:21:4c:db:78:5a:5b:
f8:56:16:a0:fe:68:4f:9f:3d:6b:48:4e:9d:55:fd:3e:12:76:
b3:3e:e9:6f:d4:14:a1:cb:0c:4d:89:55:38:84:3e:dd:09:1d:
70:9d:ee:cf:44:c4:cb:9a:e4:b5:50:f3:ad:ce:6d:75:fb:d6:
ed:f9:e6:c4:f7:a8:6d:3d:f0:21:e3:15:4a:7d:4b:09:31:c4:
31:b1:62:98:d2:58:a9:18:c2:45:33:5a:88:df:05:2e:ba:74:
11:16:9b:95:64:02:fa:61:88:88:e1:17:ed:56:7b:02:ee:e2:
58:2e:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 17:46:41 2026 by rpki-client