Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/1SvfQIuiuOxTni_-KM8uL8G8ZQU.roa
File: 1SvfQIuiuOxTni_-KM8uL8G8ZQU.roa (raw, json)
Hash identifier: bbWhabLk9shuLHrnLJbgKXjVH3fDSYnS6jU+VzBUqeY=
Subject key identifier: D5:2B:DF:40:8B:A2:B8:EC:53:9E:2F:FE:28:CF:2E:2F:C1:BC:65:05
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01A01ECED9666939BB6E542BABEC0B9F05C0
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/1SvfQIuiuOxTni_-KM8uL8G8ZQU.roa
Signing time: Thu 20 Aug 2026 10:54:27 +0000
ROA not before: Thu 20 Aug 2026 10:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12993
IP address blocks: 37.203.32.0/21 maxlen: 21
37.203.32.0/23 maxlen: 23
37.203.37.0/24 maxlen: 24
37.203.38.0/24 maxlen: 24
37.203.39.0/24 maxlen: 24
81.94.224.0/20 maxlen: 20
81.94.229.0/24 maxlen: 24
89.111.0.0/18 maxlen: 18
89.111.22.0/24 maxlen: 24
89.111.25.0/24 maxlen: 24
89.111.26.0/24 maxlen: 24
89.111.38.0/24 maxlen: 24
178.16.16.0/20 maxlen: 20
185.34.24.0/22 maxlen: 22
185.34.24.0/23 maxlen: 23
185.34.26.0/23 maxlen: 23
185.219.156.0/22 maxlen: 22
193.108.144.0/22 maxlen: 24
193.108.144.0/23 maxlen: 23
193.108.146.0/24 maxlen: 24
193.108.185.0/24 maxlen: 24
194.9.175.0/24 maxlen: 24
2a00:17c0::/32 maxlen: 32
2a00:17c0:d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:ce:d9:66:69:39:bb:6e:54:2b:ab:ec:0b:9f:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Aug 20 10:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d52bdf408ba2b8ec539e2ffe28cf2e2fc1bc6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:a2:35:fd:d7:ad:08:5b:9e:73:ab:d2:dd:
b7:8c:31:42:76:78:bb:25:a2:43:0c:a3:e1:a9:80:
93:5b:91:18:1b:b2:ab:07:b1:5b:8a:45:ec:e8:c4:
42:27:a3:13:5a:f9:9a:5c:e6:32:43:b3:d4:9b:2e:
76:a7:0b:e8:10:9f:75:d1:64:b1:85:ed:4a:4e:ee:
9d:b9:c5:5d:e8:2b:df:6b:5e:9a:75:42:c5:e1:1b:
2b:80:f2:34:fc:97:13:ac:49:0d:66:77:b1:04:c9:
97:bf:76:f4:11:b5:b1:65:43:e9:20:24:9e:9d:3f:
0f:8a:58:88:e9:2a:d3:1c:09:c7:a0:2e:56:01:77:
1c:48:f2:f5:27:fb:c2:c2:03:16:a1:23:9c:8f:3e:
ed:91:90:06:d4:85:c0:2c:60:19:d0:32:bf:54:bb:
22:21:f5:b8:d6:2b:f8:55:49:04:2a:51:f6:ec:49:
e1:d7:b0:30:22:6b:fe:db:c4:70:cb:76:9e:a5:ac:
10:3d:c2:85:c2:92:79:da:a1:33:a0:1a:e1:c7:6b:
d3:cd:dd:c1:16:15:87:5f:23:bc:c2:b7:50:f2:48:
f7:d5:b6:6e:bf:71:eb:b9:bf:ee:50:10:3d:ec:09:
c7:4e:6a:eb:da:c8:e5:32:3b:21:3d:d8:0a:e5:d6:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:DF:40:8B:A2:B8:EC:53:9E:2F:FE:28:CF:2E:2F:C1:BC:65:05
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/1SvfQIuiuOxTni_-KM8uL8G8ZQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.32.0/21
81.94.224.0/20
89.111.0.0/18
178.16.16.0/20
185.34.24.0/22
185.219.156.0/22
193.108.144.0/22
193.108.185.0/24
194.9.175.0/24
IPv6:
2a00:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:58:4f:88:dc:c5:60:57:e3:68:fb:db:1d:04:c0:8f:cd:15:
70:bd:1d:a1:c7:3c:63:9b:36:be:08:1c:b8:42:e1:8d:e0:04:
ae:d3:6f:f3:e3:f3:d9:bf:3e:44:40:7f:37:44:c2:72:53:b3:
88:10:4f:13:4b:94:e8:e6:47:f4:6a:df:86:70:0c:5f:4e:1a:
ed:ef:92:fe:67:d3:cc:10:3a:04:2f:34:a1:2e:d9:84:2a:e5:
14:ca:67:01:10:65:cc:9c:73:ac:bf:74:8c:4b:91:c5:a4:2b:
3d:d8:28:7f:ec:8b:36:04:a3:c6:b9:e4:ee:26:cf:6f:09:d4:
91:29:74:40:c2:78:27:06:33:e0:32:61:fe:27:c8:42:9b:fe:
04:08:db:35:95:53:73:2c:7a:2d:14:d5:5c:51:15:62:d1:2e:
1e:61:76:10:5c:6b:83:96:3f:5b:21:9d:b3:37:5b:62:2e:91:
06:0b:e8:48:6d:ce:ab:b3:0f:2e:72:66:c5:a1:b8:c9:fa:05:
60:78:4d:73:32:f5:6f:54:b0:77:0d:ff:5a:da:a3:bb:39:25:
7f:21:4f:c5:b3:8f:b1:92:03:2d:43:a7:1c:06:5a:1e:a2:eb:
75:88:8c:f0:90:ad:5f:59:84:91:e7:37:90:2a:5a:d4:9b:cf:
6f:09:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:59:59 2026 by rpki-client