Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/7YLSJcQGBA653iyy1fHxIGb92P0.roa
File: 7YLSJcQGBA653iyy1fHxIGb92P0.roa (raw, json)
Hash identifier: h4RVKl8L8VOgh9a6P3PTZvMiWUsau7R0BpqtJhT+8/Y=
Subject key identifier: ED:82:D2:25:C4:06:04:0E:B9:DE:2C:B2:D5:F1:F1:20:66:FD:D8:FD
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019FE14D0E16DB64A10C3D1427621C38DFB5
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/7YLSJcQGBA653iyy1fHxIGb92P0.roa
Signing time: Sat 08 Aug 2026 12:15:51 +0000
ROA not before: Sat 08 Aug 2026 12:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57675
IP address blocks: 37.32.64.0/24 maxlen: 24
37.32.65.0/24 maxlen: 24
37.32.66.0/24 maxlen: 24
37.32.67.0/24 maxlen: 24
37.32.68.0/24 maxlen: 24
37.32.69.0/24 maxlen: 24
37.32.70.0/24 maxlen: 24
37.32.74.0/24 maxlen: 24
185.129.92.0/24 maxlen: 24
2a0f:1300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:4d:0e:16:db:64:a1:0c:3d:14:27:62:1c:38:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Aug 8 12:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed82d225c406040eb9de2cb2d5f1f12066fdd8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:02:d2:08:41:9e:c3:3a:8a:66:df:c2:0a:
8d:36:16:8c:3f:0a:5f:d2:50:2f:26:b7:67:3d:ca:
e9:f5:2a:6e:86:b2:d0:38:f8:7f:a3:00:f0:8b:e3:
2e:3b:bf:3e:2a:50:c7:6a:e3:50:fc:73:96:3e:45:
77:b5:fb:6f:dd:c0:75:4e:fd:e6:67:43:b0:3d:e1:
c6:0b:1e:46:8b:80:2a:4f:45:76:23:ec:c7:85:6a:
db:8d:ff:2d:47:01:30:5b:0e:43:9f:b7:11:25:4e:
40:59:bb:bd:bf:43:75:bb:a0:f1:fd:ca:9b:b1:18:
3d:d6:77:ea:e3:69:30:79:99:a4:d8:67:d3:8e:7e:
5d:22:4c:d8:03:e9:02:1d:6a:a3:79:fe:5d:d3:4b:
f4:a3:9c:4b:c3:44:31:c8:89:c9:49:83:8d:b2:65:
2b:e2:7a:c1:26:e7:a1:d3:d9:8c:0b:8e:09:9b:24:
91:c8:e9:cc:6f:43:0c:f3:77:b0:b6:5b:95:03:66:
0c:fe:24:6d:e2:77:42:61:c0:00:42:4c:bb:13:ca:
3f:e2:cd:2b:e3:16:7d:c1:d3:41:ac:7f:80:94:a2:
80:cf:36:d8:89:f8:b3:ee:f7:cc:ab:b8:30:d6:0f:
10:31:bb:ea:d5:57:c0:fd:59:6b:7a:e9:60:f9:83:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:D2:25:C4:06:04:0E:B9:DE:2C:B2:D5:F1:F1:20:66:FD:D8:FD
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/7YLSJcQGBA653iyy1fHxIGb92P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.64.0-37.32.70.255
37.32.74.0/24
185.129.92.0/24
IPv6:
2a0f:1300::/29
Signature Algorithm: sha256WithRSAEncryption
13:c9:9c:8d:81:58:82:cd:16:0b:c2:41:a7:aa:ae:35:13:e4:
c6:a2:68:53:1b:1f:ec:8c:57:f1:db:d4:7e:9a:18:e0:5b:2f:
76:ea:ec:27:f6:1c:c7:2a:fc:91:33:26:ed:9b:4d:a2:3c:df:
28:38:34:bd:01:ef:21:b2:d1:ce:82:34:70:b3:1a:fc:63:8d:
bc:1e:94:9e:05:7f:89:e0:74:39:7d:84:b9:ad:a9:a7:4b:f7:
f2:a6:27:8b:55:f6:e3:19:06:4f:3d:d2:70:74:a7:cf:9b:36:
dd:da:1c:90:7d:be:7c:b0:3e:c9:1f:50:be:25:dc:27:5d:d1:
96:c4:fa:9e:b2:ad:b1:0c:e4:f1:a8:82:88:2c:26:a1:78:e0:
57:62:cf:e8:27:c5:be:f0:ff:29:f5:01:3c:53:04:77:ad:d5:
e0:3c:fc:3d:90:82:c5:ea:82:25:70:f2:b0:3d:38:8d:07:45:
59:0b:4f:1a:f3:22:e3:1b:2d:7b:50:0e:06:cf:e1:c8:b0:18:
d3:61:3a:83:30:82:d9:10:47:76:39:c1:fa:dc:74:dc:7b:fd:
7b:e8:41:76:f9:ec:18:de:b5:d2:5e:c7:9c:95:a6:13:a4:06:
59:e3:a7:c0:2e:63:56:27:dd:e5:aa:b4:4d:a5:93:4c:67:11:
d7:59:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:00 2026 by rpki-client