Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/eTYPG_iEPPvfDMT5FUO5XakBG7o.roa
File: eTYPG_iEPPvfDMT5FUO5XakBG7o.roa (raw, json)
Hash identifier: QOIEmVBvyX57huUqD/qGqDZgvZ6mbexa42lJJp6j4K4=
Subject key identifier: 79:36:0F:1B:F8:84:3C:FB:DF:0C:C4:F9:15:43:B9:5D:A9:01:1B:BA
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 01A110DCC3C1E2C4F6EE06B5451BDDF5549D
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/eTYPG_iEPPvfDMT5FUO5XakBG7o.roa
Signing time: Tue 06 Oct 2026 10:57:45 +0000
ROA not before: Tue 06 Oct 2026 10:57:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201746
IP address blocks: 37.0.107.0/24 maxlen: 24
37.26.252.0/22 maxlen: 22
37.26.252.0/23 maxlen: 23
37.26.252.0/24 maxlen: 24
37.26.253.0/24 maxlen: 24
37.26.254.0/23 maxlen: 23
37.26.254.0/24 maxlen: 24
37.26.255.0/24 maxlen: 24
185.6.32.0/22 maxlen: 22
185.6.32.0/23 maxlen: 23
185.6.32.0/24 maxlen: 24
185.6.33.0/24 maxlen: 24
185.6.34.0/23 maxlen: 23
185.6.34.0/24 maxlen: 24
185.6.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:dc:c3:c1:e2:c4:f6:ee:06:b5:45:1b:dd:f5:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Oct 6 10:57:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79360f1bf8843cfbdf0cc4f91543b95da9011bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:2b:9b:5c:aa:3e:8f:6e:3d:3a:4f:e4:31:
c5:f9:38:33:36:ae:b9:db:02:aa:dd:cf:4a:ad:e6:
6e:2a:e8:50:dc:e9:e3:80:55:dd:63:96:d9:be:23:
bd:ed:e4:f4:c7:e2:de:7f:5d:35:30:f3:a0:fa:d5:
76:31:3b:af:da:c3:56:37:ab:06:27:27:b7:11:16:
64:c9:26:50:5b:1f:9b:09:be:0b:84:70:33:0f:b6:
84:f7:fc:eb:5c:8b:88:a9:34:b2:aa:e1:2f:6e:e7:
b8:98:d4:e9:d0:70:d8:e3:36:a1:43:99:84:6e:1c:
3b:d6:0f:26:a0:36:98:18:ab:dc:63:8d:0e:75:c4:
f3:37:e4:33:3a:11:6b:60:2a:13:0b:da:cd:93:e0:
b6:60:2d:db:ed:8b:db:3b:85:23:9d:ab:bf:ec:1b:
fa:e7:52:1b:3f:20:ca:12:c7:25:e1:14:2a:77:0b:
96:7e:44:bd:d3:86:0f:b8:bf:86:f3:35:4a:af:62:
e6:12:94:df:50:c8:56:05:41:83:e1:7e:ee:2c:93:
db:82:b4:9c:b0:75:cd:98:2d:be:f1:a5:43:a1:ae:
9f:f1:92:1a:e9:0c:c9:e3:4a:00:6c:60:3a:9e:61:
16:a0:e4:53:bd:c2:1f:07:16:0f:92:ba:68:ff:8b:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:0F:1B:F8:84:3C:FB:DF:0C:C4:F9:15:43:B9:5D:A9:01:1B:BA
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/eTYPG_iEPPvfDMT5FUO5XakBG7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.107.0/24
37.26.252.0/22
185.6.32.0/22
Signature Algorithm: sha256WithRSAEncryption
48:09:0c:b7:7e:0e:58:bb:f9:4b:e9:d7:e1:ad:d5:b3:ba:81:
27:b5:ea:d9:bb:52:d3:4d:01:ab:56:d7:2a:5f:a5:e4:0e:f2:
17:66:2e:6b:82:eb:f7:fb:0c:7c:23:29:a1:a3:9b:8e:0f:71:
45:37:59:fd:9a:db:96:70:32:69:0d:7e:fe:b2:2a:72:3a:44:
4c:11:74:1b:a8:15:d3:a7:4e:9e:29:d8:6b:5d:bd:5b:9d:b6:
b1:63:11:92:35:e2:c5:d5:57:be:38:13:62:c0:27:6e:b2:3f:
d0:6a:f9:a5:2c:b5:55:25:9d:0a:21:9a:cd:86:e6:74:b2:dd:
d6:71:6a:ff:48:3b:e9:9c:ff:1f:3e:fb:03:03:79:51:35:de:
aa:83:e2:03:f0:68:c6:ed:b4:58:be:19:c0:5d:73:36:b0:2d:
4d:25:32:e2:2d:46:a9:c8:b5:b2:c6:ff:39:4d:84:79:62:5d:
01:89:9c:1f:8b:90:3d:da:06:2e:ff:a4:ac:c9:ff:9f:64:1c:
d1:61:f8:e2:04:27:ac:d4:cf:e3:41:9c:00:6a:e3:cd:a0:99:
0a:47:08:90:46:8e:15:2d:9e:ba:6a:0c:a7:4a:3c:f5:c9:22:
4e:9d:da:54:c4:00:20:3a:7d:a0:1e:37:a8:2a:a3:e0:46:73:
cd:86:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:12 2026 by rpki-client