Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/vo7JxYIuloJUCs71gyoUri407fE.roa
File: vo7JxYIuloJUCs71gyoUri407fE.roa (raw, json)
Hash identifier: 5h3sm9pEmBSWqYEnujmbvxhXNPjFplm9ATmCzzG16ZM=
Subject key identifier: BE:8E:C9:C5:82:2E:96:82:54:0A:CE:F5:83:2A:14:AE:2E:34:ED:F1
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A1352666268C1AE548E6E4CD512BB603BF
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/vo7JxYIuloJUCs71gyoUri407fE.roa
Signing time: Tue 13 Oct 2026 12:04:31 +0000
ROA not before: Tue 13 Oct 2026 12:04:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31463
IP address blocks: 37.209.208.0/20 maxlen: 20
45.140.136.0/22 maxlen: 22
46.245.248.0/21 maxlen: 21
79.99.64.0/21 maxlen: 21
94.228.32.0/20 maxlen: 20
94.228.38.0/24 maxlen: 24
109.74.20.0/22 maxlen: 22
178.17.32.0/20 maxlen: 20
178.17.36.0/24 maxlen: 24
178.17.39.0/24 maxlen: 24
178.251.32.0/21 maxlen: 21
185.4.128.0/22 maxlen: 22
185.34.208.0/22 maxlen: 22
185.160.164.0/22 maxlen: 22
185.167.228.0/22 maxlen: 22
2a00:1c18::/29 maxlen: 29
2a00:1c18::/32 maxlen: 32
2a00:1c18:333::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:26:66:26:8c:1a:e5:48:e6:e4:cd:51:2b:b6:03:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Oct 13 12:04:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be8ec9c5822e9682540acef5832a14ae2e34edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:28:06:8c:bc:da:5e:dd:a9:e5:06:3e:e8:
e3:0c:86:04:a1:6d:35:1b:22:fa:c0:e3:90:c9:49:
1c:20:eb:06:e7:08:8f:cc:9a:d5:ff:a2:87:eb:eb:
92:86:20:7f:60:b4:40:2f:89:6e:c1:98:02:42:5f:
fa:cb:f4:ce:e1:43:99:5f:9c:6a:4e:a8:2d:38:00:
5b:2c:85:97:32:03:2a:30:22:fd:e6:96:0e:e3:9c:
1a:cc:44:bc:75:65:25:d8:10:5f:d8:71:3f:6b:84:
3f:27:0a:dd:06:06:59:41:2e:a1:1b:7c:15:25:eb:
64:2a:e5:d7:89:96:b2:e2:38:24:11:e2:4f:62:0e:
61:7b:f8:b8:41:76:58:2d:08:3e:89:26:45:56:c7:
b2:59:2d:61:2f:f1:3e:83:ca:65:52:c6:c5:3e:7b:
9a:2a:f1:01:ef:ec:46:51:52:dd:c5:41:71:99:43:
f9:e7:07:61:7b:52:5f:ee:4f:28:a3:95:3b:40:f2:
f3:8a:08:b5:40:a9:f7:ab:e8:6c:3d:2b:04:3d:27:
54:02:94:32:9c:98:a0:54:d4:6d:2d:de:bb:df:ed:
5f:96:6a:2c:59:f6:d5:e4:9a:8d:44:f6:38:3a:b4:
cc:84:08:49:13:04:8a:9b:d1:18:8c:d8:81:ec:9c:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:C9:C5:82:2E:96:82:54:0A:CE:F5:83:2A:14:AE:2E:34:ED:F1
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/vo7JxYIuloJUCs71gyoUri407fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.208.0/20
45.140.136.0/22
46.245.248.0/21
79.99.64.0/21
94.228.32.0/20
109.74.20.0/22
178.17.32.0/20
178.251.32.0/21
185.4.128.0/22
