Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-sU2R-Cvv-qcuVV4JZzz_lpX8kU.roa
File: 1-sU2R-Cvv-qcuVV4JZzz_lpX8kU.roa (raw, json)
Hash identifier: bDjlx2k407wFrL+/vYwKoLD4jzUYTMljE8gyOzYmhMY=
Subject key identifier: FA:C5:36:47:E0:AF:BF:EA:9C:B9:55:78:25:9C:F3:FE:5A:57:F2:45
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F132F58334E83402AD8FA5352DE3F2081
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-sU2R-Cvv-qcuVV4JZzz_lpX8kU.roa
Signing time: Mon 29 Jun 2026 11:41:37 +0000
ROA not before: Mon 29 Jun 2026 11:41:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 83.219.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:2f:58:33:4e:83:40:2a:d8:fa:53:52:de:3f:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 29 11:41:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fac53647e0afbfea9cb95578259cf3fe5a57f245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:90:74:cc:d9:b8:40:74:ec:f5:29:59:cb:
24:8f:32:d6:b1:b0:9f:9c:07:ba:58:35:74:cf:0e:
8d:94:73:e8:a8:d7:82:6c:f8:c2:a3:40:2e:03:82:
69:1f:23:2e:1e:32:c7:d6:bd:6f:e8:cc:b1:96:20:
9d:3b:f6:2e:25:ce:d0:0b:db:c2:89:0a:88:80:20:
80:ba:9f:24:3b:c4:7e:af:89:d5:b1:12:69:67:80:
99:b8:cd:03:68:4e:5c:1a:8c:fb:1f:dd:5a:97:4a:
8d:ca:b9:75:ff:35:bc:6e:ab:7a:6d:bb:74:5f:dd:
a0:fe:41:d4:77:94:0a:a1:61:48:7e:1f:66:a6:9f:
42:4d:ea:bd:01:22:c3:39:62:3c:e5:e7:c5:c3:5e:
cf:e6:c8:2d:d6:f4:51:df:eb:b2:dd:1a:41:0f:b1:
78:0b:71:fd:ba:d3:4f:93:79:15:8f:d2:71:49:da:
fa:9f:56:ec:c6:1d:c7:dd:db:9f:62:e9:95:0e:fe:
a2:c3:19:f1:00:b6:2b:bf:0c:e9:d7:b9:52:d9:05:
d9:16:31:e5:08:b2:99:7c:ec:71:09:4a:a0:a3:62:
24:c1:97:0a:c2:d4:b5:e5:fb:40:af:ef:17:e9:9a:
b0:b1:ef:39:34:91:46:5c:c9:ae:69:62:15:e0:f5:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C5:36:47:E0:AF:BF:EA:9C:B9:55:78:25:9C:F3:FE:5A:57:F2:45
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-sU2R-Cvv-qcuVV4JZzz_lpX8kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a4:db:17:45:1c:4a:7f:69:d1:91:8e:2f:29:a6:fb:f5:3b:
05:7b:50:ce:79:b3:28:f2:28:9d:9b:b8:fc:78:83:33:fe:9c:
ca:29:75:96:92:e8:60:9f:8a:4c:8f:34:f0:81:15:3e:d6:96:
45:37:40:99:5c:1d:fc:27:ef:04:31:e4:5f:5c:7e:f9:1b:0a:
b6:e5:92:7e:c6:00:79:47:da:ed:f5:f0:23:1b:b5:f7:8c:39:
54:c6:07:26:fe:a9:9d:6b:ad:1d:b0:f1:de:ce:8c:c0:7a:84:
28:a8:05:a5:2c:26:29:90:85:5c:b3:83:8f:d0:bb:a9:e8:36:
11:4e:12:72:80:6e:15:b0:98:9b:72:5a:cb:31:98:b3:83:16:
27:26:94:e0:6d:a6:75:30:65:07:6d:31:3d:a3:40:4c:cd:6c:
f3:92:bb:b6:99:c4:ca:21:7f:09:59:3e:e6:a8:e5:9a:67:0b:
37:75:8a:a8:71:4c:51:8a:83:b1:8e:06:08:a3:f9:bb:fd:11:
4d:43:c9:0b:5a:2e:fc:32:24:1a:97:36:2e:df:53:9b:e3:3f:
19:d3:0e:0e:73:ae:cb:17:5c:b4:cf:d0:44:c7:e8:e0:e4:ec:
97:c8:82:5c:2b:1c:2a:69:c5:f6:f1:28:b4:94:f0:5f:dd:13:
4d:9b:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:14:09 2026 by rpki-client