Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/lowYknS0Iv7qlnUiFibi-aPZRKk.roa
File: lowYknS0Iv7qlnUiFibi-aPZRKk.roa (raw, json)
Hash identifier: btYuS2SWntQEuI31gA/9LOF0gEbQfkmD7aR2AXpYUBA=
Subject key identifier: 96:8C:18:92:74:B4:22:FE:EA:96:75:22:16:26:E2:F9:A3:D9:44:A9
Certificate issuer: /CN=aee9720af6a238f5f2183f24afc1c6335bd4989b
Certificate serial: 019EFDAD50164B824741A1547708BA822623
Authority key identifier: AE:E9:72:0A:F6:A2:38:F5:F2:18:3F:24:AF:C1:C6:33:5B:D4:98:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rulyCvaiOPXyGD8kr8HGM1vUmJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/lowYknS0Iv7qlnUiFibi-aPZRKk.roa
Signing time: Thu 25 Jun 2026 07:27:34 +0000
ROA not before: Thu 25 Jun 2026 07:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197417
IP address blocks: 164.37.43.0/24 maxlen: 24
2001:67c:24a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rulyCvaiOPXyGD8kr8HGM1vUmJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:ad:50:16:4b:82:47:41:a1:54:77:08:ba:82:26:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9720af6a238f5f2183f24afc1c6335bd4989b
Validity
Not Before: Jun 25 07:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=968c189274b422feea9675221626e2f9a3d944a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:87:49:55:b0:4c:13:af:62:92:55:ad:69:
6a:6c:d8:47:39:57:da:79:0b:43:8c:4a:62:e9:b0:
f7:01:e9:ff:c3:fa:30:18:90:7f:d9:64:b1:76:20:
bf:08:bb:a8:4d:f9:7e:59:77:83:bf:10:66:96:11:
9d:80:52:31:18:e6:79:bb:4e:38:c7:aa:e8:99:fa:
83:0d:37:12:c9:22:89:1b:fe:e2:79:f1:a9:1f:c0:
ac:08:65:74:b7:b2:ed:a6:dd:f2:81:22:7f:77:77:
0c:0f:ed:c2:1f:9f:df:8e:49:99:52:2c:97:e9:c1:
d1:7e:75:78:ee:37:86:eb:a7:6c:f2:bc:c4:b3:84:
ce:5b:8d:93:cf:68:69:eb:69:90:4b:ef:4c:36:56:
0c:48:81:6b:e6:bc:6d:1e:a9:b9:7d:61:48:ad:5a:
0c:00:90:a6:99:11:57:ab:5e:62:75:4c:27:29:00:
59:d0:8d:e0:67:89:c7:6e:6c:3b:3f:4c:7b:9d:a9:
db:c2:7f:95:7b:1a:32:71:6f:df:e6:d3:66:86:79:
43:49:91:ae:e3:e5:7f:2a:4d:b5:05:aa:44:15:e5:
b9:00:93:ef:0d:2f:38:a4:03:9d:e1:d0:0d:e3:1f:
4f:ad:7c:53:ef:49:51:b9:c1:db:7f:67:eb:2e:05:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:18:92:74:B4:22:FE:EA:96:75:22:16:26:E2:F9:A3:D9:44:A9
X509v3 Authority Key Identifier:
keyid:AE:E9:72:0A:F6:A2:38:F5:F2:18:3F:24:AF:C1:C6:33:5B:D4:98:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rulyCvaiOPXyGD8kr8HGM1vUmJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/lowYknS0Iv7qlnUiFibi-aPZRKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.43.0/24
IPv6:
2001:67c:24a4::/48
