Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/V30LAUIEMJuKBEQCGV3OZGmIB14.roa
File: V30LAUIEMJuKBEQCGV3OZGmIB14.roa (raw, json)
Hash identifier: +8oZMvJe3e6QYtsCv+/2sJyZxT/rJgAo204q009TkGk=
Subject key identifier: 57:7D:0B:01:42:04:30:9B:8A:04:44:02:19:5D:CE:64:69:88:07:5E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019D25EE2B1AB4C6BFB383231B9BA995B04F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/V30LAUIEMJuKBEQCGV3OZGmIB14.roa
Signing time: Wed 25 Mar 2026 16:57:38 +0000
ROA not before: Wed 25 Mar 2026 16:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 87.236.38.0/24 maxlen: 24
2a05:9080::/48 maxlen: 48
2a05:9080:4::/48 maxlen: 48
2a05:9080:7::/48 maxlen: 48
2a05:9080:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ee:2b:1a:b4:c6:bf:b3:83:23:1b:9b:a9:95:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 25 16:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=577d0b014204309b8a044402195dce646988075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:a6:2f:a9:9b:24:4b:0a:4a:be:81:ce:6c:
f8:20:f2:d9:81:cc:a4:5b:fe:cb:8f:96:a0:02:c7:
53:e5:70:e0:53:74:dc:fe:a0:c9:b4:c4:3e:03:72:
02:53:f2:f8:8a:57:d4:00:c1:6e:8c:4b:97:9c:7f:
97:e8:5f:e3:d1:23:c8:68:ac:33:3d:eb:e5:17:6e:
a6:8b:f9:6a:dd:e7:be:2d:11:89:d0:11:ab:fa:b2:
28:dd:4f:a4:00:36:94:11:df:5f:9c:a6:f6:88:a2:
d8:43:e2:e4:cb:12:2d:b2:9f:e0:38:af:50:36:21:
af:a9:4d:2c:94:45:ec:84:f6:7e:c9:ba:40:05:ed:
19:b1:e2:9d:87:42:07:d0:09:06:8f:07:f6:07:a0:
29:3b:f3:40:fd:f7:ed:0f:8d:fa:04:35:43:34:b5:
94:7f:01:f2:13:31:19:50:ad:37:d7:22:b0:fe:4c:
ec:1a:71:75:25:c2:33:0f:58:fc:80:67:a8:98:e0:
43:fb:9e:d4:73:0e:32:4a:39:ed:be:f6:9e:25:1f:
30:21:fc:31:9d:f5:c4:2d:ff:83:fe:71:da:12:79:
1e:ac:1d:96:46:ad:0a:cc:f4:78:5c:c2:2a:9e:d6:
c5:fe:03:c4:77:f7:fb:db:04:f9:c5:a0:fd:75:41:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:0B:01:42:04:30:9B:8A:04:44:02:19:5D:CE:64:69:88:07:5E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/V30LAUIEMJuKBEQCGV3OZGmIB14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
IPv6:
2a05:9080::/48
2a05:9080:4::/48
2a05:9080:7::/48
2a05:9080:10::/48
Signature Algorithm: sha256WithRSAEncryption
ac:2c:dd:20:8f:62:b9:66:28:db:5c:7f:b9:fb:bf:c4:71:da:
01:94:d0:4a:43:74:f6:b3:28:df:63:76:4e:53:6d:94:41:c7:
c7:b7:bc:aa:25:8c:88:18:26:4a:4b:be:6e:5d:59:bb:c4:cb:
a9:b1:20:90:8e:2d:9b:4f:2d:c3:75:99:8d:2f:97:d3:04:d0:
77:d0:7c:ab:6b:3d:e6:94:20:06:7f:04:06:97:94:60:f4:0e:
a6:db:9a:76:a9:d8:67:4c:93:a8:09:55:52:4c:52:28:02:c5:
e0:fa:08:6f:87:23:ee:8b:2c:eb:14:a4:1b:df:c7:68:19:9d:
75:8c:bc:58:e6:43:6e:c2:0c:c9:64:27:d2:8d:a4:6f:6f:f0:
74:c2:a6:72:47:46:b5:23:f6:24:10:b3:21:e6:6b:62:44:15:
65:e4:72:8f:e3:f1:d9:d9:0f:52:2c:00:e9:ea:01:a6:25:98:
ea:a3:58:b0:a2:24:d9:7b:ef:ca:5b:ac:18:2a:89:2c:49:82:
8f:ba:5a:14:47:0b:a2:41:ec:ad:a1:5d:b3:f2:4b:a5:7a:1f:
5d:a9:21:77:03:85:58:b2:8f:c7:f2:fe:3c:cd:4e:fb:e1:72:
6f:9b:a9:70:3a:3a:08:0b:71:dc:4f:5f:f2:6c:d1:d1:d4:29:
9d:80:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:23:53 2026 by rpki-client