Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/RVhpibwwZNcyzm7FikQ_yr51HfU.roa
File: RVhpibwwZNcyzm7FikQ_yr51HfU.roa (raw, json)
Hash identifier: paCjgsQWd0mm8hw6SQI64zgACw/JjaQOlk5xWiSvqHc=
Subject key identifier: 45:58:69:89:BC:30:64:D7:32:CE:6E:C5:8A:44:3F:CA:BE:75:1D:F5
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01A014E15A7B75B830EDE7E8B45B8A7D8870
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/RVhpibwwZNcyzm7FikQ_yr51HfU.roa
Signing time: Tue 18 Aug 2026 12:38:28 +0000
ROA not before: Tue 18 Aug 2026 12:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9049
IP address blocks: 37.230.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:e1:5a:7b:75:b8:30:ed:e7:e8:b4:5b:8a:7d:88:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 18 12:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45586989bc3064d732ce6ec58a443fcabe751df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:6c:ad:4e:51:6d:66:9c:6e:e2:72:cf:5b:
93:cd:92:cc:15:d2:52:0a:8b:50:30:46:ad:ab:16:
64:8a:db:e9:3b:80:89:df:d3:96:e6:6b:e5:cb:c7:
5d:24:d6:dd:5f:2d:fc:c4:19:60:86:d0:73:2d:ce:
c4:56:cd:ed:90:25:da:fb:08:00:ed:0d:77:7c:05:
d2:0a:cc:c8:97:10:b6:2d:27:83:fc:81:91:b9:66:
40:16:0b:e6:d2:7c:eb:78:b7:35:81:4b:95:b1:72:
01:7f:58:11:da:22:09:8a:c1:d7:73:9d:0e:62:43:
d9:71:d2:64:01:60:f5:2e:e0:b4:c7:ac:f1:60:a4:
fa:43:32:b7:37:65:5e:40:be:2d:5f:07:26:4b:a8:
b3:2b:5c:f3:e2:6b:ac:6f:d2:ad:8a:63:fb:1b:a5:
8d:b0:31:b3:fe:4f:14:b1:93:7c:3f:4e:72:da:b2:
ea:ff:30:3f:e8:76:2f:f3:ca:73:54:92:cb:4d:3a:
d0:e1:90:c9:61:61:f4:38:85:51:a3:c5:07:58:c7:
c1:4f:06:3c:35:02:2b:b7:fc:96:b7:3e:c4:4a:bc:
ba:e0:17:38:39:7a:1d:cb:91:e7:7b:cb:9f:91:79:
48:8b:45:7b:4d:22:f8:83:ba:8b:a5:3d:19:df:65:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:58:69:89:BC:30:64:D7:32:CE:6E:C5:8A:44:3F:CA:BE:75:1D:F5
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/RVhpibwwZNcyzm7FikQ_yr51HfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f3:be:06:1d:dd:63:07:0f:20:e2:6f:75:83:f4:d6:d7:d6:
75:0f:0c:86:18:28:31:1c:42:08:1a:d8:0a:7f:6e:80:f4:91:
ec:e0:74:93:18:b2:fd:14:78:af:59:7c:8f:7e:18:c5:09:f7:
8c:9d:2b:60:c0:c7:0d:a7:fc:1b:0e:1f:7c:ee:26:32:c1:02:
cb:44:49:7c:f7:e8:c2:84:19:22:63:0c:a9:be:bd:e9:88:f5:
34:f2:7c:7c:67:f4:d1:00:f9:66:cf:35:2f:17:79:fd:7a:e5:
9d:40:48:a8:54:0c:6d:1a:7e:fa:ff:dc:5e:b1:5b:17:e6:49:
91:0d:0a:b8:fc:cb:f9:02:56:8c:16:41:b6:83:6f:0c:d9:bf:
f8:89:6b:b3:f8:6e:e3:bb:5c:11:e0:62:73:52:e1:16:f4:ae:
be:50:a2:ab:05:27:58:c3:f9:95:8c:7b:f6:aa:9d:56:a8:7d:
87:ac:6e:66:83:3e:76:a6:70:72:50:d9:09:36:ae:a0:74:f0:
d6:ba:68:2c:11:16:40:e6:59:f9:89:4c:60:95:27:ee:d1:be:
2b:ec:40:f4:63:cf:f5:07:fe:92:3c:94:be:5a:62:af:fc:61:
ec:63:94:f1:2f:9c:59:d4:37:02:87:6d:c0:27:7f:86:06:c9:
62:b7:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 18:45:40 2026 by rpki-client