185.34.208.0/22
185.160.164.0/22
185.167.228.0/22
IPv6:
2a00:1c18::/29
Signature Algorithm: sha256WithRSAEncryption
30:b2:15:4c:21:6f:d6:63:da:c2:80:46:c8:3a:0a:ad:7a:3a:
e2:66:57:7b:d8:7f:b5:38:4a:1e:ca:7d:00:60:db:c6:51:aa:
1e:37:33:33:f9:48:cb:36:b7:93:30:65:d4:ff:7c:47:bf:b7:
71:e6:4c:21:ff:cf:38:dd:9d:f4:48:d0:21:db:28:91:00:1c:
71:b3:14:24:a7:83:33:fe:94:47:46:bd:6f:96:e1:1b:0a:36:
32:4a:c3:12:1b:65:90:e7:f4:8d:66:cf:7e:84:10:c2:93:fc:
a0:ef:3a:06:ed:87:a9:83:4f:c9:cb:d5:18:f4:6f:bb:33:2a:
0c:b8:f0:a2:6b:00:22:cc:d0:1b:af:77:60:c6:ab:c3:8f:42:
a4:1b:c9:d2:69:9e:dc:8f:76:57:5d:ca:12:8b:1d:c7:ca:db:
5c:91:5e:e7:ad:a6:49:d2:04:16:80:df:5f:60:7d:78:5c:c5:
11:3b:7a:d8:d5:a8:31:cf:07:b4:a8:84:0f:ec:2c:91:72:c4:
13:4a:d6:e2:db:ae:e3:13:f1:5d:65:33:52:62:0c:2f:ea:a4:
27:8a:0b:23:b1:f4:53:77:9f:72:ad:cc:bc:68:cf:fa:b5:9b:
7d:1f:72:2a:e4:70:13:1a:26:5e:8d:34:7b:a7:6a:4d:70:40:
11:87:1c:ce
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAaE1JmYmjBrlSObkzVErtgO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODdhNjg4YTg5YTk4OTk0OTQxNmE4MTljYzRhODBkZWE0
NTRjOWQwHhcNMjYxMDEzMTIwNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZThlYzljNTgyMmU5NjgyNTQwYWNlZjU4MzJhMTRhZTJlMzRlZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y0oBoy82l7dqeUGPujjDIYEoW01
GyL6wOOQyUkcIOsG5wiPzJrV/6KH6+uShiB/YLRAL4luwZgCQl/6y/TO4UOZX5xq
TqgtOABbLIWXMgMqMCL95pYO45wazES8dWUl2BBf2HE/a4Q/JwrdBgZZQS6hG3wV
JetkKuXXiZay4jgkEeJPYg5he/i4QXZYLQg+iSZFVseyWS1hL/E+g8plUsbFPnua
KvEB7+xGUVLdxUFxmUP55wdhe1Jf7k8oo5U7QPLzigi1QKn3q+hsPSsEPSdUApQy
nJigVNRtLd673+1flmosWfbV5JqNRPY4OrTMhAhJEwSKm9EYjNiB7Jxv3QIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFL6OycWCLpaCVArO9YMqFK4uNO3xMB8GA1UdIwQY
MBaAFEWHpoiompiZSUFqgZzEqA3qRUydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAt
MmY3MjU5NTYxNDhmLzEvdm83SnhZSXVsb0pVQ3M3MWd5b1VyaTQwN2ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAtMmY3MjU5NTYxNDhm
LzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQEJdHQAwQC
LYyIAwQDLvX4AwQDT2NAAwQEXuQgAwQCbUoUAwQEshEgAwQDsvsgAwQCuQSAAwQC
uSLQAwQCuaCkAwQCuafkMA0EAgACMAcDBQMqABwYMA0GCSqGSIb3DQEBCwUAA4IB
AQAwshVMIW/WY9rCgEbIOgqtejriZld72H+1OEoeyn0AYNvGUaoeNzMz+UjLNreT
MGXU/3xHv7dx5kwh/8843Z30SNAh2yiRABxxsxQkp4Mz/pRHRr1vluEbCjYySsMS
G2WQ5/SNZs9+hBDCk/yg7zoG7Yepg0/Jy9UY9G+7MyoMuPCiawAizNAbr3dgxqvD
j0KkG8nSaZ7cj3ZXXcoSix3HyttckV7nraZJ0gQWgN9fYH14XMURO3rY1agxzwe0
qIQP7CyRcsQTStbi267jE/FdZTNSYgwv6qQnigsjsfRTd59yrcy8aM/6tZt9H3Iq
5HATGiZejTR7p2pNcEARhxzO
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:28 2026 by rpki-client