Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SrAiFJE8rAi6lH0eU1ImCwYukZY.roa
File: SrAiFJE8rAi6lH0eU1ImCwYukZY.roa (raw, json)
Hash identifier: n0gf+kqsyWS4WgOQpDS3+I1oNwinVTuDQg3lEdN0Bws=
Subject key identifier: 4A:B0:22:14:91:3C:AC:08:BA:94:7D:1E:53:52:26:0B:06:2E:91:96
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019FC300C834EEA84B52FFB03883B19B7DC7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SrAiFJE8rAi6lH0eU1ImCwYukZY.roa
Signing time: Sun 02 Aug 2026 15:03:55 +0000
ROA not before: Sun 02 Aug 2026 15:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 89.21.86.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
194.61.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:00:c8:34:ee:a8:4b:52:ff:b0:38:83:b1:9b:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 2 15:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ab02214913cac08ba947d1e5352260b062e9196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:ac:41:52:99:84:4b:dc:5d:83:85:d9:29:
1a:04:d0:68:f7:3e:85:e2:9e:c0:06:d8:09:d4:23:
1e:ed:75:5b:54:cc:d2:bb:56:55:c1:79:8d:51:78:
31:64:9b:73:13:26:87:34:37:ae:d8:8e:32:a4:d4:
e0:d4:4e:ac:8b:7c:ea:a1:cb:c7:12:49:b5:0f:e9:
a9:a8:2e:77:f8:ba:b7:bf:79:f6:07:9e:92:2e:1d:
64:48:ed:76:44:70:b0:7f:9d:2d:45:be:e2:41:bd:
d6:83:7b:22:3b:a1:b4:7c:dc:2e:89:63:59:bb:22:
3e:99:f7:af:f3:9e:ab:26:6b:a1:d0:7e:25:30:9d:
d4:35:1b:29:ce:aa:b5:ef:05:a6:2d:11:2b:d7:db:
1e:06:ab:35:59:3d:36:98:3c:b0:d4:e9:ae:a9:8e:
de:48:5b:c6:7e:16:c6:5f:67:b6:a6:48:58:0a:e9:
66:6d:65:0c:a7:51:9f:0a:6d:1c:3b:e7:8f:79:46:
4d:74:0a:9f:83:11:92:93:ad:13:ed:c7:de:ca:58:
64:83:62:12:bf:4c:4e:fa:42:35:17:39:5e:3d:48:
a9:92:c0:45:70:5b:1c:2c:a5:62:20:4a:a2:f0:4c:
0e:1f:b5:ec:b0:01:48:55:f9:ff:33:84:0f:9a:32:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:22:14:91:3C:AC:08:BA:94:7D:1E:53:52:26:0B:06:2E:91:96
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SrAiFJE8rAi6lH0eU1ImCwYukZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.86.0/24
109.122.43.0/24
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
85:53:ef:b5:5c:0e:df:c5:2e:13:21:ec:c9:bf:a3:c2:0a:a4:
5b:66:0b:eb:5a:58:b1:2a:87:8d:2a:6d:dc:f2:8e:4b:6c:c3:
7d:ba:b0:92:1d:25:a7:f9:0a:37:ab:27:63:b4:4f:29:d5:8e:
5f:20:c9:5c:1f:02:ed:45:b9:a5:3b:09:be:ef:ca:fc:69:27:
ec:03:81:d0:4a:74:75:9b:1c:b7:8c:2a:75:e3:2d:79:fa:27:
76:93:48:0a:7b:e5:27:ec:68:91:98:da:02:51:3e:ec:82:b4:
bd:bb:9b:3f:3e:b7:6e:37:da:09:a4:cc:0b:1f:0a:59:55:9a:
b4:69:70:fe:10:f1:0a:63:bc:ec:d8:ba:2a:2b:eb:ac:9f:0f:
31:c1:35:95:db:09:3d:06:4e:74:45:7f:81:94:11:57:2d:f8:
8a:5d:b1:23:a6:12:67:98:6d:6a:22:d1:bf:55:fb:42:a2:ff:
d2:9c:f9:ae:f4:1f:0f:fd:2f:96:08:5d:af:7d:1c:aa:1a:a5:
6a:c6:c7:61:a4:79:80:25:72:62:ac:4c:3c:98:e3:b7:4b:23:
2e:40:83:22:37:55:b8:b5:61:e6:d8:58:22:de:db:2c:03:58:
f1:46:03:d1:d9:b2:2b:17:3b:ba:47:11:c9:56:e4:16:57:3f:
9b:4f:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:19:56 2026 by rpki-client