Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hPTujfqwEvsarY7zwdkx10gMbms.roa
File: hPTujfqwEvsarY7zwdkx10gMbms.roa (raw, json)
Hash identifier: MEX9ud/7OcyIfTv0ZBSG58w972jPW1ORCDstt6sBO/w=
Subject key identifier: 84:F4:EE:8D:FA:B0:12:FB:1A:AD:8E:F3:C1:D9:31:D7:48:0C:6E:6B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A02CFC01DBD8EED0E467DF74598B8A1ACD
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hPTujfqwEvsarY7zwdkx10gMbms.roa
Signing time: Sun 23 Aug 2026 04:58:28 +0000
ROA not before: Sun 23 Aug 2026 04:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215285
IP address blocks: 37.32.40.0/24 maxlen: 24
185.124.174.0/24 maxlen: 24
185.215.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2c:fc:01:db:d8:ee:d0:e4:67:df:74:59:8b:8a:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 23 04:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84f4ee8dfab012fb1aad8ef3c1d931d7480c6e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:49:03:27:f9:c6:9a:d8:58:8d:f8:62:c7:
98:21:c7:36:66:2b:64:6b:e4:02:ba:34:f0:56:06:
e4:04:d4:f3:92:94:7d:24:6a:4f:cb:3f:69:f8:2f:
13:4d:48:c4:ca:ad:af:31:ae:1f:4e:88:6a:1e:f7:
61:37:4d:6d:c8:70:8c:6c:5a:98:49:ad:a4:aa:33:
56:bf:45:43:53:20:e5:4d:22:12:e9:1c:68:0a:7b:
7c:18:7e:39:71:df:c5:a1:04:79:9b:d2:bc:2f:7b:
45:59:88:9b:ca:38:c2:ec:e9:30:f9:b4:14:a1:88:
65:86:bd:01:b9:b6:6e:d7:30:75:40:4b:f2:3c:5f:
71:66:38:b6:3e:fc:28:03:ce:fb:95:ab:f1:a3:fd:
8b:1f:1b:be:5e:71:5a:ec:93:62:79:91:d3:a5:e2:
f5:24:9a:e8:1f:1c:7d:12:29:e3:ef:0a:17:a1:39:
69:88:23:9c:1d:c2:6b:ff:ca:a0:6f:9a:93:22:ea:
ca:b2:66:b5:5c:f7:8e:9b:8e:a7:ad:0c:b2:bd:78:
bb:47:de:14:40:c9:06:d4:fe:11:8e:db:65:7b:f0:
3f:36:22:48:c9:fe:5d:9b:21:8e:9c:ed:b0:b8:ad:
7d:8e:c6:72:1f:a8:dd:eb:c7:e5:00:ad:c0:81:2e:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:EE:8D:FA:B0:12:FB:1A:AD:8E:F3:C1:D9:31:D7:48:0C:6E:6B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hPTujfqwEvsarY7zwdkx10gMbms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.40.0/24
185.124.174.0/24
185.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
83:66:c3:88:63:3d:e7:83:d2:f9:63:ce:34:2a:61:ec:f0:de:
e6:4d:47:c1:48:5c:18:57:81:5a:91:23:68:56:d6:f1:09:61:
81:f1:50:f6:df:8c:69:3a:75:c9:6c:34:01:57:0a:86:4a:32:
58:07:77:5f:a4:48:2c:f5:e4:b8:15:34:15:c8:68:6d:55:55:
35:46:e8:b9:d5:86:3f:af:1d:4c:82:22:b4:ef:bb:2f:48:4e:
d9:32:b4:76:10:0f:49:0f:91:86:0d:e0:51:83:f9:9f:2d:95:
49:97:58:8e:8c:b0:75:1e:6c:ae:3f:7d:4a:52:86:86:f4:4c:
c4:5e:20:ac:84:07:ae:88:eb:af:55:1f:1b:27:6c:6c:a9:c4:
e5:b9:28:37:b7:cb:14:94:ef:f9:44:cd:70:b1:dc:ea:93:fe:
74:a3:f5:fb:25:32:77:f3:18:89:74:3d:69:64:6e:51:cb:bb:
41:69:a3:f9:11:35:e9:37:87:47:32:25:32:2a:b0:f5:a1:0a:
55:84:d4:47:86:b0:ba:da:4a:fc:5e:f7:70:df:16:fa:c7:9e:
4e:75:f6:67:7a:3f:f9:5e:de:3f:2d:58:c4:9d:de:1a:b5:88:
39:5f:0b:00:17:82:71:46:73:16:eb:31:54:1f:81:22:28:60:
1a:a0:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:01 2026 by rpki-client