Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/73gLLa2WEuSOVBryed6FbQh9h_4.roa
File: 73gLLa2WEuSOVBryed6FbQh9h_4.roa (raw, json)
Hash identifier: uiB7J4OKMlOERU3DxxkeNEI1+/nHYCXhUByMM7Z7TYU=
Subject key identifier: EF:78:0B:2D:AD:96:12:E4:8E:54:1A:F2:79:DE:85:6D:08:7D:87:FE
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019E5E4BF5863885850892C618A96DAF1302
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/73gLLa2WEuSOVBryed6FbQh9h_4.roa
Signing time: Mon 25 May 2026 08:41:36 +0000
ROA not before: Mon 25 May 2026 08:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138997
IP address blocks: 64.118.128.0/19 maxlen: 24
191.40.0.0/18 maxlen: 24
191.40.0.0/21 maxlen: 21
191.40.2.0/23 maxlen: 23
216.195.192.0/19 maxlen: 24
216.236.0.0/18 maxlen: 24
216.236.3.0/24 maxlen: 24
216.236.28.0/22 maxlen: 22
216.236.28.0/24 maxlen: 24
216.236.29.0/24 maxlen: 24
216.236.30.0/24 maxlen: 24
216.236.31.0/24 maxlen: 24
2a01:4240::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:4b:f5:86:38:85:85:08:92:c6:18:a9:6d:af:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: May 25 08:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef780b2dad9612e48e541af279de856d087d87fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ad:40:19:ea:04:bb:0d:5e:06:3a:0f:61:22:
d4:6c:1b:b9:64:67:33:11:20:05:05:e8:db:78:8a:
11:82:18:bc:37:6d:cb:aa:25:95:23:eb:bc:86:a3:
ef:4f:e0:81:dc:19:fa:45:8a:75:2a:c5:c3:d6:1b:
ab:9d:25:9f:7f:12:eb:99:2c:4d:95:8e:f8:fa:27:
3b:0d:87:4c:b1:b6:36:5d:08:38:9a:5c:36:b3:7e:
6d:9d:2b:17:67:4c:7b:ca:32:35:2d:4d:d9:b8:76:
79:c2:65:33:ad:d6:25:18:c4:dd:fc:b9:3a:c4:1a:
58:c4:38:c5:10:1e:ad:c0:83:5d:c4:0c:c9:ea:ba:
bf:23:06:c7:68:c0:7d:dc:7e:c1:76:35:6d:63:e1:
bc:df:f8:d2:49:4c:8f:2d:9d:c9:09:aa:64:0b:e5:
74:d0:0f:56:60:ac:03:56:29:36:ba:d2:89:f2:4c:
93:0e:ad:cf:ce:89:f7:23:23:30:d4:87:9f:df:13:
17:72:b2:2d:ff:27:bf:c6:ee:cd:72:87:ef:05:a7:
18:40:b0:98:2f:62:63:c8:bf:41:ab:7a:6d:3f:6e:
9b:d6:e2:f9:d0:de:8b:99:62:03:5e:2e:b4:81:b7:
ba:10:78:bb:cd:d7:05:43:7a:58:74:b5:ee:59:c2:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:78:0B:2D:AD:96:12:E4:8E:54:1A:F2:79:DE:85:6D:08:7D:87:FE
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/73gLLa2WEuSOVBryed6FbQh9h_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.118.128.0/19
191.40.0.0/18
216.195.192.0/19
216.236.0.0/18
IPv6:
2a01:4240::/30
Signature Algorithm: sha256WithRSAEncryption
82:c6:da:b4:8e:58:03:f4:06:77:55:f8:eb:31:d1:ea:c4:fb:
61:b7:41:69:d2:10:15:ef:46:5b:24:b5:76:4a:91:ff:c8:31:
d5:a5:a0:31:ea:67:b2:a7:5e:cb:2d:bb:f7:0e:4c:2d:e4:58:
08:78:49:ff:24:19:3c:bc:89:38:d8:5c:20:9d:3f:80:66:1a:
c3:3b:6f:88:4d:8c:33:c8:41:59:a5:ba:8b:e1:7f:8a:00:8d:
13:99:2c:b1:39:a4:03:6e:6c:48:b5:a2:5b:35:4d:85:86:f9:
9d:62:c6:5b:e4:eb:0a:02:f8:70:d0:f1:23:30:bf:92:9f:31:
81:9d:e9:f0:0c:cc:93:86:db:93:41:77:bc:97:50:e4:30:b8:
01:66:26:5e:1c:9f:55:1f:c1:fc:60:37:78:5a:e2:73:7d:0f:
5b:04:5e:17:68:ad:31:a4:b7:be:13:9d:60:ee:df:c3:9d:93:
02:b8:d0:4d:c7:30:3f:e6:35:de:1f:f2:79:42:61:3a:d0:a1:
6a:c7:c6:32:1f:61:4b:e8:e9:f8:ae:01:2e:48:73:13:f4:99:
74:ea:76:08:f0:2b:61:4f:1b:8f:12:4f:a9:71:cf:de:e9:ab:
51:8c:77:78:64:d6:c2:75:f7:60:a8:97:59:69:0f:1f:e9:c7:
a3:4a:12:c4
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ5eS/WGOIWFCJLGGKltrxMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwNTI1MDg0MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjc4MGIyZGFkOTYxMmU0OGU1NDFhZjI3OWRlODU2ZDA4N2Q4N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8a1AGeoEuw1eBjoPYSLUbBu5ZGcz
ESAFBejbeIoRghi8N23LqiWVI+u8hqPvT+CB3Bn6RYp1KsXD1hurnSWffxLrmSxN
lY74+ic7DYdMsbY2XQg4mlw2s35tnSsXZ0x7yjI1LU3ZuHZ5wmUzrdYlGMTd/Lk6
xBpYxDjFEB6twINdxAzJ6rq/IwbHaMB93H7BdjVtY+G83/jSSUyPLZ3JCapkC+V0
0A9WYKwDVik2utKJ8kyTDq3Pzon3IyMw1Ief3xMXcrIt/ye/xu7NcofvBacYQLCY
L2JjyL9Bq3ptP26b1uL50N6LmWIDXi60gbe6EHi7zdcFQ3pYdLXuWcKaVQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFO94Cy2tlhLkjlQa8nnehW0IfYf+MB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvNzNnTExhMldFdVNPVkJyeWVkNkZiUWg5aF80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFQHaAAwQG
vygAAwQF2MPAAwQG2OwAMA0EAgACMAcDBQIqAUJAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCxtq0jlgD9AZ3VfjrMdHqxPtht0Fp0hAV70ZbJLV2SpH/yDHVpaAx6meyp17L
Lbv3Dkwt5FgIeEn/JBk8vIk42FwgnT+AZhrDO2+ITYwzyEFZpbqL4X+KAI0TmSyx
OaQDbmxItaJbNU2FhvmdYsZb5OsKAvhw0PEjML+SnzGBnenwDMyThtuTQXe8l1Dk
MLgBZiZeHJ9VH8H8YDd4WuJzfQ9bBF4XaK0xpLe+E51g7t/DnZMCuNBNxzA/5jXe
H/J5QmE60KFqx8YyH2FL6On4rgEuSHMT9Jl06nYI8CthTxuPEk+pcc/e6atRjHd4
ZNbCdfdgqJdZaQ8f6cejShLE
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:44 2026 by rpki-client