Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Du34ysNyTmSjgB3HkILAIReNt7Y.roa
File: Du34ysNyTmSjgB3HkILAIReNt7Y.roa (raw, json)
Hash identifier: OykyyRK697s3cdL2JfX4Mtr1TLMMj3IOpkPvvZ+Lrss=
Subject key identifier: 0E:ED:F8:CA:C3:72:4E:64:A3:80:1D:C7:90:82:C0:21:17:8D:B7:B6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A03DD512145D583E7CFF2A1B915CE95487
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Du34ysNyTmSjgB3HkILAIReNt7Y.roa
Signing time: Wed 26 Aug 2026 11:29:29 +0000
ROA not before: Wed 26 Aug 2026 11:29:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37963
IP address blocks: 37.202.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:d5:12:14:5d:58:3e:7c:ff:2a:1b:91:5c:e9:54:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 11:29:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eedf8cac3724e64a3801dc79082c021178db7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4e:d2:8e:22:e5:54:74:c3:ff:0a:70:57:dc:
33:42:af:04:c1:92:fa:01:91:55:82:89:5c:e4:68:
14:4f:a5:ba:59:93:83:4d:85:b6:0c:6b:f6:c0:af:
8a:fd:87:c8:ed:60:a2:6c:98:c2:c6:f5:7c:b1:6f:
82:69:19:2d:52:25:46:83:ac:8f:0f:64:92:7c:f8:
21:db:d0:33:52:96:c3:0b:c9:b1:aa:4a:bd:28:f7:
6b:05:5c:f7:79:fc:23:39:70:43:ef:c9:8c:01:26:
84:97:d3:1f:01:ff:cc:dd:7e:1f:1f:8b:7a:30:a1:
25:51:07:30:d7:fb:fd:80:f5:77:02:cd:67:ab:c3:
3b:9d:5b:8e:4f:02:40:5d:07:1a:c4:ab:d4:80:17:
20:4a:94:0d:49:6c:9a:c7:b6:65:8b:95:7f:de:79:
b5:f5:52:2b:36:6c:d7:7c:b2:3a:c1:26:d0:d9:3b:
94:36:d9:a0:82:ef:e5:0f:0c:f0:b6:ed:e3:10:84:
c2:98:2c:cd:39:8e:36:70:b9:e4:32:bc:70:79:82:
de:33:3b:e5:db:f4:12:75:79:21:14:51:68:2a:d8:
0d:85:d4:b2:dd:07:e5:09:a3:c2:d2:3f:db:a2:e6:
c0:4d:fc:82:57:3a:9d:1d:2e:c5:11:66:fa:a8:0b:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:F8:CA:C3:72:4E:64:A3:80:1D:C7:90:82:C0:21:17:8D:B7:B6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Du34ysNyTmSjgB3HkILAIReNt7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.200.0/24
Signature Algorithm: sha256WithRSAEncryption
39:62:af:7e:46:43:7e:1c:9a:11:ef:08:c6:12:9f:bf:19:cf:
8f:34:90:25:ea:b1:44:60:f1:e3:5d:ee:db:2e:f3:22:e6:2a:
7c:33:ca:73:f3:38:06:f8:65:eb:a5:7c:6e:17:8c:8b:cd:a8:
2c:ec:4a:da:ad:b0:03:23:90:94:52:37:ba:25:33:75:f1:d1:
44:ff:26:67:61:02:97:cd:af:11:16:18:c7:6b:49:c6:40:1c:
42:c9:ae:6b:30:6e:35:ac:17:30:c9:04:74:3c:0e:1c:39:0d:
35:0c:c7:69:54:02:ea:e7:cc:68:19:f5:c5:e9:3b:71:f5:aa:
96:9f:fa:0b:b2:08:d7:ab:e6:a1:a7:95:c5:a0:df:cc:1f:3b:
8b:cb:a6:d8:81:08:fa:b9:1f:e1:31:ac:bc:33:e2:7b:3b:21:
51:7e:a7:ab:e3:06:46:e6:97:a6:45:25:16:61:d3:cc:99:73:
9d:63:f1:2f:9a:b1:47:00:6e:1b:80:45:2f:db:60:50:a5:2c:
ba:eb:20:ee:87:f9:fd:09:f3:2a:3e:11:a6:dc:26:9e:23:f2:
f7:48:96:f7:9a:e2:ae:00:85:ec:ed:2e:24:54:a5:f4:10:66:
e4:73:17:0d:94:b8:dc:48:0a:30:e4:b4:da:e0:ca:81:4b:34:
c9:3b:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:15:26 2026 by rpki-client