Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Usfze6DAgiW4aZ17c8EB3ewbVek.roa
File: Usfze6DAgiW4aZ17c8EB3ewbVek.roa (raw, json)
Hash identifier: I8qGnxGlHPoZhKeP1eXsLTEpNFnKkEsZVS7uYH3u3VA=
Subject key identifier: 52:C7:F3:7B:A0:C0:82:25:B8:69:9D:7B:73:C1:01:DD:EC:1B:55:E9
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A1083D800699E3DE24647754AC58A938D3
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Usfze6DAgiW4aZ17c8EB3ewbVek.roa
Signing time: Sun 04 Oct 2026 18:46:50 +0000
ROA not before: Sun 04 Oct 2026 18:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
37.148.131.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
93.88.152.0/24 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.132.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.140.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.148.0/24 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.155.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.172.0/24 maxlen: 24
95.155.173.0/24 maxlen: 24
95.155.174.0/24 maxlen: 24
95.155.176.0/21 maxlen: 24
95.155.176.0/24 maxlen: 24
95.155.177.0/24 maxlen: 24
95.155.178.0/24 maxlen: 24
95.155.179.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.85.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:3d:80:06:99:e3:de:24:64:77:54:ac:58:a9:38:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 4 18:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52c7f37ba0c08225b8699d7b73c101ddec1b55e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:a1:b3:6b:94:5f:88:52:24:26:0f:a1:c1:
b7:e9:9c:78:3f:be:74:65:98:c1:77:a5:3a:f7:76:
bf:3c:04:c8:a2:a3:cf:2f:0f:45:a0:92:55:bd:45:
45:2e:e4:27:d0:15:95:d4:e5:44:84:cb:5a:3f:f6:
0a:96:10:ea:e8:44:3b:e8:51:ca:7a:49:85:80:30:
b9:df:cc:05:70:4f:46:82:f9:38:76:65:94:26:c6:
4d:c1:48:7f:4e:f6:b9:99:ff:c9:dd:fd:b7:c6:f5:
ed:89:06:59:b3:12:44:4c:4b:85:d2:e9:29:31:0a:
d1:b2:a1:13:07:2e:a4:41:3d:fe:75:af:fc:f8:db:
4e:78:46:d6:5b:56:a4:b0:0a:89:94:29:82:b3:d1:
84:19:c6:ef:3b:90:bc:86:07:2f:eb:fa:cd:54:61:
ae:12:d2:7a:4f:00:a9:ca:f6:bf:a2:a4:7f:f6:3c:
35:5a:37:52:89:46:5c:6b:b2:1a:e4:4c:df:b3:c3:
cc:af:22:df:57:92:97:d0:3f:b7:9f:72:88:84:52:
01:01:a4:cc:df:57:ab:e5:d5:ed:ee:ac:5c:18:82:
11:8f:e5:fb:dd:c4:50:e7:23:3c:a3:06:61:52:1f:
03:15:ea:63:4a:c4:07:b1:2f:76:e6:12:97:67:28:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C7:F3:7B:A0:C0:82:25:B8:69:9D:7B:73:C1:01:DD:EC:1B:55:E9
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Usfze6DAgiW4aZ17c8EB3ewbVek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
93.88.152.0/24
95.155.128.0/23
95.155.132.0-95.155.134.255
95.155.136.0/23
95.155.140.0/24
95.155.144.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/23
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
60:63:65:bb:ea:d1:22:fc:d5:b9:e1:a2:77:1c:ab:9c:f6:35:
54:03:59:41:2d:fc:2a:e3:40:bf:f4:e8:16:d6:0a:e6:ed:4c:
b6:bc:43:3a:5b:fa:34:93:3b:6b:51:2a:c7:5a:d5:cd:5b:b2:
f4:fe:0f:00:15:ab:0c:74:ca:0e:6a:22:16:38:08:31:e0:b1:
f4:37:ea:af:02:2b:65:84:8d:18:fe:03:0d:17:e5:34:e5:74:
2e:e2:4c:ae:e4:67:be:d5:a8:3d:e2:de:49:6f:dc:0d:77:14:
69:e9:b9:6c:40:17:f4:a5:86:31:36:09:79:a0:8b:f0:0a:fd:
da:ed:1e:14:6c:3e:f1:1f:ea:9f:54:0d:d1:2c:56:2f:44:b7:
29:82:c8:16:b7:0d:b3:fa:f3:12:3e:fd:6f:f2:24:b3:8b:b2:
8f:08:0a:3e:86:79:07:a1:ab:11:7a:09:2a:5a:b3:cc:7c:c8:
67:fb:09:62:ae:88:84:2d:2d:30:1f:03:db:4f:99:7a:02:8c:
a9:84:d0:db:07:e5:aa:53:f1:6e:71:af:c6:15:fc:d7:ce:d9:
02:54:09:28:1e:da:47:ea:5d:e7:9b:ab:dd:6b:db:ff:b3:7c:
8e:f5:c7:e9:4c:39:1f:20:e6:29:86:44:3a:82:f4:35:a9:1d:
43:96:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:44:20 2026 by rpki-client