Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/5RqGEtRwKfBBtUM2GiJcfgd8IHM.roa
File: 5RqGEtRwKfBBtUM2GiJcfgd8IHM.roa (raw, json)
Hash identifier: cxvR146rATBiq7ER+urJkUdPx5qaULwVkMFPi3LbDWg=
Subject key identifier: E5:1A:86:12:D4:70:29:F0:41:B5:43:36:1A:22:5C:7E:07:7C:20:73
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019EB5CD9C9E02D7E737C2542F914D686D6B
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/5RqGEtRwKfBBtUM2GiJcfgd8IHM.roa
Signing time: Thu 11 Jun 2026 08:30:11 +0000
ROA not before: Thu 11 Jun 2026 08:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41655
IP address blocks: 37.153.80.0/21 maxlen: 21
37.153.80.0/24 maxlen: 24
37.153.81.0/24 maxlen: 24
37.153.82.0/24 maxlen: 24
37.153.83.0/24 maxlen: 24
37.153.84.0/24 maxlen: 24
37.153.85.0/24 maxlen: 24
37.153.86.0/24 maxlen: 24
37.153.87.0/24 maxlen: 24
185.224.180.0/22 maxlen: 24
185.224.180.0/24 maxlen: 24
185.224.183.0/24 maxlen: 24
195.8.198.0/23 maxlen: 23
195.8.198.0/24 maxlen: 24
195.8.199.0/24 maxlen: 24
2a00:adc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:cd:9c:9e:02:d7:e7:37:c2:54:2f:91:4d:68:6d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jun 11 08:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51a8612d47029f041b543361a225c7e077c2073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:3a:58:11:eb:80:1a:98:fb:e9:67:2b:0e:
4c:19:d6:5f:2e:cf:47:f2:72:80:ca:c6:1e:06:ee:
53:76:06:a3:8d:45:8b:24:d1:98:0c:7e:3b:ed:50:
59:57:dd:da:98:0e:3b:b8:19:e4:f4:a6:92:27:3a:
32:3c:a9:dc:f4:36:f8:9b:d2:d9:8b:f9:43:b5:39:
3b:bc:61:2f:88:8f:22:ac:dc:e6:6b:fa:18:72:d4:
b0:b4:eb:fe:8f:20:d9:1c:d1:da:7f:a0:c1:2a:b8:
fc:46:64:1b:1b:da:dd:86:75:92:4b:75:27:a9:65:
0d:7d:61:7d:84:54:d0:02:a0:f6:11:62:c6:b8:bf:
f2:9e:f6:ac:4e:c6:c2:15:d0:78:95:1f:88:a8:a6:
9a:04:32:e2:bc:84:c4:84:ad:6b:15:d0:49:02:91:
9e:83:76:1d:51:07:fa:d3:56:05:f3:7f:86:da:8e:
bb:5b:ea:09:36:bc:62:a5:a6:6f:f1:40:f6:91:0b:
16:19:d3:2f:a4:e7:21:9e:22:9d:e9:e5:26:2b:b4:
d9:e3:48:b9:bf:e7:ad:b5:e9:b1:47:ea:96:3e:78:
dd:81:d7:91:60:7a:2a:05:42:f8:43:81:2a:1d:6f:
1c:a9:f4:61:91:9c:3d:bf:76:4f:a4:90:89:7d:a6:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1A:86:12:D4:70:29:F0:41:B5:43:36:1A:22:5C:7E:07:7C:20:73
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/5RqGEtRwKfBBtUM2GiJcfgd8IHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.80.0/21
185.224.180.0/22
195.8.198.0/23
IPv6:
2a00:adc0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:d5:b2:c2:18:f2:fe:31:a2:92:c3:c5:96:f2:e5:10:64:19:
4a:7f:77:54:e1:21:cf:fb:74:78:14:10:c9:48:2b:2c:9e:c8:
5b:bc:34:d6:99:d0:30:59:a3:06:c7:f8:bc:61:90:89:b8:af:
be:17:6a:c2:2e:e6:e4:e5:1d:44:f1:ed:2c:c5:f3:43:61:47:
51:76:af:7b:60:32:34:c4:15:51:d0:3a:54:98:34:b6:cb:42:
2f:5a:c4:b9:98:ba:f5:d4:7b:b0:f9:b6:d5:60:6f:16:6e:12:
cc:c1:ac:e6:d9:91:ca:6c:23:da:d1:ad:59:e6:f1:f8:43:cb:
56:ac:ad:4d:c5:c8:94:3a:f9:ef:da:c4:35:6f:2a:f7:37:22:
99:b3:08:68:ec:7d:59:0e:51:24:28:e9:6a:56:7b:17:3e:41:
0b:3b:7b:4f:fb:bd:2e:18:fe:13:65:4b:cc:8b:88:5e:9c:fe:
f7:de:51:98:56:fe:9b:5c:a4:09:ad:c3:b6:55:05:3f:83:3e:
5a:2a:87:50:c4:ab:a5:4c:96:d5:f4:4f:32:d6:8f:82:16:67:
14:eb:c4:0b:ca:3c:ed:55:80:02:28:d6:ba:0f:2d:26:79:b1:
90:2e:33:9a:aa:cb:5e:8f:28:39:c1:ff:c1:eb:c9:14:5d:fa:
0d:e5:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:24:01 2026 by rpki-client