Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/SX64PbBkJEyQEeAGXENs-B0zaos.roa
File: SX64PbBkJEyQEeAGXENs-B0zaos.roa (raw, json)
Hash identifier: 1hSHdHWGYi7oxB0lfudb/GJDIaboMyNblxMXh7JhotM=
Subject key identifier: 49:7E:B8:3D:B0:64:24:4C:90:11:E0:06:5C:43:6C:F8:1D:33:6A:8B
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 019F1921F5B7034B6799977B4259BF6F289D
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/SX64PbBkJEyQEeAGXENs-B0zaos.roa
Signing time: Tue 30 Jun 2026 15:24:43 +0000
ROA not before: Tue 30 Jun 2026 15:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43648
IP address blocks: 45.131.236.0/23 maxlen: 24
185.78.16.0/22 maxlen: 24
185.117.184.0/22 maxlen: 24
185.223.200.0/22 maxlen: 24
2a05:6680::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:21:f5:b7:03:4b:67:99:97:7b:42:59:bf:6f:28:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Jun 30 15:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=497eb83db064244c9011e0065c436cf81d336a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:e9:8e:c1:7f:77:05:d8:66:76:69:99:a3:
b9:2e:9d:3f:c5:de:cc:b1:b5:cc:3d:d2:47:17:d6:
6f:91:1e:80:ba:8b:2b:9f:82:de:36:95:6e:9c:03:
a0:31:ef:91:50:48:80:4e:36:d6:62:8b:83:0e:ab:
ee:84:03:96:f6:9b:f5:50:d5:92:f4:9b:a6:1d:68:
31:0c:27:21:e4:98:92:2a:65:dd:95:88:70:09:37:
39:53:c1:3d:cf:3e:e1:bb:a9:65:d9:82:b6:ae:5d:
17:16:91:d9:40:3f:bd:43:55:08:51:8b:b9:81:7e:
de:ff:63:62:4c:83:88:2a:7d:a3:34:b7:43:fd:34:
1e:df:71:be:cc:5a:7a:99:00:a4:0f:4d:88:f4:60:
e3:f8:fd:4d:b9:dc:ae:d8:0d:67:47:13:1c:40:61:
5c:7b:11:19:01:9d:42:51:2d:88:8b:07:55:c2:e7:
32:3c:d1:61:e1:40:75:1b:a6:05:5b:d9:2b:e3:5b:
1a:88:7b:39:8e:ec:b8:45:83:53:56:52:ff:5f:ed:
11:dc:49:5a:b9:a2:99:4b:35:90:e0:a9:e7:79:f1:
a1:2c:f8:c1:eb:c0:5d:9f:ac:cb:4f:13:31:7c:88:
9a:89:0d:b8:21:d0:ad:b1:00:60:a2:44:e4:62:3a:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7E:B8:3D:B0:64:24:4C:90:11:E0:06:5C:43:6C:F8:1D:33:6A:8B
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/SX64PbBkJEyQEeAGXENs-B0zaos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.236.0/23
185.78.16.0/22
185.117.184.0/22
185.223.200.0/22
IPv6:
2a05:6680::/29
Signature Algorithm: sha256WithRSAEncryption
93:0a:39:c5:88:20:39:00:b5:3c:30:52:2b:e3:d5:85:71:2a:
0b:51:c4:2a:10:3e:fc:99:95:24:b6:fd:0a:6b:4e:e4:e3:b0:
a5:18:22:c9:82:db:4c:39:0a:40:43:98:36:40:c6:59:cf:0b:
fe:b0:46:51:60:80:77:42:94:90:f4:27:7f:15:41:31:3a:91:
f3:63:72:90:7b:91:49:78:7f:68:bc:28:c7:d5:25:81:cd:7a:
27:23:69:ca:b2:f7:60:55:13:60:84:79:0f:81:d7:83:21:07:
e4:02:df:e8:fc:21:f9:94:89:e2:c0:89:18:07:e4:3d:f5:8c:
c4:1f:94:66:9f:c6:dc:94:e8:88:2f:40:14:5f:73:19:7c:05:
fd:83:7a:b6:25:ee:cd:d0:e2:71:96:a3:c6:90:00:88:e7:20:
92:51:d2:de:d9:6a:3b:eb:05:6e:90:ca:f5:03:d9:11:92:9f:
d6:53:b0:b9:68:1e:54:d3:b6:34:78:a4:3d:09:d7:25:bc:b8:
62:b7:c6:55:9d:92:47:ee:66:a9:bf:be:2a:78:5c:e9:ad:ab:
24:dd:f6:1f:5e:c1:9c:08:18:f1:90:61:e8:49:2a:41:63:c5:
8b:ba:f2:43:1c:f5:53:a2:68:98:b2:dc:9a:3e:51:c5:f2:03:
4e:c1:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:19:44 2026 by rpki-client