Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/op5I0zZmxj_KZWaz0I1w-PMQtiM.roa
File: op5I0zZmxj_KZWaz0I1w-PMQtiM.roa (raw, json)
Hash identifier: UqBj2kYM4AhsljyiEXdBTgXWr+0Yw8Z9/cE6WVYCTko=
Subject key identifier: A2:9E:48:D3:36:66:C6:3F:CA:65:66:B3:D0:8D:70:F8:F3:10:B6:23
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0E46BA3BDF15BA1E07E985EE6215022D0
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/op5I0zZmxj_KZWaz0I1w-PMQtiM.roa
Signing time: Sun 27 Sep 2026 19:50:54 +0000
ROA not before: Sun 27 Sep 2026 19:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.44.228.0/22 maxlen: 24
37.44.228.0/24 maxlen: 24
193.219.99.0/24 maxlen: 24
194.15.32.0/24 maxlen: 24
194.15.33.0/24 maxlen: 24
194.15.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:6b:a3:bd:f1:5b:a1:e0:7e:98:5e:e6:21:50:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 27 19:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a29e48d33666c63fca6566b3d08d70f8f310b623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:c7:f4:35:f4:d6:31:93:ce:7a:75:43:cd:
e9:e2:55:95:f6:22:96:66:86:63:6a:0b:9a:07:ab:
c3:23:6b:13:af:4d:92:fb:27:40:fb:33:b4:f6:7b:
1f:8b:05:ca:7e:6e:66:88:62:7e:85:25:71:57:4f:
2e:73:d7:6f:47:0a:8c:ca:55:9a:c0:2c:c4:da:53:
b2:36:94:e1:c6:0d:db:77:98:5e:5b:bd:51:3d:a0:
ac:bc:7a:11:0a:4b:ac:ac:c7:0f:d2:dc:84:0a:45:
67:dc:bd:fe:8a:e8:f0:68:14:0a:d5:53:ad:54:af:
4b:fc:74:fc:43:09:3b:8d:d9:b1:75:1d:70:40:30:
2f:5c:ee:1f:18:ad:53:07:a5:53:45:1f:96:4f:12:
20:94:17:52:17:fd:a4:14:24:49:e7:41:45:72:c1:
70:0a:38:3b:21:b2:70:12:d9:e5:94:ef:c8:b0:dc:
24:1e:e5:01:05:33:2a:bd:ea:36:cc:6d:fa:6b:5e:
f3:df:a6:c5:11:c4:ca:9c:b5:51:44:f1:a1:e3:76:
72:2d:c8:1f:67:94:31:a8:1c:f0:48:d7:6c:e5:e9:
f5:f8:76:b7:98:0b:39:b1:83:88:08:d6:8b:90:f8:
42:ff:4e:84:16:9a:4c:ff:d8:f8:4c:06:c2:3c:77:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:48:D3:36:66:C6:3F:CA:65:66:B3:D0:8D:70:F8:F3:10:B6:23
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/op5I0zZmxj_KZWaz0I1w-PMQtiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
193.219.99.0/24
194.15.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:76:fc:12:f7:9e:3d:70:8f:ed:38:a6:e7:be:bd:07:19:c6:
92:f5:6d:44:4e:d6:8c:0f:95:bf:7a:86:53:10:89:ea:c9:11:
67:9a:23:ae:cf:73:09:79:c5:a7:e9:bd:b2:b0:00:02:42:dd:
da:23:8c:b0:c1:9c:cc:57:ae:a1:1c:fe:9d:4e:5f:e7:fd:7f:
c0:a7:e8:ff:6d:01:83:98:8a:79:ce:fe:37:cc:3e:d0:08:60:
67:74:2a:0d:9c:1b:14:c7:12:70:81:00:49:a8:03:54:cc:ca:
7f:25:02:84:97:4f:e0:f2:09:f5:f4:4e:ad:2f:ba:06:d7:9e:
20:5b:d4:ad:e9:00:8f:71:9b:ea:f2:4a:74:28:c4:f0:e5:6c:
44:1f:6e:5b:cb:13:cf:4d:42:18:0b:5c:21:bc:d0:13:e4:9b:
11:39:63:6e:55:b9:16:02:2a:6c:3b:b0:40:b5:71:75:fd:53:
e4:9c:e5:bc:b0:34:6b:6b:37:5f:a6:69:68:4e:3d:7d:4f:9a:
06:76:1a:cd:2e:05:b7:07:2a:54:25:3c:e1:45:29:3a:86:d6:
84:a0:4f:15:eb:e1:ba:e1:63:c0:7e:0d:6e:b3:72:e9:b0:e3:
11:48:07:bc:c5:ba:c3:97:a5:85:4a:4f:e2:d1:60:71:f7:a5:
af:45:90:e0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDka6O98Vuh4H6YXuYhUCLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwOTI3MTk1MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjllNDhkMzM2NjZjNjNmY2E2NTY2YjNkMDhkNzBmOGYzMTBiNjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdDH9DX01jGTznp1Q83p4lWV9iKW
ZoZjaguaB6vDI2sTr02S+ydA+zO09nsfiwXKfm5miGJ+hSVxV08uc9dvRwqMylWa
wCzE2lOyNpThxg3bd5heW71RPaCsvHoRCkusrMcP0tyECkVn3L3+iujwaBQK1VOt
VK9L/HT8Qwk7jdmxdR1wQDAvXO4fGK1TB6VTRR+WTxIglBdSF/2kFCRJ50FFcsFw
Cjg7IbJwEtnllO/IsNwkHuUBBTMqveo2zG36a17z36bFEcTKnLVRRPGh43ZyLcgf
Z5QxqBzwSNds5en1+Ha3mAs5sYOICNaLkPhC/06EFppM/9j4TAbCPHdWqwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKKeSNM2ZsY/ymVms9CNcPjzELYjMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvb3A1STB6Wm14al9LWldhejBJMXctUE1RdGlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJSzkAwQA
wdtjAwQCwg8gMA0GCSqGSIb3DQEBCwUAA4IBAQBbdvwS9549cI/tOKbnvr0HGcaS
9W1ETtaMD5W/eoZTEInqyRFnmiOuz3MJecWn6b2ysAACQt3aI4ywwZzMV66hHP6d
Tl/n/X/Ap+j/bQGDmIp5zv43zD7QCGBndCoNnBsUxxJwgQBJqANUzMp/JQKEl0/g
8gn19E6tL7oG154gW9St6QCPcZvq8kp0KMTw5WxEH25byxPPTUIYC1whvNAT5JsR
OWNuVbkWAipsO7BAtXF1/VPknOW8sDRrazdfpmloTj19T5oGdhrNLgW3BypUJTzh
RSk6htaEoE8V6+G64WPAfg1us3LpsOMRSAe8xbrDl6WFSk/i0WBx96WvRZDg
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:30 2026 by rpki-client