Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S6e-itzmZMQJJ5Bke2xDinjd1MM.roa
File: S6e-itzmZMQJJ5Bke2xDinjd1MM.roa (raw, json)
Hash identifier: 9ksfmrHsFhzXshc55wwHmQfX9J+7P6SHTPxYprPFE50=
Subject key identifier: 4B:A7:BE:8A:DC:E6:64:C4:09:27:90:64:7B:6C:43:8A:78:DD:D4:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FC73A062CEC1B6EF3BB08BA295BA8299F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S6e-itzmZMQJJ5Bke2xDinjd1MM.roa
Signing time: Mon 03 Aug 2026 10:44:56 +0000
ROA not before: Mon 03 Aug 2026 10:44:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 5.253.66.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:3a:06:2c:ec:1b:6e:f3:bb:08:ba:29:5b:a8:29:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 10:44:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ba7be8adce664c4092790647b6c438a78ddd4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:1b:cf:10:bb:f2:1f:a0:4a:45:44:a7:4f:
d8:6f:52:e6:73:c5:f3:1e:2b:17:f0:0a:a3:63:85:
7a:47:2f:8e:af:f3:d6:dc:31:8f:0f:9e:b9:44:46:
e5:9c:f0:69:ce:ea:83:2b:4a:77:fb:1d:5d:35:3b:
24:3f:41:74:68:ca:71:75:e0:b5:40:f8:2c:db:8b:
02:bd:1e:f5:39:ca:e4:f6:4f:b3:d5:6a:41:cf:fe:
38:8d:3c:f6:52:7e:53:a8:60:ee:e1:fc:b0:5d:6a:
bb:6f:e6:81:4b:b8:d6:19:3f:cd:e2:f2:4a:9b:65:
95:50:a1:1e:75:e3:a2:47:d1:61:0e:4d:8b:d4:45:
5d:6a:fb:b4:5a:fa:f3:c6:9b:41:45:ff:c1:6b:ef:
d9:f9:f9:0d:71:9a:31:8a:f0:d0:31:79:9a:21:a3:
20:a8:37:8e:45:52:9f:f5:f9:f3:dc:eb:1a:16:9e:
d4:0e:da:17:c9:de:18:a7:5e:24:ce:b5:f8:e0:95:
2e:0b:10:e5:62:86:40:dd:c4:1b:f8:49:56:ae:60:
8d:34:49:86:3c:31:6a:0e:75:aa:9c:d9:22:77:eb:
bd:c0:0f:f4:54:64:18:e6:ad:bb:a3:da:75:61:68:
1f:0b:fa:df:6f:98:2d:67:52:74:16:53:ba:be:bb:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A7:BE:8A:DC:E6:64:C4:09:27:90:64:7B:6C:43:8A:78:DD:D4:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S6e-itzmZMQJJ5Bke2xDinjd1MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.66.0/24
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:83:b6:0c:b9:f5:84:b0:da:34:97:48:1f:aa:0c:c1:00:18:
84:34:16:fa:f0:4f:09:bb:69:95:9c:12:1b:8a:7e:e8:6c:29:
07:ed:16:e5:4f:48:21:41:4f:8a:3a:b9:b9:b7:0c:67:50:6b:
97:c7:69:d9:de:c8:57:b5:2b:57:ad:cc:bf:cc:37:93:51:91:
1a:ed:30:a1:8b:b3:6b:3d:63:5f:b4:e3:e7:4c:ad:7e:66:50:
74:c9:84:fc:a2:43:e2:3b:44:85:9d:89:35:db:40:53:75:4f:
e9:6f:2b:e5:b3:73:3a:58:cf:0d:2f:fa:59:65:2e:bd:0f:e6:
22:89:09:c0:16:97:0e:50:06:1a:df:0c:f8:09:57:4c:a8:e5:
8e:70:7b:3e:c7:64:3a:d7:5d:57:76:da:4f:90:7d:4e:bc:e3:
32:da:7b:e9:c0:df:ab:20:77:90:33:72:f1:c4:63:99:f6:d3:
a7:2f:dd:ff:05:99:8c:30:02:02:0b:ef:37:dd:b1:fe:b4:ec:
56:52:28:03:56:b7:c9:9d:a4:52:e9:79:80:80:2c:b3:25:00:
47:82:e8:5d:94:9a:85:18:01:42:89:ab:e5:59:90:48:6f:0b:
ec:20:cb:ff:09:98:93:82:a7:ac:b3:d7:c2:55:ef:51:8d:aa:
43:90:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 15:44:02 2026 by rpki-client