Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FH6p3-Q761dUUMbV5YfPBsN2ZaY.roa
File: FH6p3-Q761dUUMbV5YfPBsN2ZaY.roa (raw, json)
Hash identifier: vBdTAYbP4zPWatMGkPwm5QMLr+v5AKj+N7Htr+jaXzE=
Subject key identifier: 14:7E:A9:DF:E4:3B:EB:57:54:50:C6:D5:E5:87:CF:06:C3:76:65:A6
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A0E17B1337816652A56AAB5C80D3E364B3
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FH6p3-Q761dUUMbV5YfPBsN2ZaY.roa
Signing time: Sun 27 Sep 2026 06:08:54 +0000
ROA not before: Sun 27 Sep 2026 06:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213732
IP address blocks: 37.32.42.0/24 maxlen: 24
37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
178.239.149.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.157.0/24 maxlen: 24
185.243.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:7b:13:37:81:66:52:a5:6a:ab:5c:80:d3:e3:64:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 27 06:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=147ea9dfe43beb575450c6d5e587cf06c37665a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:7c:08:a9:eb:c2:49:d9:34:37:82:f8:98:
2b:fd:34:03:61:47:ee:60:36:ea:d4:d3:cb:c8:83:
d1:cf:3d:db:a0:5f:3c:02:fb:7e:20:f9:e3:ff:11:
21:f9:1c:1f:7d:0a:db:13:6c:31:9e:61:3f:eb:a5:
2b:01:7c:85:b3:d7:19:91:6f:a1:cb:a9:0c:b3:38:
ed:34:f1:8a:67:83:ad:b8:c9:c7:d4:00:e6:8e:fe:
67:6d:66:20:4f:86:48:df:6c:37:0f:89:28:ac:a2:
45:e3:b7:d5:bb:2c:50:0d:cf:db:03:3e:45:ac:95:
fb:35:7e:30:6c:2e:fb:07:cc:14:ac:7a:a3:bd:20:
db:5f:3e:06:68:bc:c1:38:f4:66:87:ce:79:37:32:
03:0c:47:44:2f:65:fb:14:9c:0b:94:cb:1a:50:07:
57:fd:af:b1:78:9d:67:29:8a:09:8c:6c:67:d2:60:
f7:a2:8c:64:15:6d:cc:f5:91:a9:53:86:17:99:85:
40:3f:05:0e:79:77:f6:4f:cf:fb:d0:8d:e9:98:e8:
7d:f9:39:cc:d8:2d:53:98:db:6f:de:b4:7a:d1:30:
6e:6a:e2:03:09:66:34:f8:f9:a3:a3:5b:8a:f2:de:
aa:c3:b6:6f:c7:00:15:42:30:e8:ba:86:74:af:e5:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:A9:DF:E4:3B:EB:57:54:50:C6:D5:E5:87:CF:06:C3:76:65:A6
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FH6p3-Q761dUUMbV5YfPBsN2ZaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.42.0/24
37.32.44.0/23
178.239.149.0-178.239.150.255
178.239.157.0/24
185.243.49.0/24
Signature Algorithm: sha256WithRSAEncryption
88:80:a6:e1:01:6b:11:01:e5:a2:db:d8:35:95:8e:65:5c:e7:
13:6b:7a:33:b3:81:ab:dd:3a:6f:01:98:78:bb:3e:e9:02:e4:
ad:cc:45:07:5a:5f:54:ca:25:7f:25:8b:70:75:be:35:e8:1f:
ad:06:88:c6:64:d8:95:75:20:fd:fb:89:c5:c4:29:16:25:35:
7a:9e:81:66:8c:e3:ff:85:b4:91:19:92:a0:93:31:23:d9:1a:
08:72:33:69:ef:ae:de:37:1c:7d:a1:03:23:d2:2c:87:20:0c:
74:ef:94:5b:56:ed:b9:28:bf:32:50:cd:58:2a:66:08:06:d3:
34:c6:b8:a8:d5:83:76:fb:f5:d3:d8:cf:de:8f:3a:48:6a:3e:
74:eb:f8:49:ec:25:c2:5f:fa:9d:39:9d:8e:0a:35:65:4f:57:
fb:f7:6e:cc:fd:fc:f0:66:b5:0a:e1:f3:13:78:b8:3a:97:25:
78:fb:0c:d5:60:f8:2e:3d:ba:7a:ad:0c:56:1d:db:ef:e0:be:
7d:fc:de:ea:89:e3:54:82:65:68:2b:72:74:ee:19:9a:a9:6f:
67:f5:e3:7d:1f:46:f8:38:11:f6:72:b0:14:9c:e8:15:b5:7e:
8d:cd:82:24:0c:af:21:af:e7:ac:d2:7c:1b:28:14:eb:3a:0a:
09:10:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:26 2026 by rpki-client