Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S2OFAM3jm0BTyRwMJSJTohueWL8.roa
File: S2OFAM3jm0BTyRwMJSJTohueWL8.roa (raw, json)
Hash identifier: 9ltOWCmevL8g/rb0WQLJImikFlyptJbKUn15Vkg1Ab8=
Subject key identifier: 4B:63:85:00:CD:E3:9B:40:53:C9:1C:0C:25:22:53:A2:1B:9E:58:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0777FCA4A487D3E9D4DA9D402C6F2273A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S2OFAM3jm0BTyRwMJSJTohueWL8.roa
Signing time: Sun 06 Sep 2026 16:14:18 +0000
ROA not before: Sun 06 Sep 2026 16:14:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 45.88.66.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:7f:ca:4a:48:7d:3e:9d:4d:a9:d4:02:c6:f2:27:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 6 16:14:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b638500cde39b4053c91c0c252253a21b9e58bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:fb:c6:86:51:0d:18:65:57:a7:ae:2b:28:
2a:6b:19:50:9f:1d:62:b1:ab:17:71:c0:2c:8b:66:
93:b7:de:88:e7:df:dc:ed:46:99:d0:07:44:3e:fc:
8a:97:fc:cf:d8:58:d0:a1:4d:60:65:38:f6:2e:a3:
ee:08:2a:00:33:f3:e7:27:f6:69:19:23:b8:2d:13:
6c:97:f6:60:41:e5:eb:01:e7:5e:36:81:20:8c:fb:
28:14:5d:64:99:1f:c3:78:3a:e2:66:71:5b:c4:d8:
ad:b2:96:a8:22:8e:76:82:53:62:01:f6:ff:b5:e8:
88:1c:62:31:f9:29:92:0c:ff:37:20:4e:43:5a:9a:
41:ec:77:e9:ae:5e:81:9d:46:db:c9:80:8a:f1:4d:
50:1e:ff:0f:e0:34:b2:87:f6:c3:66:51:0c:0c:e3:
41:8a:07:a9:a8:87:a4:6c:4a:08:d9:81:ec:76:5b:
a2:8e:09:fe:27:96:7f:e3:a7:d6:ba:4c:cf:78:9f:
37:19:21:ec:2d:43:b1:e1:02:b6:30:0e:35:21:4c:
75:a0:41:7b:ba:61:1c:fd:08:68:ac:e6:6e:bc:1b:
ef:da:a4:b2:55:33:aa:f1:b7:8f:66:50:f0:c9:c6:
7e:ed:66:63:49:88:43:cb:b8:e3:ae:8a:0e:c3:d8:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:85:00:CD:E3:9B:40:53:C9:1C:0C:25:22:53:A2:1B:9E:58:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S2OFAM3jm0BTyRwMJSJTohueWL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
87.120.68.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9f:11:f1:29:9b:fa:88:b9:cc:35:58:8e:00:73:43:0d:a0:
20:8c:52:84:04:11:bf:b9:54:6e:22:cd:1d:e9:24:1e:32:99:
ce:91:0c:7a:72:b2:81:c7:9a:df:1e:8b:32:2a:6a:7d:88:a9:
ba:21:04:44:9d:6c:8c:35:a9:92:73:fc:61:f3:29:19:41:44:
a6:81:f1:f3:11:62:cb:fa:4b:68:d2:97:c4:85:47:28:6c:13:
94:78:a4:79:11:36:de:e0:f4:93:2b:3b:cf:c7:12:03:b8:34:
89:f9:f9:c7:b4:9c:53:41:25:ac:fb:4a:b4:e4:97:c4:10:a1:
fb:f2:06:1f:29:f5:8d:40:a1:eb:76:7b:3b:df:f7:e7:44:32:
00:c3:4c:94:fb:41:28:09:4a:49:c7:cc:63:d2:86:90:ea:d8:
ce:f9:a9:01:e8:09:67:24:05:e9:fb:be:b7:21:3c:fa:05:09:
02:2a:ea:21:26:4e:09:04:3e:22:a7:93:a8:55:09:d1:fe:f1:
db:70:77:9a:ec:d0:cb:7d:a5:88:53:c6:79:4f:cf:78:b4:d5:
2b:df:e6:6a:17:b1:f2:5c:06:87:07:e4:f9:6f:dd:df:42:d1:
d6:a6:75:40:0a:42:7a:c7:46:6e:d0:b0:06:22:8d:57:0b:06:
67:c4:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 23:04:03 2026 by rpki-client