Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/SJHy8Z4pgOYa2725cUU-voSbrO0.roa
File: SJHy8Z4pgOYa2725cUU-voSbrO0.roa (raw, json)
Hash identifier: YQon4VLpwG8xCn9mQJ3+mnWdYaPabTWtSH7TJkq0upI=
Subject key identifier: 48:91:F2:F1:9E:29:80:E6:1A:DB:BD:B9:71:45:3E:BE:84:9B:AC:ED
Certificate issuer: /CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Certificate serial: 019F2368CE7C04F3A2DD0A94C883B39848CE
Authority key identifier: 98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/SJHy8Z4pgOYa2725cUU-voSbrO0.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210133
IP address blocks: 37.77.173.0/24 maxlen: 24
37.77.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:7c:04:f3:a2:dd:0a:94:c8:83:b3:98:48:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4891f2f19e2980e61adbbdb971453ebe849baced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:23:fb:bf:ff:84:0b:e8:ac:4e:5c:94:80:
a6:bc:29:a4:ba:05:a2:34:7b:ec:d7:ae:dc:2c:14:
02:cd:f7:8b:24:4c:8a:88:63:83:5a:b6:90:82:b2:
7d:15:36:2d:70:fe:83:a8:1c:06:a2:3d:63:30:28:
3a:d2:af:3e:9c:db:1a:74:67:8c:75:f6:fd:e4:93:
ac:16:55:a3:6e:ae:8f:b4:1b:5e:bb:7e:a7:ac:c2:
6f:18:38:bd:68:65:40:9f:63:f0:96:de:b9:a2:59:
4b:19:c4:a7:38:dd:57:a6:d3:9c:20:1b:17:05:59:
6f:a8:71:9a:4f:c9:da:9d:66:c2:ab:29:9b:7b:de:
b0:84:e4:46:ac:61:cf:39:b3:70:c9:10:3a:c5:b6:
4d:17:3d:18:17:09:1d:16:48:78:c7:03:c5:e6:12:
96:73:86:75:8d:63:89:64:e0:37:ee:c6:77:b8:51:
ab:15:e2:3f:bf:89:3a:65:cf:0d:c6:fc:1c:8d:73:
a4:3b:02:d6:3c:fa:62:96:6b:75:36:21:2c:3e:15:
b7:03:9d:11:74:0a:e9:fb:bb:aa:df:45:e2:c9:89:
1e:a8:e7:41:01:ba:f4:c9:3b:b8:7e:39:e8:dd:7c:
06:14:6c:89:9d:a7:dd:d2:74:f5:90:7e:4a:b1:b8:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:F2:F1:9E:29:80:E6:1A:DB:BD:B9:71:45:3E:BE:84:9B:AC:ED
X509v3 Authority Key Identifier:
keyid:98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/SJHy8Z4pgOYa2725cUU-voSbrO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.173.0-37.77.174.255
Signature Algorithm: sha256WithRSAEncryption
15:d7:70:c9:91:bc:04:03:77:4c:d0:d8:92:7a:d5:04:be:71:
44:0b:44:88:b4:7c:55:76:40:12:32:3b:6a:38:65:42:2b:92:
45:57:33:a5:c2:09:30:a5:9a:6c:a4:c2:72:41:a0:90:73:ed:
fa:df:b6:6e:bd:77:f8:d4:e5:f6:3e:37:1e:1e:64:91:9d:75:
6d:75:f1:bf:02:d1:7e:d4:13:f4:8d:14:bd:fe:c7:4e:79:74:
7d:96:10:42:05:47:e3:47:b1:8f:0c:6d:97:f6:e2:59:40:e4:
81:b0:da:bd:44:5d:11:2c:3d:af:5c:40:22:26:17:c4:e6:69:
3a:44:f0:fc:00:15:2c:01:81:79:64:8d:85:e4:1a:7a:d6:fa:
aa:9b:1f:e3:98:9d:9b:e3:6c:dc:e0:8c:4d:6b:61:9a:cd:52:
57:2c:5d:0a:4b:bb:f2:71:be:34:b7:6b:bf:1b:dc:fd:bb:49:
c8:f6:9b:86:c0:38:47:65:5b:93:39:28:ec:37:17:31:69:82:
82:1e:91:c5:e1:d7:19:34:1e:37:cb:ee:fb:06:4f:cd:95:da:
d1:d4:fd:76:df:b2:b5:2f:a7:cb:2d:59:07:89:21:0f:d6:48:
eb:ae:05:e2:4f:18:82:99:1f:d7:a1:7f:73:56:f5:bc:33:0b:
a5:6a:c8:22
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaM58BPOi3QqUyIOzmEjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmFjYWZmZjIzYTYyYzE5MDNiMWU5NWFmNDBjNmQwODM0
ZTVlMzIwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODkxZjJmMTllMjk4MGU2MWFkYmJkYjk3MTQ1M2ViZTg0OWJhY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld8j+7//hAvorE5clICmvCmkugWi
NHvs167cLBQCzfeLJEyKiGODWraQgrJ9FTYtcP6DqBwGoj1jMCg60q8+nNsadGeM
dfb95JOsFlWjbq6PtBteu36nrMJvGDi9aGVAn2Pwlt65ollLGcSnON1XptOcIBsX
BVlvqHGaT8nanWbCqymbe96whORGrGHPObNwyRA6xbZNFz0YFwkdFkh4xwPF5hKW
c4Z1jWOJZOA37sZ3uFGrFeI/v4k6Zc8NxvwcjXOkOwLWPPpilmt1NiEsPhW3A50R
dArp+7uq30XiyYkeqOdBAbr0yTu4fjno3XwGFGyJnafd0nT1kH5KsbiemQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEiR8vGeKYDmGtu9uXFFPr6Em6ztMB8GA1UdIwQY
MBaAFJj6yv/yOmLBkDsela9AxtCDTl4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVByS19fSTZZc0dRT3g2VnIwREcwSU5PWGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQt
ODM2YWM5N2MwMWJiLzEvU0pIeThaNHBnT1lhMjcyNWNVVS12b1Nick8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQtODM2YWM5N2MwMWJi
LzEvbVByS19fSTZZc0dRT3g2VnIwREcwSU5PWGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlTa0D
BAAlTa4wDQYJKoZIhvcNAQELBQADggEBABXXcMmRvAQDd0zQ2JJ61QS+cUQLRIi0
fFV2QBIyO2o4ZUIrkkVXM6XCCTClmmykwnJBoJBz7frftm69d/jU5fY+Nx4eZJGd
dW118b8C0X7UE/SNFL3+x055dH2WEEIFR+NHsY8MbZf24llA5IGw2r1EXREsPa9c
QCImF8TmaTpE8PwAFSwBgXlkjYXkGnrW+qqbH+OYnZvjbNzgjE1rYZrNUlcsXQpL
u/JxvjS3a78b3P27Scj2m4bAOEdlW5M5KOw3FzFpgoIekcXh1xk0HjfL7vsGT82V
2tHU/XbfsrUvp8stWQeJIQ/WSOuuBeJPGIKZH9ehf3NW9bwzC6VqyCI=
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:29:16 2026 by rpki-client