Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Szf7AW8IIQ4fa7UuX0bfm7RcKug.roa
File: Szf7AW8IIQ4fa7UuX0bfm7RcKug.roa (raw, json)
Hash identifier: IILDGmrowqAvO7/9dgKrWwkZOwkmhpfWls1JMPAy7XM=
Subject key identifier: 4B:37:FB:01:6F:08:21:0E:1F:6B:B5:2E:5F:46:DF:9B:B4:5C:2A:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A06612BF4864E0E3DFD140A216672B35C3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Szf7AW8IIQ4fa7UuX0bfm7RcKug.roa
Signing time: Thu 03 Sep 2026 07:01:39 +0000
ROA not before: Thu 03 Sep 2026 07:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 94.249.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:12:bf:48:64:e0:e3:df:d1:40:a2:16:67:2b:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 07:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b37fb016f08210e1f6bb52e5f46df9bb45c2ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:f0:81:5c:2c:be:8a:0c:fd:f3:ba:f1:5b:
fa:e5:6d:86:14:4b:ce:ed:2c:66:4d:80:d7:2e:04:
67:9c:f8:2b:2c:72:e1:1c:a6:40:04:81:11:c9:36:
4b:ae:60:1c:f2:0c:18:56:9f:b5:35:a9:40:32:5b:
0d:e4:2a:b8:3c:09:c1:cc:2f:1a:04:9e:f8:3a:03:
08:d2:86:af:32:00:2e:89:02:1d:e6:a6:b1:08:81:
47:55:99:94:f1:32:a0:29:5a:ea:33:33:f3:af:13:
4e:cb:d6:4c:52:7c:f1:c6:a1:16:92:6f:48:e2:59:
2c:20:08:2d:90:67:45:92:33:98:d2:97:59:08:0f:
b7:a5:5e:e1:ba:35:0e:f0:d2:ab:54:73:66:cd:85:
64:bb:b2:8b:2f:09:32:2b:50:cd:f1:7d:8d:9f:58:
3c:db:7f:3b:d1:3b:6e:09:0f:62:e2:8f:eb:2f:9b:
b5:8d:a5:cc:87:54:8f:f1:31:48:ba:41:07:03:70:
f9:6d:ea:2d:ed:dd:11:0e:90:a7:57:52:84:76:fd:
e5:f0:a6:02:e2:18:ee:ed:4f:9d:55:c4:23:eb:23:
ec:65:01:3f:81:17:97:2e:dc:1f:2b:d1:fd:b5:bc:
4e:c2:87:62:16:e0:de:7f:80:72:4e:ef:e6:42:37:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:FB:01:6F:08:21:0E:1F:6B:B5:2E:5F:46:DF:9B:B4:5C:2A:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Szf7AW8IIQ4fa7UuX0bfm7RcKug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.236.0/24
Signature Algorithm: sha256WithRSAEncryption
01:43:8c:97:42:b8:de:f4:29:87:25:a7:4d:b7:3c:99:1c:55:
ec:95:16:ed:60:6c:f2:1f:3e:3c:11:1d:83:25:e1:9d:93:ed:
46:24:59:49:40:09:80:61:e8:c2:f8:37:1b:00:0e:fb:a7:a5:
c5:9d:de:cf:cb:4e:50:4e:04:cc:88:a9:1f:ee:94:80:15:0d:
ee:fd:90:87:d8:83:f6:f2:69:37:4e:78:12:58:91:5f:2f:07:
7d:0b:3c:22:82:70:15:83:c0:1d:5c:05:2d:5c:ee:48:fc:94:
d1:e7:0f:38:93:97:c0:c6:f0:c8:59:eb:33:bc:f8:7f:cd:8d:
d3:9a:0a:57:d1:c1:9b:56:30:42:4c:cb:58:51:08:61:99:1c:
64:83:d2:48:9b:e8:92:da:14:89:c6:ef:0c:f4:08:17:8e:0c:
8e:6c:a3:9a:02:4e:eb:12:b2:64:1a:38:10:59:1f:47:4f:bb:
bb:65:aa:da:9d:5c:b4:1b:14:dc:8e:f7:e8:0a:1f:23:a4:e2:
b6:d5:bb:c9:4e:40:d8:d4:9a:56:1b:5d:36:46:d8:49:e0:51:
cb:fa:da:af:2f:7c:90:d7:03:79:be:d5:fd:6c:4e:29:3c:1e:
a5:71:df:00:06:63:ca:ad:59:82:11:70:1a:0c:82:93:e5:d7:
10:27:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:27 2026 by rpki-client