Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/sdArx3c5v_I16pfKlN60sOmgvEc.roa
File: sdArx3c5v_I16pfKlN60sOmgvEc.roa (raw, json)
Hash identifier: psnoqlbQu6wA8bhaL0BBABmx+if3rta6OgnM7Dh424I=
Subject key identifier: B1:D0:2B:C7:77:39:BF:F2:35:EA:97:CA:94:DE:B4:B0:E9:A0:BC:47
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E7845495602F786973D02390D31600A92
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/sdArx3c5v_I16pfKlN60sOmgvEc.roa
Signing time: Sat 30 May 2026 09:44:27 +0000
ROA not before: Sat 30 May 2026 09:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205745
IP address blocks: 189.13.144.0/24 maxlen: 24
189.13.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:78:45:49:56:02:f7:86:97:3d:02:39:0d:31:60:0a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: May 30 09:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1d02bc77739bff235ea97ca94deb4b0e9a0bc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:4b:2e:aa:c8:df:a9:d7:64:5e:1c:df:fd:
0e:6d:4c:87:b2:89:56:d1:aa:56:64:c5:ab:62:c1:
82:ac:13:2c:06:32:06:70:6f:4c:c2:87:31:58:50:
b7:9c:9b:ce:35:51:9b:9d:64:e3:9d:d9:2a:d8:32:
a0:dc:54:9a:5b:b1:5a:5b:2c:2f:d1:48:4e:44:7c:
64:3a:79:9e:74:bf:ea:f6:17:cd:90:03:74:31:f4:
97:1c:43:59:ee:78:75:c8:5b:72:ff:b0:3b:d5:f6:
c5:ed:37:5c:9d:20:17:4c:bb:64:94:bb:3d:26:5c:
07:e1:b4:ee:7b:ea:2d:d5:cc:b4:41:46:23:8d:fd:
c8:d9:0d:9a:c7:bc:a2:cb:5d:aa:74:bd:0f:b8:81:
1f:76:61:4c:46:70:09:9f:22:93:57:a1:9d:cc:83:
85:b4:1b:1d:1e:fd:b4:52:31:e5:48:97:0d:0c:1b:
83:98:1e:e6:4a:99:56:57:96:ea:97:82:1d:ad:66:
41:91:38:db:51:8c:76:af:15:8e:ec:b9:84:da:94:
ba:50:86:8a:e7:ed:c3:37:95:10:bc:5e:ab:2f:63:
7a:d6:8f:58:32:55:c4:4c:ab:2a:b9:b9:3d:53:e7:
26:ab:7f:3c:21:8f:f5:31:a7:34:60:4a:fa:dd:0b:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:2B:C7:77:39:BF:F2:35:EA:97:CA:94:DE:B4:B0:E9:A0:BC:47
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/sdArx3c5v_I16pfKlN60sOmgvEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.144.0/23
Signature Algorithm: sha256WithRSAEncryption
33:bd:fb:93:10:a8:21:b7:56:36:24:58:49:0f:a0:8e:95:21:
7f:59:39:52:23:96:40:c5:52:ac:3a:71:be:d2:0d:9e:6f:14:
c4:df:a4:c4:6d:71:01:1f:bf:81:5b:18:69:ff:39:15:a2:09:
bb:bc:08:17:6d:8a:ee:dc:41:51:a0:1b:c1:a1:df:79:81:ba:
c3:dc:ce:32:d1:ed:86:56:94:45:94:c6:1f:5f:a2:a2:ad:b6:
e2:b7:7c:6d:04:6d:00:fc:93:ea:15:d7:69:84:fa:8b:56:0b:
c1:f6:7d:16:53:5b:2c:0f:cc:dc:95:82:67:98:39:4f:ed:12:
f6:43:fe:fd:de:58:12:bc:6a:65:c4:98:a7:a1:56:61:06:95:
0e:f4:31:5f:df:f8:82:44:21:a1:f2:c1:0d:3c:60:c4:03:48:
7b:0b:2a:90:cd:13:31:d0:30:87:04:35:d6:b1:45:24:ad:7b:
09:7e:3a:2a:49:68:7f:59:3b:b2:db:a6:da:56:57:2d:05:59:
a4:e5:a5:c4:4a:61:fb:6d:d0:c4:fb:87:b0:7d:99:70:29:6e:
8f:52:ca:a5:be:6c:26:04:31:21:09:5a:29:cb:22:56:0f:2d:
f9:8c:95:0d:ba:35:8a:dc:81:0b:91:b2:cb:aa:2a:37:24:b5:
ab:7b:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:00:47 2026 by rpki-client