Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SmqZrvikq7HfwOhHS_Jhr4JYUHg.roa
File: SmqZrvikq7HfwOhHS_Jhr4JYUHg.roa (raw, json)
Hash identifier: r+5zBInMkzg3beIZrLqNLqsu4+qBKM9rDXOi9nctSfE=
Subject key identifier: 4A:6A:99:AE:F8:A4:AB:B1:DF:C0:E8:47:4B:F2:61:AF:82:58:50:78
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F6D1B8031B9ED7148D3671736F5567265
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SmqZrvikq7HfwOhHS_Jhr4JYUHg.roa
Signing time: Thu 16 Jul 2026 22:45:46 +0000
ROA not before: Thu 16 Jul 2026 22:45:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215110
IP address blocks: 2a02:2fc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6d:1b:80:31:b9:ed:71:48:d3:67:17:36:f5:56:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 16 22:45:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a6a99aef8a4abb1dfc0e8474bf261af82585078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:e7:2f:d3:d9:b6:18:f0:32:b8:fe:25:2a:
26:d5:81:ce:70:fe:14:8d:cd:ad:74:bf:5d:df:17:
f4:c8:82:06:c0:01:5b:3d:e7:80:da:14:c0:61:a3:
12:fc:6b:81:87:09:42:e5:d8:fb:30:a6:f6:94:8e:
b6:a4:14:d5:80:a2:5c:58:4a:f5:48:49:07:e6:68:
24:36:a2:40:c7:93:18:af:6e:ab:68:87:95:6f:87:
86:af:04:bd:27:a5:41:c7:a6:9a:88:ad:61:14:cc:
fd:a5:5a:58:03:c1:8c:b9:4e:48:6b:bb:08:f9:88:
24:c0:13:87:c4:5d:b8:d8:63:4e:b8:74:aa:2b:4b:
6a:83:7e:22:19:c7:82:fe:92:b3:31:c0:78:69:8b:
bc:2e:40:5a:70:85:c0:e3:33:47:fa:50:d6:28:74:
38:2b:12:e5:11:6b:e3:83:a5:9b:ed:31:09:24:2e:
6a:24:5a:80:4e:d5:c4:25:10:7a:d6:0b:77:15:48:
e4:5b:86:e9:bf:b6:ee:09:7b:60:f9:e1:ed:d0:24:
46:4d:ff:40:52:6e:a3:65:41:33:3c:ff:a5:62:a8:
62:e9:d5:e3:0a:f9:f9:ec:e6:5b:74:82:19:f7:9d:
fb:b8:ef:37:30:9c:e5:53:5d:1f:e5:e6:82:04:b3:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:99:AE:F8:A4:AB:B1:DF:C0:E8:47:4B:F2:61:AF:82:58:50:78
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SmqZrvikq7HfwOhHS_Jhr4JYUHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
cb:bb:10:01:39:bb:35:8d:a3:cf:35:f6:e5:93:f0:84:66:92:
21:ad:d2:1c:4e:da:fb:3d:1f:15:b1:e7:57:d9:48:e3:14:4a:
70:3c:b3:d7:a5:6d:29:65:dd:4e:57:f0:89:dc:3d:f2:e1:fb:
45:d4:b8:6d:91:27:08:59:f9:4c:1f:c2:89:cf:7e:49:5f:cb:
b0:c2:f0:67:6f:f8:48:44:af:2d:76:db:3d:aa:ec:7d:17:0e:
59:dc:42:4c:d7:ca:44:98:85:31:42:8b:ab:e3:cc:5f:f1:b5:
75:9c:68:ea:20:06:bc:8f:7a:28:56:59:5a:f1:53:a2:7d:f1:
7a:37:55:2c:9e:e0:13:9f:b3:83:89:ac:81:18:84:9c:4d:dc:
fc:8c:ff:50:82:6c:fc:b6:4c:11:2e:e1:9a:71:26:18:da:37:
91:84:58:29:0b:2b:5e:12:94:eb:69:fd:bb:e0:a1:c5:72:10:
ad:72:5e:38:4d:35:d5:7f:b8:93:b8:cd:ba:d1:3b:e6:14:34:
9f:80:2c:83:aa:52:1f:14:66:e8:3e:3f:55:73:ef:3d:1a:ae:
00:4d:70:e7:6f:34:68:d6:f9:4a:18:61:6f:76:02:b9:83:19:
0d:be:3c:88:df:bc:ba:94:14:81:1d:04:17:a4:eb:4c:c1:5b:
be:db:f7:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9tG4Axue1xSNNnFzb1VnJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzE2MjI0NTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTZhOTlhZWY4YTRhYmIxZGZjMGU4NDc0YmYyNjFhZjgyNTg1MDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql/nL9PZthjwMrj+JSom1YHOcP4U
jc2tdL9d3xf0yIIGwAFbPeeA2hTAYaMS/GuBhwlC5dj7MKb2lI62pBTVgKJcWEr1
SEkH5mgkNqJAx5MYr26raIeVb4eGrwS9J6VBx6aaiK1hFMz9pVpYA8GMuU5Ia7sI
+YgkwBOHxF242GNOuHSqK0tqg34iGceC/pKzMcB4aYu8LkBacIXA4zNH+lDWKHQ4
KxLlEWvjg6Wb7TEJJC5qJFqATtXEJRB61gt3FUjkW4bpv7buCXtg+eHt0CRGTf9A
Um6jZUEzPP+lYqhi6dXjCvn57OZbdIIZ9537uO83MJzlU10f5eaCBLOcIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEpqma74pKux38DoR0vyYa+CWFB4MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvU21xWnJ2aWtxN0hmd09oSFNfSmhyNEpZVUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIvwAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQDLuxABObs1jaPPNfblk/CEZpIhrdIcTtr7PR8V
sedX2UjjFEpwPLPXpW0pZd1OV/CJ3D3y4ftF1LhtkScIWflMH8KJz35JX8uwwvBn
b/hIRK8tdts9qux9Fw5Z3EJM18pEmIUxQour48xf8bV1nGjqIAa8j3ooVlla8VOi
ffF6N1UsnuATn7ODiayBGIScTdz8jP9Qgmz8tkwRLuGacSYY2jeRhFgpCyteEpTr
af274KHFchCtcl44TTXVf7iTuM260TvmFDSfgCyDqlIfFGboPj9Vc+89Gq4ATXDn
bzRo1vlKGGFvdgK5gxkNvjyI37y6lBSBHQQXpOtMwVu+2/e2
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:16 2026 by rpki-client