Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/sviolDtkALX237AgHdJy3qGm9E8.roa
File: sviolDtkALX237AgHdJy3qGm9E8.roa (raw, json)
Hash identifier: UBbw3ecAl6K7Vc8agYWaL992jebVFcU3FnvRCH5/x3w=
Subject key identifier: B2:F8:A8:94:3B:64:00:B5:F6:DF:B0:20:1D:D2:72:DE:A1:A6:F4:4F
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019EFF210B81DDF88937F2A9984A05DE8AA3
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/sviolDtkALX237AgHdJy3qGm9E8.roa
Signing time: Thu 25 Jun 2026 14:13:36 +0000
ROA not before: Thu 25 Jun 2026 14:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31673
IP address blocks: 185.88.188.0/22 maxlen: 24
185.121.92.0/23 maxlen: 23
185.121.94.0/24 maxlen: 24
2a03:8300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:21:0b:81:dd:f8:89:37:f2:a9:98:4a:05:de:8a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jun 25 14:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2f8a8943b6400b5f6dfb0201dd272dea1a6f44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:e6:61:d4:3a:67:80:1f:fa:8f:1f:39:03:
21:70:55:e0:7e:ae:54:3c:03:1f:8a:bd:d3:a7:c0:
c1:b8:5b:81:71:4a:27:52:2a:b3:a3:23:bf:a0:23:
38:d5:89:d1:75:f3:dd:55:fe:ae:73:a3:b5:ef:be:
fd:62:1d:a2:05:60:86:44:a3:1e:f4:ce:cb:59:3e:
0c:d0:f8:f7:61:6e:ef:8a:48:b1:71:e9:b1:05:a3:
b4:a5:5b:c4:5d:90:56:aa:d6:5e:bd:74:b5:d4:45:
e0:a8:be:1b:3b:e7:b7:36:d2:f7:f0:1f:8e:3c:3e:
fb:c5:e9:70:60:0f:a1:d4:88:31:1a:66:c7:e2:85:
81:4f:86:50:39:72:21:75:fb:50:4c:79:b9:2c:8f:
18:2f:de:2c:96:86:b0:bd:14:8a:41:8c:77:68:a4:
c8:9b:80:b5:97:c2:cf:9a:fc:21:6a:db:72:ef:b6:
12:c8:f7:4d:97:aa:0e:53:8f:89:ff:29:58:f4:c6:
70:3f:7e:82:0d:b7:b8:f8:42:83:07:dd:d1:2f:a8:
49:d0:45:f0:3f:15:8c:60:20:e5:c3:07:b0:04:32:
61:bc:8f:56:08:fe:9b:9c:87:4b:2e:36:a5:bf:bd:
a6:ec:b8:89:be:a7:d5:3c:fe:95:85:68:2b:61:52:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F8:A8:94:3B:64:00:B5:F6:DF:B0:20:1D:D2:72:DE:A1:A6:F4:4F
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/sviolDtkALX237AgHdJy3qGm9E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.188.0/22
185.121.92.0-185.121.94.255
IPv6:
2a03:8300::/32
Signature Algorithm: sha256WithRSAEncryption
7a:5a:ce:dd:3c:1a:04:ce:61:13:b6:c5:64:66:0a:c0:b9:00:
07:5f:ba:dd:7d:7a:a9:fb:98:0b:78:43:7c:09:30:0f:be:9a:
c9:01:61:d8:bf:3a:81:e1:e7:84:71:07:08:93:28:ca:3a:99:
f9:7b:d5:d0:fc:10:92:81:19:d3:9a:ef:85:d5:78:17:2b:96:
86:98:c3:91:83:b3:d6:dc:bc:af:20:93:da:09:92:5d:59:06:
e6:c4:fb:e7:c4:41:5e:e4:33:7b:b8:06:a0:73:ce:d7:50:33:
20:8c:95:2c:3e:ae:61:37:3a:6f:97:3e:5b:0e:0c:d2:66:55:
a2:35:63:49:37:ac:58:3d:ba:91:38:8d:89:5a:60:1e:e4:8e:
59:68:f0:07:2d:d5:bc:85:ed:d4:20:a6:9f:7e:f4:11:dc:6c:
7d:73:d8:77:6e:21:8c:9e:ba:80:24:79:36:bf:c6:df:95:6a:
20:df:82:b8:d9:ab:74:d8:a4:88:d3:d6:f9:71:e4:5e:5e:b4:
0b:a3:03:f9:28:ba:11:48:b2:13:66:a7:89:8d:f6:92:47:f8:
c0:17:62:4d:9e:31:f6:97:cb:ce:7f:70:45:e5:f4:1a:e3:e3:
cf:0d:c5:3d:6e:cc:60:26:c7:c4:31:4c:38:86:73:cf:cd:2a:
da:f1:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:34 2026 by rpki-client