Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/sppSM2y7rJT-h7ADD-NU7WDxdyw.roa
File: sppSM2y7rJT-h7ADD-NU7WDxdyw.roa (raw, json)
Hash identifier: 4LbWqx/mTc+oUB9onuqY3e927U8194epwh7XyKhVMwA=
Subject key identifier: B2:9A:52:33:6C:BB:AC:94:FE:87:B0:03:0F:E3:54:ED:60:F1:77:2C
Certificate issuer: /CN=12e28039646dcc32eceb58428f97cc994b998577
Certificate serial: 019A2B9E8FA67AED03416670C3C847D7CAE9
Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/sppSM2y7rJT-h7ADD-NU7WDxdyw.roa
Signing time: Tue 28 Oct 2025 16:20:02 +0000
ROA not before: Tue 28 Oct 2025 16:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 217.117.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:9e:8f:a6:7a:ed:03:41:66:70:c3:c8:47:d7:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577
Validity
Not Before: Oct 28 16:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29a52336cbbac94fe87b0030fe354ed60f1772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:c5:e5:6b:89:d0:13:30:55:ef:d1:bf:d8:
c8:03:9f:db:b4:c5:05:f2:9d:a1:ab:62:39:fe:f2:
fc:86:b5:7a:4e:dd:81:f9:33:bf:f4:63:a5:e0:85:
c6:d6:a3:f6:5e:2b:b5:84:a7:79:1c:97:25:44:b8:
cc:0e:d5:ac:13:ca:94:75:76:eb:af:4e:34:4b:fd:
3a:db:94:5d:ee:24:77:61:52:4b:42:61:49:d2:01:
ff:9d:ad:39:e6:d1:bb:b2:bb:fc:cb:03:dc:42:ee:
48:fe:c9:17:8d:56:2e:c4:68:22:0b:b8:c5:f4:f0:
1e:ce:ed:4a:7c:4b:02:ce:cf:7f:31:9b:0c:ca:6e:
06:46:c7:72:c4:73:e8:80:ca:ee:39:ab:93:91:ce:
0a:63:b8:9b:21:ef:b1:c5:da:23:bd:29:92:6c:08:
09:b2:ff:d4:5c:a0:48:7e:6b:ba:d1:03:4d:29:bf:
71:21:5a:b9:f2:7f:0f:aa:0b:dd:20:ce:0d:2b:25:
d3:e0:21:8a:15:3c:8a:86:80:22:11:4d:dc:37:b0:
af:36:bf:d1:a7:51:bf:eb:10:0a:a5:33:a0:8a:87:
91:6c:07:83:a3:bd:2a:94:59:24:ef:18:d4:88:47:
cf:48:bb:b2:71:16:da:75:b4:d4:94:fc:7e:20:81:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:52:33:6C:BB:AC:94:FE:87:B0:03:0F:E3:54:ED:60:F1:77:2C
X509v3 Authority Key Identifier:
keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/sppSM2y7rJT-h7ADD-NU7WDxdyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.117.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a0:65:8f:39:46:b5:10:aa:9c:3b:d7:11:22:e4:7f:46:e2:
73:1c:b6:59:16:6c:fe:ac:8f:e8:f5:7a:1b:b4:d6:9a:eb:83:
0d:2c:e6:69:8a:b8:89:80:14:51:ba:c5:8b:4b:1a:49:b7:f6:
fb:d1:29:c1:34:c1:6d:ae:e8:ca:a7:e5:8b:58:70:6f:da:2e:
ce:b4:9e:bf:32:68:af:42:f7:2f:72:69:06:87:6b:62:29:f6:
06:d0:b3:c7:4e:ee:6a:e8:d6:3f:13:cd:6b:6d:91:ce:93:7b:
4b:b6:7b:bf:87:5f:54:d7:89:3b:6f:7b:a2:dd:d3:7f:d0:32:
45:9a:92:30:36:2d:d4:2b:a2:3b:98:25:78:aa:8f:d5:ca:ce:
a5:35:56:fd:bd:24:be:dc:3d:e8:c6:d8:6a:01:e0:61:2a:16:
8e:ef:ef:01:b6:a3:4e:23:be:a3:f9:9c:8f:8c:aa:17:aa:fb:
0f:82:51:6b:52:cf:34:72:27:24:00:3b:ff:9b:6a:79:62:dd:
b4:e6:70:b6:1f:82:b0:f9:d4:cc:68:c7:44:3d:0f:84:d2:85:
13:02:ae:79:8a:d0:c2:b8:6f:42:63:ee:27:54:13:f6:a6:23:
fe:5c:3c:57:c0:74:13:8b:bc:21:43:cb:76:d5:dd:f4:70:01:
46:80:22:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZorno+meu0DQWZww8hH18rpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTI4MDM5NjQ2ZGNjMzJlY2ViNTg0MjhmOTdjYzk5NGI5
OTg1NzcwHhcNMjUxMDI4MTYyMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjlhNTIzMzZjYmJhYzk0ZmU4N2IwMDMwZmUzNTRlZDYwZjE3NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PTF5WuJ0BMwVe/Rv9jIA5/btMUF
8p2hq2I5/vL8hrV6Tt2B+TO/9GOl4IXG1qP2Xiu1hKd5HJclRLjMDtWsE8qUdXbr
r040S/0625Rd7iR3YVJLQmFJ0gH/na055tG7srv8ywPcQu5I/skXjVYuxGgiC7jF
9PAezu1KfEsCzs9/MZsMym4GRsdyxHPogMruOauTkc4KY7ibIe+xxdojvSmSbAgJ
sv/UXKBIfmu60QNNKb9xIVq58n8PqgvdIM4NKyXT4CGKFTyKhoAiEU3cN7CvNr/R
p1G/6xAKpTOgioeRbAeDo70qlFkk7xjUiEfPSLuycRbadbTUlPx+IIHeXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKaUjNsu6yU/oewAw/jVO1g8XcsMB8GA1UdIwQY
MBaAFBLigDlkbcwy7OtYQo+XzJlLmYV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAt
MzZkOTFkYmNmYzQxLzEvc3BwU00yeTdySlQtaDdBREQtTlU3V0R4ZHl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAtMzZkOTFkYmNmYzQx
LzEvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XVgMA0G
CSqGSIb3DQEBCwUAA4IBAQB/oGWPOUa1EKqcO9cRIuR/RuJzHLZZFmz+rI/o9Xob
tNaa64MNLOZpiriJgBRRusWLSxpJt/b70SnBNMFtrujKp+WLWHBv2i7OtJ6/Mmiv
QvcvcmkGh2tiKfYG0LPHTu5q6NY/E81rbZHOk3tLtnu/h19U14k7b3ui3dN/0DJF
mpIwNi3UK6I7mCV4qo/Vys6lNVb9vSS+3D3oxthqAeBhKhaO7+8BtqNOI76j+ZyP
jKoXqvsPglFrUs80cickADv/m2p5Yt205nC2H4Kw+dTMaMdEPQ+E0oUTAq55itDC
uG9CY+4nVBP2piP+XDxXwHQTi7whQ8t21d30cAFGgCKj
-----END CERTIFICATE-----
Generated at Thu Oct 30 17:43:47 2025 by rpki-client