Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa
File: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (raw, json)
Hash identifier: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=
Subject key identifier: AA:D0:E8:AA:76:95:F5:96:46:05:4A:B8:B5:14:8D:D4:5B:F3:FA:3D
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 019E3FD3A9FB79B06B69CB194E96F778AC7D
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa
Signing time: Tue 19 May 2026 10:41:36 +0000
ROA not before: Tue 19 May 2026 10:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197906
IP address blocks: 185.168.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:d3:a9:fb:79:b0:6b:69:cb:19:4e:96:f7:78:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: May 19 10:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aad0e8aa7695f59646054ab8b5148dd45bf3fa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:ba:5d:2a:aa:10:02:6c:1e:1d:b1:e9:09:
dc:58:4d:70:f5:b1:7a:ee:02:44:8e:e2:d9:57:2f:
d7:e0:ea:dd:a7:b1:d8:d7:51:ee:8e:63:38:68:c6:
cc:c9:8d:b0:96:a3:d3:95:de:c5:c5:1b:8a:17:4b:
83:f3:8f:4b:41:c5:2f:81:a6:7f:c1:f7:5a:62:4e:
95:a0:e2:4b:a7:39:2c:ec:20:82:9f:de:72:8c:ee:
2e:eb:06:83:e9:25:7f:08:45:8d:75:d2:66:ef:60:
54:fd:cd:8f:cb:98:5f:2e:6f:b2:72:76:3c:ff:ca:
a9:9c:fc:7b:91:3b:50:fb:7d:fc:68:c2:57:7c:1a:
3c:2e:a2:12:7b:24:58:32:1f:61:30:20:34:d0:db:
47:fe:0f:0a:8f:31:9e:c0:40:43:43:cf:81:5b:04:
df:86:a7:f7:2f:df:40:1c:9d:ff:be:e6:f4:07:68:
fa:f0:75:6f:70:1b:e5:9b:ab:d2:ac:7f:fc:02:e1:
8c:23:4a:fa:a2:2d:e1:fb:fc:c6:91:c4:69:35:8f:
d2:ff:c5:9e:f1:34:56:d3:37:e1:dd:81:b9:88:c1:
20:58:d9:5a:80:03:55:d1:af:76:6f:d3:27:72:90:
4f:39:3d:6f:8b:42:d4:f8:32:55:70:b9:4c:2e:a2:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:E8:AA:76:95:F5:96:46:05:4A:B8:B5:14:8D:D4:5B:F3:FA:3D
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.37.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0d:ac:39:91:d5:f1:fe:a4:eb:19:7a:f6:6e:fb:6c:42:b8:
4e:c6:f6:fb:b8:37:d9:78:7e:95:6a:be:11:64:51:a9:fe:a2:
f1:d2:b4:19:60:cb:59:d2:1e:87:c4:68:f8:93:68:37:cf:aa:
c1:86:2d:8e:01:80:2a:65:a4:09:03:4a:5b:34:e7:a5:29:30:
c1:86:71:0a:ab:67:eb:0e:76:55:00:c7:89:b1:81:10:8b:e0:
6f:e9:06:e1:a0:75:68:b0:a7:6a:b5:09:e7:9c:39:2c:8d:c4:
3e:db:ed:14:d7:e9:0c:07:37:6d:bb:a2:5a:4c:ca:2d:5b:17:
e3:20:6c:3a:39:96:bf:39:f7:bf:23:18:f5:83:19:22:9d:7c:
e1:ba:81:bc:7b:1b:1d:06:36:94:73:6c:eb:8a:db:5d:ff:85:
9d:e9:f7:37:bb:2e:05:b8:6b:2c:1e:32:9c:55:2b:ce:b0:d3:
f3:cc:7f:92:c0:7c:2e:11:b2:27:cf:c8:8b:9e:3e:5c:13:c1:
76:90:49:c4:6e:4a:2e:67:6c:64:5a:b0:d9:36:8b:d5:7c:9a:
99:d6:ee:39:96:4c:55:d0:9b:9b:a9:f8:bf:9f:6c:26:ce:82:
09:7f:12:52:83:10:6f:ee:a7:2f:49:51:53:e5:53:ad:cb:68:
a7:e9:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:20 2026 by rpki-client