Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/SLtzvEbpDSfmyNdbIv7jF6h7zQQ.roa
File: SLtzvEbpDSfmyNdbIv7jF6h7zQQ.roa (raw, json)
Hash identifier: sZOkF+rk8m84yifqvOSNULa4eiHwfH1L3V7WU64TwzE=
Subject key identifier: 48:BB:73:BC:46:E9:0D:27:E6:C8:D7:5B:22:FE:E3:17:A8:7B:CD:04
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A16DC407D8B4C0A589BEBCCDD10DD3186B
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/SLtzvEbpDSfmyNdbIv7jF6h7zQQ.roa
Signing time: Sat 24 Oct 2026 11:55:25 +0000
ROA not before: Sat 24 Oct 2026 11:55:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 37.235.244.0/24 maxlen: 32
37.235.252.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c4:07:d8:b4:c0:a5:89:be:bc:cd:d1:0d:d3:18:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 24 11:55:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48bb73bc46e90d27e6c8d75b22fee317a87bcd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:65:fc:01:43:a0:cc:fd:69:10:20:43:b7:
5e:6b:88:f3:05:87:b2:cc:49:1a:d1:8b:39:92:dd:
7b:12:7a:b2:46:d4:10:c9:a3:95:67:8c:ca:28:94:
cd:af:d4:c0:5e:bd:ee:5f:37:6c:99:08:a4:4e:f7:
68:6e:e2:58:f5:44:8f:28:d9:f0:9a:92:88:f2:c6:
b9:90:75:f7:68:84:df:2d:12:ff:0d:3e:1d:68:da:
08:fc:d9:76:9a:1b:e9:02:ac:00:f4:a5:15:0a:2f:
88:a6:f8:f0:c2:98:36:35:48:8f:eb:47:28:22:82:
8d:34:3f:d5:13:91:be:dc:df:cc:00:06:33:c2:7f:
b5:95:c5:96:c2:de:44:46:de:1a:e1:b3:90:5d:62:
e7:aa:32:31:37:19:af:34:79:5a:e8:e0:29:be:94:
68:78:62:e1:84:6b:50:c5:94:3b:65:b2:17:6d:e9:
cc:c8:26:d0:42:0b:a3:43:18:17:a4:ee:61:ff:27:
c8:aa:e8:ea:a2:95:e7:b8:39:22:d8:6e:96:5a:a8:
74:d9:a0:21:db:10:8a:2d:c7:d1:33:d1:b3:b0:f7:
91:59:5b:d7:18:a3:ef:4d:e4:f4:dc:c2:cf:e7:c7:
8d:86:bb:ef:94:d3:ec:61:d2:af:dc:93:47:f7:cd:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:73:BC:46:E9:0D:27:E6:C8:D7:5B:22:FE:E3:17:A8:7B:CD:04
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/SLtzvEbpDSfmyNdbIv7jF6h7zQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.244.0/24
37.235.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4d:ba:a6:85:e1:74:bf:75:a9:c9:dc:09:3f:ba:24:8a:2c:
c8:26:30:f7:75:a2:2b:fc:95:86:0d:28:92:94:60:3a:77:50:
97:dc:79:f5:b7:f2:c1:3d:e5:00:61:56:50:1d:69:11:eb:7c:
f4:1a:8a:8c:37:cf:6d:4e:6e:e2:92:7f:f1:be:00:4d:28:04:
ed:18:85:21:0a:c1:6b:d7:09:16:1b:2d:4b:db:6b:7a:40:1d:
ff:f9:e2:02:2d:e4:53:dc:f9:ec:53:31:89:6e:2e:54:73:7d:
9d:d6:f3:7a:b4:31:06:f7:64:9c:72:b9:a9:08:d6:b0:73:40:
1e:c5:23:7f:0c:c4:68:9d:5f:4c:f8:2f:c8:19:d2:f4:6d:a4:
f4:f3:d0:f3:40:20:33:ae:42:78:2b:9e:55:44:2c:3f:9e:db:
6c:d6:de:7b:08:af:1d:ab:74:13:c5:d3:b2:a1:72:29:ea:b1:
8f:f0:1b:a7:43:3d:81:c2:77:40:fa:94:ed:d9:92:14:10:86:
71:c6:96:9f:0e:f4:33:99:9a:f9:51:b7:f3:a0:b6:89:44:3e:
99:6d:65:0b:63:42:6a:a0:d3:f1:b4:52:cb:e6:fc:76:bc:b4:
f5:f8:6a:31:2b:71:04:a4:ae:84:b8:74:3c:90:53:f2:94:6f:
ed:c6:9b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:55 2026 by rpki-client