Signature Algorithm: sha256WithRSAEncryption
5e:ab:62:3b:85:cf:fe:2c:54:c5:aa:aa:16:11:5a:b2:20:ba:
5b:04:6a:38:07:6b:bc:cd:87:18:74:1f:58:2e:60:d0:34:d6:
b6:d4:f7:74:7e:78:39:6a:42:a1:e4:bc:40:60:ac:ae:3b:ef:
fd:26:78:f1:0a:e2:e9:69:bb:40:c5:97:f2:4f:60:bc:8d:35:
03:bb:37:38:33:4c:47:65:f2:42:8e:e1:30:fb:e2:6c:fd:44:
1a:21:8d:90:b9:ce:09:39:34:06:55:98:4b:d0:41:cc:c6:c8:
a0:ad:3f:14:b5:6d:b6:3a:19:fc:46:3d:fd:d0:5e:e4:85:db:
d9:c2:4f:5f:b6:67:83:ca:3a:f3:52:31:39:04:cb:41:ec:4a:
b3:10:3e:76:fa:d6:15:3f:0e:aa:6f:76:13:32:92:30:05:1f:
1b:0a:46:4d:9a:ad:e4:5c:d2:5c:8f:d2:ab:1c:49:09:4a:ab:
eb:ad:de:b0:99:5c:b8:85:b4:63:3b:17:4a:29:e2:49:7d:85:
35:7b:eb:31:c7:36:73:d8:9e:e4:ae:02:ab:5f:64:e0:5d:b4:
6d:a8:c6:ee:5c:4c:dc:f5:04:35:26:2d:fe:22:ef:df:47:42:
fb:9b:33:0f:26:1a:1d:67:c1:04:46:59:8a:0c:3f:70:f5:eb:
e2:6b:da:65
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ79rVAWS4JHQaFUdwi6giYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTk3MjBhZjZhMjM4ZjVmMjE4M2YyNGFmYzFjNjMzNWJk
NDk4OWIwHhcNMjYwNjI1MDcyNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjhjMTg5Mjc0YjQyMmZlZWE5Njc1MjIxNjI2ZTJmOWEzZDk0NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQeHSVWwTBOvYpJVrWlqbNhHOVfa
eQtDjEpi6bD3Aen/w/owGJB/2WSxdiC/CLuoTfl+WXeDvxBmlhGdgFIxGOZ5u044
x6romfqDDTcSySKJG/7iefGpH8CsCGV0t7Ltpt3ygSJ/d3cMD+3CH5/fjkmZUiyX
6cHRfnV47jeG66ds8rzEs4TOW42Tz2hp62mQS+9MNlYMSIFr5rxtHqm5fWFIrVoM
AJCmmRFXq15idUwnKQBZ0I3gZ4nHbmw7P0x7nanbwn+VexoycW/f5tNmhnlDSZGu
4+V/Kk21BapEFeW5AJPvDS84pAOd4dAN4x9PrXxT70lRucHbf2frLgWrlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJaMGJJ0tCL+6pZ1IhYm4vmj2USpMB8GA1UdIwQY
MBaAFK7pcgr2ojj18hg/JK/BxjNb1JibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVseUN2YWlPUFh5R0Q4a3I4SEdNMXZVbUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85Y2ZmMzAtZDhlYi00Y2EwLTk5ZjQt
ZWFkZTEzODE4YTY0LzEvbG93WWtuUzBJdjdxbG5VaUZpYmktYVBaUktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85Y2ZmMzAtZDhlYi00Y2EwLTk5ZjQtZWFkZTEzODE4YTY0
LzEvcnVseUN2YWlPUFh5R0Q4a3I4SEdNMXZVbUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQApCUrMA8E
AgACMAkDBwAgAQZ8JKQwDQYJKoZIhvcNAQELBQADggEBAF6rYjuFz/4sVMWqqhYR
WrIgulsEajgHa7zNhxh0H1guYNA01rbU93R+eDlqQqHkvEBgrK477/0mePEK4ulp
u0DFl/JPYLyNNQO7NzgzTEdl8kKO4TD74mz9RBohjZC5zgk5NAZVmEvQQczGyKCt
PxS1bbY6GfxGPf3QXuSF29nCT1+2Z4PKOvNSMTkEy0HsSrMQPnb61hU/DqpvdhMy
kjAFHxsKRk2areRc0lyP0qscSQlKq+ut3rCZXLiFtGM7F0op4kl9hTV76zHHNnPY
nuSuAqtfZOBdtG2oxu5cTNz1BDUmLf4i799HQvubMw8mGh1nwQRGWYoMP3D16+Jr
2mU=
-----END CERTIFICATE-----
Generated at Sun Jul 19 03:14:39 2026 by rpki-client