Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/1-38aX-tskK1NxV7Z4oDc2929WTo.roa
File: 1-38aX-tskK1NxV7Z4oDc2929WTo.roa (raw, json)
Hash identifier: wGKChe8kk2F19A+QYee9JgDbbcid8v9Ltq24bXjsVaY=
Subject key identifier: FB:7F:1A:5F:EB:6C:90:AD:4D:C5:5E:D9:E2:80:DC:DB:DD:BD:59:3A
Certificate issuer: /CN=735f01f333887cece70cc5e7292f2703dea65560
Certificate serial: 019F2368F2FE14BFF0377988E660931248B4
Authority key identifier: 73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/1-38aX-tskK1NxV7Z4oDc2929WTo.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60609
IP address blocks: 185.37.212.0/24 maxlen: 24
185.37.213.0/24 maxlen: 24
185.37.214.0/24 maxlen: 24
185.37.215.0/24 maxlen: 24
185.77.156.0/24 maxlen: 24
185.77.157.0/24 maxlen: 24
185.77.159.0/24 maxlen: 24
185.86.11.0/24 maxlen: 24
185.158.168.0/23 maxlen: 23
185.158.168.0/24 maxlen: 24
185.158.169.0/24 maxlen: 24
185.158.170.0/23 maxlen: 23
185.158.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f2:fe:14:bf:f0:37:79:88:e6:60:93:12:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735f01f333887cece70cc5e7292f2703dea65560
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb7f1a5feb6c90ad4dc55ed9e280dcdbddbd593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:96:51:c1:a3:df:67:f7:67:a2:b9:d0:c4:
e4:28:a4:31:a8:87:bd:16:b9:a2:a6:3d:b6:63:34:
29:fa:58:07:15:94:6b:50:f2:8d:1f:9e:69:40:f4:
12:f0:72:e9:ab:6e:97:68:79:d5:d3:54:14:b2:6b:
bf:cb:b2:2f:bf:c3:49:85:84:13:1f:dc:17:67:58:
09:6c:bf:b9:01:f8:07:10:5b:3b:c9:cd:93:f1:12:
43:af:91:b4:ed:9b:5f:9c:d8:0c:3d:b5:98:8b:df:
7c:22:b1:09:44:81:67:30:95:70:6e:00:bd:99:aa:
0c:37:cf:10:29:f5:60:ad:c4:9b:e7:f1:fe:41:d8:
1b:99:9a:20:b7:51:a4:db:fb:a3:84:3b:d6:76:6c:
c6:e5:88:30:87:71:3c:d9:26:9e:cf:47:10:34:3f:
86:46:18:cb:3b:76:bf:10:d9:a8:a0:55:0e:ca:d7:
5a:c5:49:3f:05:3d:6d:74:81:d5:53:9d:fe:2a:31:
ee:de:a9:ee:0e:4b:ac:ab:d3:6e:78:67:4e:d8:2a:
d8:ec:c5:80:e0:31:3d:50:ef:76:54:10:5e:68:6b:
76:20:70:21:94:e9:22:1a:17:4d:4c:ce:85:6a:a4:
f6:29:40:4a:6a:2d:c5:93:31:6f:09:00:4e:a2:96:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:1A:5F:EB:6C:90:AD:4D:C5:5E:D9:E2:80:DC:DB:DD:BD:59:3A
X509v3 Authority Key Identifier:
keyid:73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/1-38aX-tskK1NxV7Z4oDc2929WTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.212.0/22
185.77.156.0/23
185.77.159.0/24
185.86.11.0/24
185.158.168.0/22
Signature Algorithm: sha256WithRSAEncryption
68:92:06:8c:c7:51:8c:29:ca:72:21:47:ea:93:5c:8b:da:f0:
2b:95:71:fe:81:f8:40:ce:0c:38:a2:b7:9c:d5:7a:6f:f9:6b:
56:2c:86:27:68:9c:2a:1d:e2:12:ee:92:19:6d:a5:16:de:01:
24:dd:09:03:8b:a7:7c:42:75:46:91:67:ab:e7:e3:60:99:75:
88:97:be:49:33:40:57:c7:3a:dd:fd:ce:e8:0e:99:f8:68:f3:
11:f3:c2:4a:da:d0:26:00:41:56:fc:23:0a:64:4d:dd:53:fe:
92:5f:f7:fe:84:c2:e1:22:b6:7a:f2:10:01:44:ee:ba:a4:04:
a4:8b:37:2c:f5:3d:5a:2c:fe:c8:2d:9b:d9:b7:18:d8:0d:60:
e4:eb:97:79:e2:c6:ab:0a:f3:9d:ae:2d:af:a8:58:91:af:2f:
48:9b:dc:04:83:7b:5b:3d:b5:be:58:b0:1b:26:a5:3e:72:41:
0a:82:81:0b:82:c0:9f:e3:34:fb:88:c2:82:12:c2:4b:ba:24:
26:93:3a:2a:04:45:21:56:06:60:62:54:57:b7:bf:e0:31:b5:
1f:5a:50:ed:04:3a:fa:d2:26:f9:9e:23:f9:c8:f9:13:0e:17:
ed:b0:88:eb:1b:c0:45:b0:7d:e6:d5:b5:f8:c3:bb:60:72:62:
49:02:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:32 2026 by rpki-client