Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sRCVMOMzIrfkT6i17kJovlw2_uU.roa
File: sRCVMOMzIrfkT6i17kJovlw2_uU.roa (raw, json)
Hash identifier: lrAoFrLbOatf+lBe9U/UGxRtH+/gKe3tomZKLjimdMQ=
Subject key identifier: B1:10:95:30:E3:33:22:B7:E4:4F:A8:B5:EE:42:68:BE:5C:36:FE:E5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A03858A409F76B46C60383AB477FDB5F0C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sRCVMOMzIrfkT6i17kJovlw2_uU.roa
Signing time: Tue 25 Aug 2026 09:55:28 +0000
ROA not before: Tue 25 Aug 2026 09:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218997
IP address blocks: 80.96.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:58:a4:09:f7:6b:46:c6:03:83:ab:47:7f:db:5f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 25 09:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1109530e33322b7e44fa8b5ee4268be5c36fee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:cf:ca:eb:b9:f0:82:1e:ca:91:a4:b2:e3:
9b:30:74:d3:48:78:1d:a9:46:f2:69:dd:d6:c4:19:
45:02:a2:7e:56:f4:91:99:a4:8d:55:44:a0:b5:0b:
af:fb:02:4b:f7:ac:2b:52:9f:bf:e5:a8:e2:3f:98:
8a:33:11:30:95:63:90:ad:fb:29:2a:e6:5d:8d:01:
f2:10:12:4c:ad:14:d0:81:d4:2d:ed:8d:e0:c6:e7:
d8:2c:43:71:a6:a5:97:fd:52:31:01:eb:66:0e:31:
fe:aa:be:4c:7e:71:34:65:75:43:d0:00:d8:64:4f:
eb:80:93:64:df:61:fd:20:88:6a:3e:7b:ca:43:a2:
62:df:3f:6a:82:a7:d6:8b:cb:e8:b4:5d:c1:35:7f:
4c:59:48:44:7a:bb:a7:9b:18:a7:5f:85:fc:c9:16:
65:a1:b4:9e:c9:d1:69:48:88:55:ab:68:5e:33:75:
31:6a:2f:a9:c0:1b:64:98:af:00:19:2e:3d:ac:b3:
9b:f7:f8:dd:4e:36:29:86:04:23:23:91:df:dd:13:
5f:52:9c:b8:81:2e:40:55:6c:ce:ff:7d:a2:28:d7:
0c:48:5a:92:13:d2:66:84:15:58:6a:b5:68:da:75:
01:29:0c:ef:07:b6:52:4d:63:83:67:07:03:62:e1:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:95:30:E3:33:22:B7:E4:4F:A8:B5:EE:42:68:BE:5C:36:FE:E5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sRCVMOMzIrfkT6i17kJovlw2_uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:92:0b:23:cf:ce:c3:96:f4:63:3b:18:aa:fd:36:8c:73:0e:
0a:98:58:0b:d0:d2:aa:39:b1:7b:b2:a5:de:81:ac:31:1d:3f:
7f:73:8f:a3:55:0b:04:62:b1:9b:5e:ee:b4:bc:4e:98:3a:57:
9c:cf:c6:b7:f9:9d:dc:bf:f5:f8:d2:bf:64:4b:70:7a:cd:65:
c5:8e:19:8b:b3:17:e6:9a:48:28:91:d5:d0:a6:42:73:50:c9:
b0:ff:59:11:f5:09:5d:fb:bc:1a:b2:9c:b1:32:79:dc:81:54:
d4:e7:a7:dd:ea:ef:13:2f:bb:48:fe:9b:d2:26:d6:e8:6e:82:
ed:4a:21:73:46:a7:73:dc:04:43:de:b1:e2:ee:2f:10:d1:0c:
bc:61:8c:06:90:4d:9d:52:61:f9:07:96:5c:a1:67:32:b8:3b:
7a:ea:04:1c:46:62:3a:fd:61:16:ca:fe:90:f0:e8:b5:a1:86:
a9:a0:e7:fd:b0:eb:de:a7:3e:4a:cf:d5:c1:ef:a3:00:f2:11:
d3:c1:31:f7:e9:c1:0c:a3:4f:a4:09:09:40:48:4c:16:ae:33:
fc:e6:be:be:c3:1f:1d:2b:3f:c2:7b:39:da:66:77:ce:11:5a:
aa:71:c3:d8:66:a0:e8:48:5c:7c:c0:f6:2d:22:7f:ad:5f:96:
c5:b4:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:13:50 2026 by rpki-client