Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sfltb1ztfagWGep6Z2yHHmY3x1A.roa
File: Sfltb1ztfagWGep6Z2yHHmY3x1A.roa (raw, json)
Hash identifier: V5oibjbPluWGT1KS5+rAFsr7DR/yOfQiL4btheHAt4g=
Subject key identifier: 49:F9:6D:6F:5C:ED:7D:A8:16:19:EA:7A:67:6C:87:1E:66:37:C7:50
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F360EC23A95E8CD054C4014DF03D92E90
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sfltb1ztfagWGep6Z2yHHmY3x1A.roa
Signing time: Mon 06 Jul 2026 06:12:44 +0000
ROA not before: Mon 06 Jul 2026 06:12:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 5.175.170.0/24 maxlen: 24
89.144.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:0e:c2:3a:95:e8:cd:05:4c:40:14:df:03:d9:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 6 06:12:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49f96d6f5ced7da81619ea7a676c871e6637c750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:a4:0d:51:36:1c:a1:d2:c8:62:90:9e:ec:
fd:33:f8:bf:c2:1f:ba:4d:7e:36:60:b0:be:a2:2e:
bc:7b:4d:13:95:80:32:99:ac:20:16:b2:aa:e6:f0:
d9:f0:6c:9b:06:2f:6d:5b:a8:99:00:38:14:47:eb:
15:d4:2f:ff:9b:c6:6a:9e:85:32:76:c8:41:76:96:
b8:06:28:38:e6:0d:2c:f8:47:af:63:04:60:ff:5b:
6e:bb:2c:ac:d8:6e:ad:6b:87:da:e2:a5:a8:8e:fa:
7b:ba:d6:47:1f:cf:85:1f:f1:9e:f0:ec:20:c2:97:
d0:9e:f7:10:04:85:1c:86:ca:6f:e9:be:cc:17:b5:
35:ae:b6:a9:17:30:38:7d:3a:5f:6d:98:34:46:be:
b8:4c:4e:99:af:43:0c:a2:6a:a4:00:d3:8d:3c:74:
0f:f4:83:53:6d:b7:f1:01:f9:b4:8e:4e:1a:d5:d6:
22:e3:25:fb:61:c1:cb:3c:17:e6:e9:8d:47:a1:7f:
12:31:8f:d4:32:b2:dd:00:0a:07:e8:6a:91:99:e3:
a0:c2:75:05:dd:7e:d6:80:99:a2:46:89:d6:88:db:
ab:22:5e:c1:0e:0e:15:20:47:96:17:eb:4a:bd:4f:
f3:32:a3:e2:dc:db:8a:c5:38:6a:eb:3d:ec:81:ef:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:6D:6F:5C:ED:7D:A8:16:19:EA:7A:67:6C:87:1E:66:37:C7:50
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sfltb1ztfagWGep6Z2yHHmY3x1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.170.0/24
89.144.63.0/24
Signature Algorithm: sha256WithRSAEncryption
57:01:92:93:50:a6:35:ae:e6:08:e1:e9:66:ba:f4:07:ed:8d:
eb:eb:13:b7:32:2a:f2:1d:be:fa:81:2b:5b:16:ab:f3:22:56:
db:df:ce:7f:b3:fb:2a:09:18:b1:8a:8c:90:ee:00:ee:b4:81:
ea:38:06:6e:52:42:90:6e:c1:25:47:c7:e7:25:f9:60:09:15:
a9:8e:bc:df:b0:8d:3a:e2:0d:02:95:83:3c:2f:03:09:fb:dd:
55:a1:fd:3a:f5:30:cb:b2:c4:b3:f6:c8:77:be:75:3e:4d:05:
35:2b:43:ad:6d:4a:51:86:38:f4:f9:3b:7a:aa:4d:54:08:da:
35:19:74:08:21:f6:97:a3:ba:f9:fa:17:1a:a9:70:c6:57:5c:
1e:94:a3:7e:76:d9:41:04:ad:8d:6b:55:c0:83:e1:72:b6:f9:
ad:5e:c5:12:db:d6:57:bc:53:76:73:d6:c0:dd:52:32:a9:9b:
74:d5:ac:b4:5e:c0:09:ca:1c:7a:46:c6:59:c7:3a:5a:a2:2d:
96:f1:6f:76:9f:12:3f:46:24:a0:c0:7f:25:d2:23:b5:0a:43:
b1:ca:df:24:1d:cd:1a:f7:56:b2:3a:f9:6f:47:d2:9c:a0:bc:
0d:bb:cd:57:36:73:6f:26:f7:60:e8:fb:f9:99:93:27:a2:36:
1e:09:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:03 2026 by rpki-client