Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/SKMsMlvFHq04VKwS3lm6052RCVc.roa
File: SKMsMlvFHq04VKwS3lm6052RCVc.roa (raw, json)
Hash identifier: 74hqP0+K6nKV5HbAvUfvyaw3sL3nIFw0LV1GaOKsxeg=
Subject key identifier: 48:A3:2C:32:5B:C5:1E:AD:38:54:AC:12:DE:59:BA:D3:9D:91:09:57
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01A116FE4B118F1CB2D32255F707528F5FDC
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/SKMsMlvFHq04VKwS3lm6052RCVc.roa
Signing time: Wed 07 Oct 2026 15:32:06 +0000
ROA not before: Wed 07 Oct 2026 15:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 64.49.160.0/19 maxlen: 32
69.77.0.0/20 maxlen: 32
69.77.17.0/24 maxlen: 32
69.77.18.0/23 maxlen: 32
69.77.21.0/24 maxlen: 32
69.77.22.0/23 maxlen: 32
69.77.24.0/21 maxlen: 32
69.77.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:fe:4b:11:8f:1c:b2:d3:22:55:f7:07:52:8f:5f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Oct 7 15:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48a32c325bc51ead3854ac12de59bad39d910957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:64:00:d8:ba:99:f1:71:96:13:38:ba:ec:
99:25:53:16:c0:08:c4:86:9e:12:9f:a4:a3:42:96:
6a:51:a1:38:bd:a8:7f:12:ff:b0:08:e8:62:e6:cd:
49:b5:bd:08:bb:c3:0e:fc:d0:b7:98:3f:2e:32:42:
b1:f6:09:15:16:23:17:6d:7f:53:50:10:98:55:42:
f4:87:9b:d7:45:42:3a:fb:ee:2c:1d:d0:0c:15:8d:
5e:25:20:5e:df:f3:61:e2:a2:2b:a9:a3:ed:e6:f8:
e8:a4:0e:c4:51:3c:ac:89:9d:1e:63:9c:72:2e:a0:
76:64:e4:74:e4:c6:fc:16:b1:ea:1e:75:e1:c8:0e:
42:e4:e5:86:c4:71:d5:7c:2c:da:86:5b:64:6f:7e:
ab:44:e9:60:46:ef:f2:5b:f5:5c:f3:03:af:73:90:
d0:f0:dd:40:64:dd:f3:0e:26:53:a2:e3:9a:ec:cf:
08:78:98:28:13:54:12:ff:f2:01:03:ac:41:6b:96:
e8:35:c0:f3:9b:85:92:64:e9:9e:33:f7:c4:1b:37:
eb:0c:09:35:03:f9:ab:26:c9:aa:ae:a0:ac:9e:c1:
45:37:fd:ea:9e:47:87:c5:d3:41:17:46:96:fd:84:
54:7a:80:e7:6c:7f:6c:95:43:6f:50:04:f0:3f:7d:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:2C:32:5B:C5:1E:AD:38:54:AC:12:DE:59:BA:D3:9D:91:09:57
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/SKMsMlvFHq04VKwS3lm6052RCVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.49.160.0/19
69.77.0.0/20
69.77.17.0-69.77.19.255
69.77.21.0-69.77.31.255
69.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:23:64:8f:e7:93:be:24:5d:21:a8:02:ff:0a:bb:7a:e0:b8:
45:f2:35:7b:df:75:ea:b3:ce:ac:d4:b9:4b:64:ce:16:1c:5a:
fa:82:c4:34:d3:3a:83:fc:3d:9e:76:fe:68:02:3d:a7:73:9a:
f6:36:77:58:f7:0a:83:14:c0:20:e4:bd:cf:0a:23:d2:8f:1c:
01:64:c0:5f:cd:c1:07:a4:fd:c7:91:27:f1:24:57:6f:4a:64:
d7:33:1a:98:02:2a:91:1d:da:96:34:a6:e3:da:48:2d:40:25:
43:33:7a:33:92:62:fe:2d:a1:ed:3a:53:07:4f:9b:5b:00:25:
be:af:d3:5a:4a:09:88:41:ad:f1:cf:85:44:f0:78:ea:29:27:
81:82:04:15:85:00:1d:cb:5d:e7:79:82:95:38:4c:cc:f5:4d:
c4:3b:57:fe:90:66:4e:75:25:5e:74:cd:81:0d:ba:15:af:ad:
80:9e:cf:82:1a:85:86:89:c4:4c:9b:72:a8:4e:ac:86:7d:f8:
35:d1:a6:b1:41:1b:87:40:91:49:72:dc:70:f7:77:e0:08:9b:
54:1a:a9:58:de:64:a7:0d:c0:ce:fc:1f:d1:ce:a4:5c:f2:1a:
ea:34:88:35:90:75:2f:fd:ab:c6:84:52:6c:97:61:d6:9e:f2:
88:f2:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:15:52 2026 by rpki-client