Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/137-3Yb8Pcthe4AqKq-oe-AE2c4.roa
File: 137-3Yb8Pcthe4AqKq-oe-AE2c4.roa (raw, json)
Hash identifier: KcbZz8DViQlw05I4eCDMggd9N6oeRpnm6F9GtpdV/kc=
Subject key identifier: D7:7E:FE:DD:86:FC:3D:CB:61:7B:80:2A:2A:AF:A8:7B:E0:04:D9:CE
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A06D336F4B555325CC18057662977F041F
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/137-3Yb8Pcthe4AqKq-oe-AE2c4.roa
Signing time: Fri 04 Sep 2026 16:14:42 +0000
ROA not before: Fri 04 Sep 2026 16:14:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 9.236.0.0/16 maxlen: 16
161.104.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:33:6f:4b:55:53:25:cc:18:05:76:62:97:7f:04:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 4 16:14:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d77efedd86fc3dcb617b802a2aafa87be004d9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:8c:6f:28:5b:1e:5e:ba:e1:0e:9d:1d:67:
9e:43:87:83:3f:f4:17:5f:06:79:0f:d7:2a:43:3c:
b8:73:3b:a6:f1:51:14:1c:5c:1f:6e:21:25:58:c6:
cf:6a:65:b4:46:51:c5:97:3b:dd:27:57:7e:6d:f1:
01:6c:45:fe:20:6d:0f:63:16:ff:77:15:f8:0b:ed:
d7:0e:6e:c4:93:71:21:0e:48:fd:52:ed:f5:83:41:
84:45:3c:b4:d3:01:9f:c7:f9:17:fc:1e:b6:a9:c1:
ec:c9:eb:04:6c:37:71:cd:5b:07:02:14:24:4b:49:
2f:40:71:6d:cd:6f:04:5b:b7:80:e4:16:53:81:20:
47:74:48:02:b1:fd:cf:f8:28:c5:3d:d2:4a:46:e0:
6b:44:8a:21:93:fd:17:3d:c3:6c:0e:d3:aa:14:69:
c2:e5:d8:21:24:e9:6c:52:6d:5d:d7:b8:38:0b:64:
a2:c5:4a:7e:ed:8c:39:a8:21:82:83:6d:7f:9a:b1:
dc:4a:4d:e4:68:33:09:f2:22:05:e3:a1:65:89:b3:
ec:2c:c0:b4:ee:5a:70:8a:34:12:04:99:8c:bb:d3:
74:7d:c9:26:9d:f0:88:34:c5:5d:e7:06:66:6d:21:
d9:6b:3c:06:d0:c9:9a:21:a5:3b:e1:d4:2c:11:79:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:FE:DD:86:FC:3D:CB:61:7B:80:2A:2A:AF:A8:7B:E0:04:D9:CE
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/137-3Yb8Pcthe4AqKq-oe-AE2c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.236.0.0/16
161.104.112.0/20
Signature Algorithm: sha256WithRSAEncryption
60:4e:33:44:aa:25:ee:f5:2f:18:7e:61:d9:df:e7:93:3c:fa:
cc:1c:a6:ff:12:41:fa:f3:89:0d:26:08:5a:dd:f3:66:f8:f9:
aa:e0:23:3a:42:f4:22:3f:50:88:c0:cd:30:31:73:30:3e:27:
3a:af:d3:36:08:bd:3d:ef:b7:89:b4:ad:b6:df:8e:e1:2f:fd:
79:5c:85:82:70:f2:1f:0e:a2:35:7f:5e:40:1b:e2:c3:b7:ba:
64:40:69:2f:e4:05:70:0f:da:c1:48:d5:3a:6f:d0:28:58:5c:
68:99:c2:c6:1d:18:77:3d:68:b0:40:9f:ae:63:38:37:e9:fa:
d8:95:d3:1e:9a:18:2d:c4:6e:e5:32:39:74:95:96:34:a3:2c:
54:8c:dd:da:7b:59:8b:6f:ef:03:3d:9e:fe:8e:c8:d8:3c:b9:
c0:70:6d:e6:a5:22:8b:83:05:43:a2:61:a3:33:bc:94:31:3f:
df:ea:d6:21:df:5c:bd:04:61:18:a9:cc:a3:8e:44:be:31:aa:
2c:93:dc:b7:21:02:51:96:63:e8:df:b9:36:17:a3:cb:8d:34:
52:be:a0:86:68:f9:0f:04:5c:ae:e3:3e:cc:cb:a1:fc:3f:96:
84:67:fc:6a:5b:aa:9d:39:31:05:cf:cb:40:45:bf:98:80:b6:
06:4e:0a:14
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAaBtM29LVVMlzBgFdmKXfwQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwOTA0MTYxNDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzdlZmVkZDg2ZmMzZGNiNjE3YjgwMmEyYWFmYTg3YmUwMDRkOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+qMbyhbHl664Q6dHWeeQ4eDP/QX
XwZ5D9cqQzy4czum8VEUHFwfbiElWMbPamW0RlHFlzvdJ1d+bfEBbEX+IG0PYxb/
dxX4C+3XDm7Ek3EhDkj9Uu31g0GERTy00wGfx/kX/B62qcHsyesEbDdxzVsHAhQk
S0kvQHFtzW8EW7eA5BZTgSBHdEgCsf3P+CjFPdJKRuBrRIohk/0XPcNsDtOqFGnC
5dghJOlsUm1d17g4C2SixUp+7Yw5qCGCg21/mrHcSk3kaDMJ8iIF46FlibPsLMC0
7lpwijQSBJmMu9N0fckmnfCINMVd5wZmbSHZazwG0MmaIaU74dQsEXkZeQIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFNd+/t2G/D3LYXuAKiqvqHvgBNnOMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvMTM3LTNZYjhQY3RoZTRBcUtxLW9lLUFFMmM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMACewDBASh
aHAwDQYJKoZIhvcNAQELBQADggEBAGBOM0SqJe71Lxh+Ydnf55M8+swcpv8SQfrz
iQ0mCFrd82b4+argIzpC9CI/UIjAzTAxczA+Jzqv0zYIvT3vt4m0rbbfjuEv/Xlc
hYJw8h8OojV/XkAb4sO3umRAaS/kBXAP2sFI1Tpv0ChYXGiZwsYdGHc9aLBAn65j
ODfp+tiV0x6aGC3EbuUyOXSVljSjLFSM3dp7WYtv7wM9nv6OyNg8ucBwbealIouD
BUOiYaMzvJQxP9/q1iHfXL0EYRipzKOORL4xqiyT3LchAlGWY+jfuTYXo8uNNFK+
oIZo+Q8EXK7jPszLofw/loRn/Gpbqp05MQXPy0BFv5iAtgZOChQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:22 2026 by rpki-client