Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa
File: SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa (raw, json)
Hash identifier: 7TPEHCfibMPRsy9xSphGCCfugTiCDmZv7qGFp4wnVmE=
Subject key identifier: 49:52:9B:80:09:5A:CE:14:81:AD:21:48:FD:57:E9:D1:B2:A3:56:16
Certificate issuer: /CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Certificate serial: 019F2368B94F050319B47E95F563935DD100
Authority key identifier: 44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50673
IP address blocks: 185.254.172.0/22 maxlen: 24
2a0c:5140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b9:4f:05:03:19:b4:7e:95:f5:63:93:5d:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49529b80095ace1481ad2148fd57e9d1b2a35616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:6f:30:f8:41:8b:a7:6a:b3:60:74:09:48:
43:8d:e1:51:af:91:2b:24:49:df:d8:29:24:2f:07:
74:f3:23:ed:5d:64:64:f0:f6:94:aa:13:e8:8b:88:
a4:aa:d2:bd:e1:99:97:d0:69:85:2e:c7:14:b4:51:
31:f4:6f:ae:f9:29:1f:07:4a:81:4d:d8:f6:d8:42:
d3:17:5b:60:43:e8:be:67:17:fa:be:cd:4c:a1:f1:
cc:60:20:e0:73:67:d7:4b:c6:7f:6a:58:71:ea:b1:
75:44:81:8b:9d:70:8f:6b:00:38:a0:5e:f5:75:d7:
e7:a2:64:d2:e2:96:18:c0:d1:db:8b:22:7f:4a:53:
90:ec:c7:84:95:e0:3a:e0:7b:a5:24:dd:44:1e:98:
78:3c:16:53:16:15:2b:61:f8:fc:c7:b7:a4:d6:ec:
9b:e2:de:e2:1e:f2:b7:75:4a:0f:47:6b:6f:9e:14:
f1:80:0b:b8:08:da:44:d8:6f:4f:b6:89:2a:4f:86:
61:2d:c8:00:67:3d:f6:14:6d:36:1a:87:b3:7b:25:
f6:d4:b6:0e:9e:c9:e2:d1:17:dc:8f:6e:c3:18:d5:
e1:5d:b8:a5:1d:5c:0a:03:9c:4d:a9:9e:33:f6:65:
70:4c:24:5e:81:7b:6f:58:5e:9e:44:fe:db:d9:2b:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:52:9B:80:09:5A:CE:14:81:AD:21:48:FD:57:E9:D1:B2:A3:56:16
X509v3 Authority Key Identifier:
keyid:44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.172.0/22
IPv6:
2a0c:5140::/32
Signature Algorithm: sha256WithRSAEncryption
73:f9:76:93:e3:bf:74:45:ae:78:39:cc:b6:13:1b:bd:61:f8:
26:f3:10:3a:b6:26:55:bf:05:2a:3e:e1:63:10:89:47:26:e3:
fd:90:bb:da:ad:a3:bc:3e:d7:34:69:fb:b4:3b:ea:f9:d6:2a:
8d:f6:31:2f:8e:0e:1c:b1:ef:82:ce:a3:50:14:55:f0:12:5a:
a3:43:80:2d:aa:60:af:95:b5:52:20:9b:05:92:ab:f7:70:ff:
13:7c:8e:2a:e9:56:29:0e:b8:aa:11:63:50:f6:b5:c4:e0:32:
c7:36:7c:5e:8e:4c:69:ac:ce:3c:6a:b5:e8:15:6d:42:a4:8e:
d0:e1:2c:de:30:1a:c5:64:b2:e9:1d:41:62:40:30:7f:68:73:
0e:51:11:95:4a:0c:a6:5a:3c:04:b1:d8:d1:3c:6b:d7:2e:67:
6b:56:0b:7f:1a:de:3b:81:74:eb:9a:bd:c3:cc:e8:41:fb:f0:
d4:62:af:b6:db:d0:4f:76:50:f9:5e:14:37:78:7c:8a:55:eb:
e3:e6:1c:78:38:c5:f8:7c:9c:67:d5:ad:29:70:8f:11:5c:8e:
60:85:ff:88:55:c6:9e:a4:d0:14:4a:eb:26:7b:62:8c:e2:32:
bd:59:ab:94:c6:c1:98:d9:fe:87:fa:d7:ee:60:c0:98:33:fa:
76:16:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 07:10:03 2026 by rpki-client