Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa
File: sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa (raw, json)
Hash identifier: ZUhSIpiNJj1ft9rDQsYCHKV1UDkkyNZJvSyHieA9rEU=
Subject key identifier: B1:90:9B:99:84:32:7C:6A:47:E2:26:8E:AC:BC:76:BF:6C:82:4C:08
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019FEEEB6129F2940DDA71E24A306D38A8F6
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa
Signing time: Tue 11 Aug 2026 03:43:51 +0000
ROA not before: Tue 11 Aug 2026 03:43:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219031
IP address blocks: 194.61.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ee:eb:61:29:f2:94:0d:da:71:e2:4a:30:6d:38:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Aug 11 03:43:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1909b9984327c6a47e2268eacbc76bf6c824c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:80:19:46:a4:0b:11:30:9e:fb:ee:55:f9:
00:cc:bd:4a:e0:b1:62:6e:e2:e6:16:3e:33:14:ce:
d6:2b:29:cd:37:3b:23:56:8e:ef:21:54:4c:fd:94:
6f:ec:92:c1:d8:9a:a6:70:c9:61:77:5e:35:c2:2c:
41:05:92:97:35:87:5b:d0:74:51:98:dc:47:0d:6e:
a3:6f:de:35:7d:89:19:91:7c:5b:84:34:28:c2:98:
77:da:b1:c2:c9:d3:69:e1:c4:30:43:92:2b:b9:15:
4f:ad:14:54:e3:46:0e:40:a0:77:d8:8a:25:4d:2e:
84:22:ba:2b:3c:a1:2a:b3:a8:63:36:f1:95:e8:83:
7c:42:8a:e9:7d:dc:97:8a:b1:50:8f:f5:98:18:1e:
3f:b3:08:46:3f:4b:dd:cf:9c:cd:69:68:47:49:04:
52:28:af:c7:3b:bb:73:0d:23:5e:89:6f:cf:d2:b5:
ad:e2:b8:ba:16:b1:18:ba:a0:a9:2f:9f:f8:76:3f:
75:dd:d3:e6:17:63:09:02:e8:95:12:12:77:94:f8:
b5:9f:3b:65:0c:b0:0c:c6:2e:63:3d:1d:ec:a5:5e:
c7:0a:53:8d:01:a0:6e:ea:87:e1:ee:d6:0e:f7:57:
37:4f:8a:83:1f:52:af:55:77:1e:e1:2a:37:1b:2f:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:9B:99:84:32:7C:6A:47:E2:26:8E:AC:BC:76:BF:6C:82:4C:08
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2a:5c:be:c8:df:46:3b:8f:67:49:ac:42:f5:5e:4d:42:a0:
e2:6e:7c:ad:9c:73:dc:2b:1c:c5:4d:a0:5c:e3:65:28:44:0e:
69:14:26:9e:8f:2a:48:4a:21:92:4b:de:35:e1:89:50:13:7a:
eb:5d:cb:04:9c:a9:06:e1:06:97:bb:d1:f9:41:2a:86:3e:73:
0c:52:20:4d:c4:fe:04:3c:9d:ed:13:a6:28:76:23:39:2a:41:
37:c7:f9:b8:ca:bd:f7:7b:c6:84:4e:67:b6:ee:00:1e:0d:47:
2d:27:ff:ba:dc:a6:27:3b:da:d4:fe:38:d4:19:29:fe:74:6f:
a7:85:ff:5e:d6:5a:db:c4:08:a9:9e:a8:8e:06:26:9c:49:43:
fc:85:1c:3c:b2:3f:21:2f:cc:fb:93:7b:c7:c5:ba:67:8a:35:
41:18:2c:b6:4d:6c:0f:c1:c8:2f:d7:ab:da:26:91:b9:8b:0c:
ba:2a:d0:a4:6d:ed:ff:54:5a:5d:ca:9d:0a:f6:9d:a7:97:9b:
47:0e:b1:05:4b:7c:6c:90:36:89:3d:c7:b4:0f:2a:a7:1c:bc:
f9:13:7b:4d:cb:b1:60:99:49:ea:0f:47:13:71:a3:c8:b8:28:
f9:4e:00:b0:cb:35:6c:9d:ad:13:86:d4:67:7a:96:94:70:cd:
ad:02:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:48 2026 by rpki-client