Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa
File: SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa (raw, json)
Hash identifier: noEFjTcJ4li+Z5lYJLyOd4NFqf9iNEJOmVPDK4Ua36c=
Subject key identifier: 4A:61:F4:63:66:A4:8F:D0:57:A0:F2:6C:A0:24:4F:FF:90:1B:AB:FE
Certificate issuer: /CN=181c532f1ff312294dd11c511b177cd33c830456
Certificate serial: 019FF6C8D8B9D035D3BF00018B9E611809FB
Authority key identifier: 18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa
Signing time: Wed 12 Aug 2026 16:23:05 +0000
ROA not before: Wed 12 Aug 2026 16:23:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 139.13.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:c8:d8:b9:d0:35:d3:bf:00:01:8b:9e:61:18:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181c532f1ff312294dd11c511b177cd33c830456
Validity
Not Before: Aug 12 16:23:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a61f46366a48fd057a0f26ca0244fff901babfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:0d:cb:6a:29:ce:9d:75:36:ca:2a:17:0a:
53:28:a1:06:f3:16:00:53:77:8f:6c:ad:80:a1:cc:
ef:2c:8a:77:be:a5:65:ab:2b:28:83:6d:15:f1:c6:
b5:99:da:fa:d8:99:da:f1:7f:d9:b8:f8:7a:07:b0:
2b:8a:96:c3:a8:19:7b:da:be:97:26:8a:a4:5b:d4:
21:4b:05:9f:5b:81:07:99:09:8b:d0:8c:4f:97:c6:
6d:b0:d5:6d:8e:ac:15:61:f7:08:ce:51:d8:e2:b1:
e4:63:4c:5e:6b:7c:84:d9:23:46:52:b0:11:ca:52:
f6:15:89:e2:b5:2f:c0:06:51:df:9e:03:de:de:10:
0e:b6:e3:54:a8:31:0e:23:eb:c4:39:15:a3:43:d5:
48:20:c6:f4:7a:e5:90:32:b4:ab:75:75:0b:da:da:
9e:5a:3d:46:7f:e9:27:2c:fa:5d:00:31:4c:84:f3:
94:33:c6:63:3e:5b:34:67:83:9d:4e:77:4b:15:3d:
99:6d:e9:44:85:63:8e:5b:14:bf:6b:b1:4f:5c:71:
f9:0b:e2:84:e6:86:9d:9b:72:25:f4:00:50:f7:1e:
23:88:8d:55:12:b4:24:8c:1b:a8:5b:aa:41:0b:66:
ff:68:ed:de:da:f4:06:74:14:80:e3:c8:fc:9c:f1:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:F4:63:66:A4:8F:D0:57:A0:F2:6C:A0:24:4F:FF:90:1B:AB:FE
X509v3 Authority Key Identifier:
keyid:18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.13.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:17:4d:95:97:4d:3c:8a:8f:d3:b9:dc:a4:2c:a5:0f:9f:b4:
9b:75:3d:1c:32:dc:34:32:ca:29:78:65:1a:e4:d1:15:46:0e:
65:e9:bc:8c:57:f1:70:25:b2:6e:5b:56:62:c9:4c:16:98:3b:
b5:95:5b:9b:6d:e5:55:ad:16:a8:fb:21:35:a4:97:03:3e:26:
cf:4e:a5:65:01:2e:8c:36:68:46:47:f8:3d:79:c9:48:91:b2:
30:ac:cd:52:ed:91:60:11:c3:69:48:66:ab:cc:e5:3e:63:1f:
89:0d:08:9a:ae:f3:1a:b7:ce:11:5f:ba:4c:b7:a8:b7:6b:3d:
48:b3:dd:0d:61:b5:87:10:46:fb:09:6b:f8:f6:e4:16:94:9a:
a7:6b:a7:e3:21:90:8b:a7:52:37:db:59:66:39:24:39:a7:a5:
70:41:0d:a6:bc:97:3e:19:29:d9:9d:05:1f:e4:1d:5b:41:9d:
a9:ce:12:42:3a:fb:a1:93:50:9b:f0:20:3c:63:b0:fa:4a:4b:
88:bf:53:86:56:45:bb:e9:d5:93:7f:de:74:d6:ec:9c:f1:4b:
5b:8f:7c:86:52:c9:c7:13:d7:0a:85:ec:64:78:69:d3:7b:67:
d8:70:f6:77:71:e2:c1:33:8b:bc:2a:f3:54:d2:a5:ff:1e:ba:
ea:bc:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:55 2026 by rpki-client