Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1G7oNY7vcVfXP0SMCerM0RbH27k.roa
File: 1G7oNY7vcVfXP0SMCerM0RbH27k.roa (raw, json)
Hash identifier: xz3Ve+Zo1SpdNiggsJQNEtcnIvryyFR8UtlFBNx2b5w=
Subject key identifier: D4:6E:E8:35:8E:EF:71:57:D7:3F:44:8C:09:EA:CC:D1:16:C7:DB:B9
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A1D628B1CFF9577FBAED3204D08BACD354
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1G7oNY7vcVfXP0SMCerM0RbH27k.roa
Signing time: Fri 13 Nov 2026 18:25:53 +0000
ROA not before: Fri 13 Nov 2026 18:25:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.128.0/24 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
37.148.131.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
93.88.152.0/24 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.132.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.135.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.140.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.148.0/24 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.155.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.168.0/24 maxlen: 24
95.155.169.0/24 maxlen: 24
95.155.170.0/24 maxlen: 24
95.155.171.0/24 maxlen: 24
95.155.172.0/24 maxlen: 24
95.155.173.0/24 maxlen: 24
95.155.174.0/24 maxlen: 24
95.155.176.0/21 maxlen: 24
95.155.176.0/24 maxlen: 24
95.155.177.0/24 maxlen: 24
95.155.178.0/24 maxlen: 24
95.155.179.0/24 maxlen: 24
95.155.182.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d6:28:b1:cf:f9:57:7f:ba:ed:32:04:d0:8b:ac:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Nov 13 18:25:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d46ee8358eef7157d73f448c09eaccd116c7dbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:ed:e4:0c:18:96:5e:97:37:c6:13:8e:98:
af:b0:e1:f3:5a:9a:0f:76:58:2b:35:da:ac:4d:5a:
49:0e:30:61:62:be:b9:60:92:4e:3a:78:c2:36:6f:
71:ba:e4:14:dd:f2:1e:1e:30:5f:6d:f3:ce:cb:22:
04:7d:1c:98:f1:f6:9d:51:88:b2:47:b7:ce:da:cf:
9b:f9:db:9b:9e:4d:51:f1:46:0d:7d:5d:8b:e1:b6:
e1:51:c4:8c:0e:7b:1d:a4:4b:4c:5e:d7:e2:8e:00:
28:12:1a:18:dc:84:ec:ac:19:26:62:da:5a:be:60:
2e:4b:2f:53:1b:7f:b9:7b:39:bf:a8:80:d2:95:b4:
a8:d3:4a:75:53:09:4d:8e:bf:a1:e6:6c:38:0e:61:
f3:97:d8:68:4b:9e:14:b8:2a:ef:be:66:f2:e9:56:
79:b9:05:6c:ed:1d:a3:69:d9:5f:51:72:25:98:ba:
d1:96:fe:93:99:b8:96:37:d7:3d:c2:ac:a5:28:ad:
d2:55:84:37:36:6c:77:57:cd:28:e0:ba:2e:ae:9e:
96:bd:e1:e2:e4:09:07:19:1f:a8:b8:78:58:65:e9:
c2:84:9a:fd:73:ab:59:fc:f6:40:28:3d:36:3c:c5:
42:34:fa:2e:bb:ab:2a:06:00:bf:63:92:7a:4b:3e:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:E8:35:8E:EF:71:57:D7:3F:44:8C:09:EA:CC:D1:16:C7:DB:B9
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/1G7oNY7vcVfXP0SMCerM0RbH27k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
93.88.152.0/24
95.155.128.0/23
95.155.132.0-95.155.137.255
95.155.140.0/24
95.155.144.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f0:5f:e2:75:f4:4e:75:ba:bd:99:5f:a3:90:67:d8:5f:e2:
24:88:e9:1f:1d:f7:8a:11:59:20:df:aa:f2:ee:f1:46:cf:c3:
c2:79:39:69:b2:8a:eb:51:cc:bb:b7:af:60:52:10:26:12:3d:
52:4a:3a:56:c6:1f:14:40:5d:72:28:e0:b3:35:4f:f2:26:09:
f1:31:20:ed:a9:09:93:8f:48:6c:72:c9:ad:84:d4:6d:85:ba:
d9:d8:14:67:31:86:2b:60:13:21:ef:86:10:26:a7:e4:ae:a0:
c2:bb:44:9a:cd:49:8d:3f:fb:00:24:0c:2c:51:c8:96:ed:cf:
28:88:e8:e4:d1:54:49:3c:94:62:88:a9:b1:27:33:d8:d0:d8:
95:60:13:5c:6b:f6:e6:7c:52:ed:6b:e4:7b:95:8d:16:94:17:
f0:95:19:5e:48:26:82:7c:65:39:b9:0b:4e:98:02:fc:7c:15:
00:b5:b5:5a:50:21:08:96:35:14:0a:9b:e1:ee:60:c9:b3:52:
45:dd:6a:76:cb:69:fd:42:8a:b3:9f:f3:b1:5e:c1:e3:88:1b:
06:a6:94:d2:f0:e6:79:b0:09:dd:e1:3c:21:18:a9:75:b7:5a:
63:e4:9c:d2:fc:73:fb:96:d8:29:b7:85:00:27:24:b6:c8:0c:
60:8e:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:23:24 2026 by rpki-client