Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/LgR3McOgyTpzCVXi0apdiSU4UhY.roa
File: LgR3McOgyTpzCVXi0apdiSU4UhY.roa (raw, json)
Hash identifier: O6hm7PXUeVsbsroLDw55f/gk3SNtDWgRnBz2fnXsCuw=
Subject key identifier: 2E:04:77:31:C3:A0:C9:3A:73:09:55:E2:D1:AA:5D:89:25:38:52:16
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019FE151A1301FA8B5E0410952E253BBB653
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/LgR3McOgyTpzCVXi0apdiSU4UhY.roa
Signing time: Sat 08 Aug 2026 12:20:51 +0000
ROA not before: Sat 08 Aug 2026 12:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50371
IP address blocks: 37.32.64.0/24 maxlen: 24
37.32.65.0/24 maxlen: 24
37.32.66.0/24 maxlen: 24
37.32.67.0/24 maxlen: 24
37.32.68.0/24 maxlen: 24
37.32.69.0/24 maxlen: 24
37.32.70.0/24 maxlen: 24
37.32.74.0/24 maxlen: 24
185.129.92.0/24 maxlen: 24
2a0f:1300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:51:a1:30:1f:a8:b5:e0:41:09:52:e2:53:bb:b6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Aug 8 12:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e047731c3a0c93a730955e2d1aa5d8925385216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:30:4b:2e:ab:d2:aa:74:e1:3a:34:c7:5b:
b2:ec:c3:12:65:86:9d:ae:27:06:4c:49:bc:cf:7c:
a3:02:21:19:ab:4e:26:35:8e:c0:85:4f:16:43:75:
92:62:66:7f:66:ec:50:c9:00:39:0b:b8:a9:c3:ce:
78:1c:05:d6:e1:57:71:ef:b3:43:91:29:66:f5:01:
9a:4b:6d:4d:b4:55:78:1b:f6:96:3d:ca:78:fb:2c:
3a:b2:9a:01:7e:4a:e6:3c:58:de:15:03:38:89:bf:
31:d0:5f:9a:b3:f7:a6:51:7e:c4:d1:69:e4:08:97:
6a:80:ef:ec:94:f6:b1:2b:28:10:9d:f8:24:b3:e8:
47:b8:fa:32:94:05:ad:00:8e:11:c8:5c:07:45:2b:
a5:3f:09:54:d4:65:0f:17:4e:a9:82:e6:55:45:4b:
e6:ae:7e:95:98:c0:e1:08:ad:17:2a:c8:96:72:7c:
65:6a:e6:ca:a7:53:88:a8:53:74:91:ec:1f:d8:24:
56:0a:80:51:5c:32:53:7b:78:17:52:69:7c:f5:53:
24:37:db:07:13:65:b2:ed:51:c3:b1:04:e0:95:54:
e6:3a:08:04:01:74:82:f6:54:cf:fd:8f:3f:d3:c3:
f8:00:d3:bb:68:36:62:b9:66:2b:9e:a3:a3:ad:26:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:04:77:31:C3:A0:C9:3A:73:09:55:E2:D1:AA:5D:89:25:38:52:16
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/LgR3McOgyTpzCVXi0apdiSU4UhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.64.0-37.32.70.255
37.32.74.0/24
185.129.92.0/24
IPv6:
2a0f:1300::/29
Signature Algorithm: sha256WithRSAEncryption
5b:3a:fd:4d:fe:e5:9c:65:da:61:2b:58:c0:bc:5a:cc:a0:86:
19:e9:f9:4d:b8:e7:5a:9a:76:c5:ee:39:4e:6e:74:42:c1:8c:
d4:a8:6c:02:b3:97:20:3a:8d:b2:d6:e7:5c:92:f5:f4:c2:c6:
db:5e:35:70:2b:89:71:f6:73:e6:4e:d1:07:01:db:4a:08:59:
95:ec:99:ef:5b:aa:79:4f:ce:b2:59:7e:f6:24:5b:e1:96:3f:
7b:4b:94:8d:2d:40:45:1b:09:dd:ae:b8:a9:6e:27:e7:b8:d9:
2e:a8:5d:b0:c8:39:ae:2e:42:da:64:7c:27:25:5e:7e:36:c4:
53:43:75:05:f5:b3:d6:5d:ce:0d:d3:0c:d8:7a:b2:ed:ab:8c:
b8:17:ba:5c:ea:cf:41:79:4c:45:0b:b1:95:98:7c:7b:4e:f4:
76:b4:59:e6:62:8f:80:ce:d5:cb:1c:08:a5:74:55:33:d1:22:
56:44:00:a7:1c:1b:02:40:52:e8:d5:78:b6:db:83:e1:09:1b:
3c:c8:38:63:67:bc:dd:16:3e:98:88:ee:6c:45:4f:94:3e:f2:
4d:53:c7:ea:8c:2d:b5:cf:8a:06:41:85:a1:a9:2d:ef:30:9d:
e4:f8:d3:ed:80:9d:33:1f:29:ff:ce:37:88:2d:cf:98:1f:50:
de:27:e8:ef
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZ/hUaEwH6i14EEJUuJTu7ZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3
MzVkN2QwHhcNMjYwODA4MTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTA0NzczMWMzYTBjOTNhNzMwOTU1ZTJkMWFhNWQ4OTI1Mzg1MjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJkwSy6r0qp04To0x1uy7MMSZYad
ricGTEm8z3yjAiEZq04mNY7AhU8WQ3WSYmZ/ZuxQyQA5C7ipw854HAXW4Vdx77ND
kSlm9QGaS21NtFV4G/aWPcp4+yw6spoBfkrmPFjeFQM4ib8x0F+as/emUX7E0Wnk
CJdqgO/slPaxKygQnfgks+hHuPoylAWtAI4RyFwHRSulPwlU1GUPF06pguZVRUvm
rn6VmMDhCK0XKsiWcnxlaubKp1OIqFN0kewf2CRWCoBRXDJTe3gXUml89VMkN9sH
E2Wy7VHDsQTglVTmOggEAXSC9lTP/Y8/08P4ANO7aDZiuWYrnqOjrSYEHwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFC4EdzHDoMk6cwlV4tGqXYklOFIWMB8GA1UdIwQY
MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt
YzdkMTk5MzBkNjZkLzEvTGdSM01jT2d5VHB6Q1ZYaTBhcGRpU1U0VWhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk
LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAYlIEAD
BAAlIEYDBAAlIEoDBAC5gVwwDQQCAAIwBwMFAyoPEwAwDQYJKoZIhvcNAQELBQAD
ggEBAFs6/U3+5Zxl2mErWMC8Wsyghhnp+U2451qadsXuOU5udELBjNSobAKzlyA6
jbLW51yS9fTCxtteNXAriXH2c+ZO0QcB20oIWZXsme9bqnlPzrJZfvYkW+GWP3tL
lI0tQEUbCd2uuKluJ+e42S6oXbDIOa4uQtpkfCclXn42xFNDdQX1s9Zdzg3TDNh6
su2rjLgXulzqz0F5TEULsZWYfHtO9Ha0WeZij4DO1cscCKV0VTPRIlZEAKccGwJA
UujVeLbbg+EJGzzIOGNnvN0WPpiI7mxFT5Q+8k1Tx+qMLbXPigZBhaGpLe8wneT4
0+2AnTMfKf/ON4gtz5gfUN4n6O8=
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:48 2026 by rpki-client