Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/syNcSuhVRfYJR8daEavUqQ3We1I.roa
File: syNcSuhVRfYJR8daEavUqQ3We1I.roa (raw, json)
Hash identifier: Ri+SKasBBMRNXMg87+pxuOi4+1/xFrxznznb34VYdV0=
Subject key identifier: B3:23:5C:4A:E8:55:45:F6:09:47:C7:5A:11:AB:D4:A9:0D:D6:7B:52
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F3C9D14DDEEE59118946776C7BEA9994C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/syNcSuhVRfYJR8daEavUqQ3We1I.roa
Signing time: Tue 07 Jul 2026 12:45:55 +0000
ROA not before: Tue 07 Jul 2026 12:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34501
IP address blocks: 217.156.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:9d:14:dd:ee:e5:91:18:94:67:76:c7:be:a9:99:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 7 12:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3235c4ae85545f60947c75a11abd4a90dd67b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:09:db:2f:49:9b:e1:13:ee:eb:b2:e6:34:
35:3c:fd:a1:da:04:77:42:c2:ae:cf:1f:a9:f3:c2:
db:73:da:7d:04:d1:fc:e2:13:31:c9:88:ca:78:87:
70:b8:11:58:e4:70:26:28:4d:ae:b1:51:4c:f3:94:
a0:c6:e0:06:86:31:a9:fd:fb:b0:38:96:39:89:c1:
dc:17:fe:a3:d7:cc:90:62:33:4d:ed:f1:cf:dd:83:
43:0b:26:90:9d:69:7d:79:98:4a:8b:79:38:b1:1d:
48:bd:62:1b:e2:b5:82:0f:b3:65:f0:dc:db:f4:95:
03:38:0a:28:f5:d2:65:d7:be:09:9a:74:82:36:a8:
2c:cb:c0:e0:12:7d:c4:a5:05:b7:f5:9c:54:1b:6c:
c0:43:84:8c:6d:a1:13:5d:cb:7b:64:01:90:1c:3c:
4d:d9:38:90:9d:50:48:93:22:ef:46:00:d4:8c:35:
2b:5c:30:6e:b9:99:2a:b2:c5:8e:a7:46:c4:bc:1b:
cd:0b:30:eb:c3:87:02:6e:13:d6:01:b2:19:b1:46:
18:2f:00:c7:68:8e:5a:4b:a8:67:dc:e8:71:cc:64:
4a:fe:02:05:e2:88:c4:32:6e:c0:c7:5e:fa:b9:63:
e8:c6:76:b7:9b:c3:45:87:22:b2:15:67:24:e0:ce:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:23:5C:4A:E8:55:45:F6:09:47:C7:5A:11:AB:D4:A9:0D:D6:7B:52
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/syNcSuhVRfYJR8daEavUqQ3We1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.88.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f8:d5:c4:56:ba:d6:d4:8e:c7:36:11:eb:ed:44:09:1a:16:
ac:c5:70:75:63:4f:a3:31:79:8b:c8:7b:c3:e9:97:a7:76:02:
d1:a9:9d:fc:f8:6e:b6:57:c7:db:0a:f9:a8:c6:54:fd:db:88:
66:5f:24:ad:8f:b9:08:cf:c9:b2:5b:79:25:d8:6e:0b:9e:f7:
cb:2c:46:22:81:47:01:20:64:c2:8d:86:da:e8:71:ff:87:ef:
06:38:ea:b2:03:cc:6d:0e:7f:69:5b:7d:61:ad:82:e5:f2:39:
cf:1c:89:bd:b4:f4:e7:1e:d3:f0:52:45:bd:d7:7d:4b:b2:ce:
25:38:2c:d0:6c:01:6e:d7:71:a2:dd:84:c2:a0:60:99:22:d2:
50:9f:7d:85:38:5e:39:89:d3:a2:52:9d:e2:51:be:0e:d4:b8:
9d:7e:34:a8:06:6d:04:d9:47:ff:4b:04:65:73:22:42:f5:5a:
85:d0:86:27:7c:72:a8:9e:4a:74:5e:a9:95:b8:12:b8:06:31:
28:8c:79:9d:c7:56:3c:5f:ba:08:42:53:50:54:f9:35:51:57:
30:5b:cc:5f:a4:a5:50:02:89:4e:f5:43:41:f0:5a:34:cf:46:
6e:15:6b:40:6e:63:89:4b:28:70:41:28:c0:07:a4:04:ca:6b:
5b:4e:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:31 2026 by rpki-client