Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/S4d9N3eRCzG6cv-01zgVSYVRBnI.roa
File: S4d9N3eRCzG6cv-01zgVSYVRBnI.roa (raw, json)
Hash identifier: OqQ6fUh17AlaGXnzjvI96x9GHOXjooSQPkdslNxK5mU=
Subject key identifier: 4B:87:7D:37:77:91:0B:31:BA:72:FF:B4:D7:38:15:49:85:51:06:72
Certificate issuer: /CN=056fb6b02152300229cb783db1898065aa58184e
Certificate serial: 019EEAE458B5E98B671246E4CA20F4FA9F12
Authority key identifier: 05:6F:B6:B0:21:52:30:02:29:CB:78:3D:B1:89:80:65:AA:58:18:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW-2sCFSMAIpy3g9sYmAZapYGE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/S4d9N3eRCzG6cv-01zgVSYVRBnI.roa
Signing time: Sun 21 Jun 2026 15:54:53 +0000
ROA not before: Sun 21 Jun 2026 15:54:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 149.170.56.0/24 maxlen: 24
149.170.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW-2sCFSMAIpy3g9sYmAZapYGE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:e4:58:b5:e9:8b:67:12:46:e4:ca:20:f4:fa:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056fb6b02152300229cb783db1898065aa58184e
Validity
Not Before: Jun 21 15:54:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b877d3777910b31ba72ffb4d738154985510672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:38:de:03:28:36:36:b9:c8:0a:da:05:f2:
82:6d:26:cf:89:ea:40:12:6f:dc:c2:52:f3:3a:05:
af:79:f7:da:bf:5b:32:26:5b:57:a1:11:d2:69:1d:
56:32:19:e5:58:6a:f9:17:cc:07:7e:cc:1c:2e:95:
07:46:b3:46:e6:89:2e:54:f1:4e:a6:f6:a9:b0:70:
44:71:7b:9f:ee:44:9a:68:21:5a:9a:a8:03:cc:f3:
b0:1b:de:6c:d6:55:09:2b:0d:59:d2:d6:38:47:1a:
09:4c:fe:e8:73:03:31:23:ca:87:c4:72:3b:55:e1:
51:71:72:b9:89:e5:d3:37:bb:b1:a2:fb:65:1d:c4:
83:74:1e:b9:1a:52:d0:c9:51:8e:19:63:4f:d1:8a:
84:62:b3:29:2f:52:2c:cb:37:f0:d9:6f:39:a6:fb:
07:4b:d0:c8:0e:7e:9a:3b:92:77:1d:d7:06:00:1a:
29:8a:fe:72:e1:3d:b3:7a:37:b4:c4:20:ea:8d:1f:
7b:1e:a5:51:c5:9d:db:35:11:5c:af:43:ef:ab:ff:
e8:27:72:4f:bf:a0:4a:1f:fb:86:93:69:b0:c6:38:
ea:88:e5:8f:83:69:2a:41:39:cb:56:1e:45:21:67:
68:03:92:5c:cb:65:dd:75:1d:b5:3c:f9:f4:cb:b3:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:87:7D:37:77:91:0B:31:BA:72:FF:B4:D7:38:15:49:85:51:06:72
X509v3 Authority Key Identifier:
keyid:05:6F:B6:B0:21:52:30:02:29:CB:78:3D:B1:89:80:65:AA:58:18:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW-2sCFSMAIpy3g9sYmAZapYGE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/S4d9N3eRCzG6cv-01zgVSYVRBnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8c5c03-cd7b-4271-bb3f-26632c2b79cb/1/BW-2sCFSMAIpy3g9sYmAZapYGE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.56.0/23
Signature Algorithm: sha256WithRSAEncryption
51:c1:d7:93:7c:0e:17:50:61:59:ed:64:5b:41:ad:bf:f4:61:
54:a4:73:61:08:84:df:93:4c:78:b5:76:ed:71:22:5c:c2:f5:
5b:88:81:08:ee:c3:1e:a6:b3:e0:67:94:9c:15:46:4f:86:a8:
73:ad:61:e6:c4:e2:a3:42:8e:c0:3f:3a:41:c3:68:5e:41:4e:
bf:24:d9:c1:e8:01:ea:50:97:a3:50:cd:f6:5d:0b:9d:18:9a:
e3:f9:5b:ac:0f:46:f4:80:91:e1:ad:d2:ba:1a:00:f0:78:6e:
1a:41:10:f5:5b:e4:40:d5:d8:9a:17:ef:a0:ed:83:f0:42:37:
f9:6b:be:47:4c:31:e1:49:ef:b2:6b:85:d4:8b:81:fd:ae:b8:
89:d2:01:ae:b2:8f:ff:64:2a:69:70:f7:64:11:9a:7e:b0:ab:
04:4a:5c:b6:c3:76:98:b1:52:b9:91:e3:c7:5f:57:1b:ac:97:
2a:23:51:94:f1:18:f3:0e:95:1f:0a:20:dd:34:2b:6a:e2:c1:
45:2f:f9:21:37:8c:81:1c:c1:ba:98:8d:b3:f4:83:7c:f6:d0:
97:c2:f9:76:05:89:25:1a:2e:66:5c:32:c0:bd:ae:5b:22:bc:
ec:2f:19:ec:58:32:cb:98:2c:18:72:dd:1c:6e:06:06:0f:01:
fb:7b:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:13 2026 by rpki-client