Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/sxM1hppwo8IA3sUIRWSmuh2DulM.roa
File: sxM1hppwo8IA3sUIRWSmuh2DulM.roa (raw, json)
Hash identifier: d0rCe3Bx8Ky5qROI9ax/UnPDyR2WjD1W4X7Y8WVQZls=
Subject key identifier: B3:13:35:86:9A:70:A3:C2:00:DE:C5:08:45:64:A6:BA:1D:83:BA:53
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019CDCA5ACE8E8885B929970CC04547D29F4
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/sxM1hppwo8IA3sUIRWSmuh2DulM.roa
Signing time: Wed 11 Mar 2026 11:26:11 +0000
ROA not before: Wed 11 Mar 2026 11:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 5.252.21.0/24 maxlen: 24
5.252.22.0/24 maxlen: 24
5.252.23.0/24 maxlen: 24
146.19.233.0/24 maxlen: 24
2a0b:ec82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:a5:ac:e8:e8:88:5b:92:99:70:cc:04:54:7d:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Mar 11 11:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b31335869a70a3c200dec5084564a6ba1d83ba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:88:d6:33:5c:f0:09:16:1d:7d:d8:1f:50:
5e:21:a4:dd:0d:b3:00:f7:64:7f:83:37:41:ec:31:
d2:f7:ee:74:14:77:ad:99:c2:90:6b:56:9e:b9:1f:
81:ce:d3:3e:d9:1d:14:81:5b:ce:77:a8:9b:32:6f:
fc:e3:e5:3a:64:3e:f4:23:f0:ff:f6:6a:7c:ea:cf:
68:94:26:4f:92:04:5a:26:4c:6f:26:e6:b3:52:d4:
96:fa:d9:d8:08:b7:bf:bc:ad:89:d7:19:f2:97:18:
e5:14:ed:03:2c:11:4c:70:d0:7e:54:e6:9f:b8:c3:
be:13:26:bc:11:4c:10:8e:a3:7b:be:92:7f:42:07:
36:6a:03:e3:e3:34:fa:ca:ec:93:3c:0c:c7:86:c2:
11:cd:52:8e:84:6b:f8:a3:74:5f:c0:d2:a2:c1:87:
ed:f9:e1:72:4d:37:33:31:43:e0:ed:bc:0b:c8:c4:
55:c6:7c:98:e8:59:fa:e4:27:bd:ef:c7:9c:f1:ec:
35:69:ad:1b:51:1c:bf:d6:49:03:16:2a:c4:94:a0:
4a:38:17:cd:cc:7c:33:69:de:e8:ef:32:5d:0c:54:
13:82:66:ab:c5:eb:82:64:05:2e:78:3b:05:6e:13:
4e:8a:44:45:ce:eb:5f:34:89:6d:34:f0:3e:35:14:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:35:86:9A:70:A3:C2:00:DE:C5:08:45:64:A6:BA:1D:83:BA:53
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/sxM1hppwo8IA3sUIRWSmuh2DulM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.21.0-5.252.23.255
146.19.233.0/24
IPv6:
2a0b:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
6a:42:f5:66:1c:67:41:18:5f:57:63:68:ae:6f:79:12:2b:50:
8b:2f:fe:9a:d3:f4:15:6d:88:cb:e8:33:b3:ce:a6:6c:0e:48:
08:30:f2:b4:d5:ae:b5:53:fe:ec:be:ae:90:78:6b:dc:be:2f:
f9:34:4b:ab:7c:c2:d6:78:68:55:cf:63:65:cf:59:28:c6:55:
81:db:20:fc:46:61:f0:d9:ae:0c:4e:31:d8:c6:32:67:83:fd:
cc:18:b8:23:e4:64:35:31:47:8b:ff:b2:44:df:f2:94:bf:62:
69:1e:11:52:57:b5:76:ee:70:48:56:a3:18:e0:2c:d7:9d:33:
77:82:a3:9a:67:76:5d:50:02:bb:25:b5:f7:2f:e4:9e:e2:80:
c0:88:71:21:43:93:75:22:61:43:76:ac:65:7a:50:9c:7d:5e:
0d:92:2f:4c:e9:e9:8e:29:77:98:4b:a5:ba:e6:1d:1c:64:5b:
04:0b:d5:e2:95:42:4a:a3:d2:b6:1a:a1:b7:57:b6:fc:87:54:
e9:66:a5:48:a9:d7:73:3d:6a:40:56:bf:c1:c2:ed:b0:c5:b7:
01:a3:9c:ac:6b:54:aa:ce:36:3c:4b:02:ff:04:07:3f:65:df:
99:ce:79:ce:d0:bd:49:1c:53:43:62:fd:55:43:c9:56:14:19:
84:f4:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 17:18:43 2026 by rpki-client