Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/sUn-f-qK9eXwNyOmR3mfe7EM8No.roa
File: sUn-f-qK9eXwNyOmR3mfe7EM8No.roa (raw, json)
Hash identifier: MGpupH/5gZWb0QJDQlscqVzzSmxpIo72s/B8/Jhn89g=
Subject key identifier: B1:49:FE:7F:EA:8A:F5:E5:F0:37:23:A6:47:79:9F:7B:B1:0C:F0:DA
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687C77ED24A0744A6F4DA2F9276BAE
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/sUn-f-qK9eXwNyOmR3mfe7EM8No.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149457
IP address blocks: 185.202.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:77:ed:24:a0:74:4a:6f:4d:a2:f9:27:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b149fe7fea8af5e5f03723a647799f7bb10cf0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:c6:22:be:4d:8b:f2:e1:8c:4a:78:fd:ff:
5d:32:fc:11:ff:02:6f:9a:87:7d:f4:08:b6:5f:9c:
a8:73:1a:84:94:38:69:db:c5:41:d3:d5:ee:c7:f1:
9d:4d:cd:a2:f7:24:64:eb:68:e7:27:6c:94:8d:cf:
24:e3:e5:bb:48:46:00:0a:7d:a5:a5:c8:8a:d1:32:
e0:00:9f:9b:ce:64:16:c6:8e:e3:59:69:2b:ea:ce:
e9:29:22:7d:8e:68:79:ac:6b:18:79:51:70:6e:dd:
b3:50:50:1b:79:52:b4:82:0c:1f:00:a5:59:db:29:
f1:40:e3:25:57:91:ff:a0:59:5f:ad:4b:0f:1b:40:
be:11:1c:33:b5:0e:21:63:0a:bc:89:bd:c8:d0:a7:
8f:28:11:a1:c1:56:a0:a6:c1:cc:b2:ec:d0:71:ec:
61:e9:11:4d:8f:3c:da:2b:6d:1f:8a:f5:1f:44:0d:
e5:27:a2:fa:fe:14:47:71:77:de:e2:98:35:20:8b:
95:8a:b4:9f:cc:d7:88:bb:36:81:11:e7:b3:54:c1:
f3:ba:79:b7:d4:a8:fd:eb:a9:1a:c9:80:c1:67:4b:
e4:55:ac:fe:bb:24:89:ad:4b:7d:2a:a8:a1:2e:70:
49:28:11:c6:56:b4:0c:4c:0b:1a:f3:f1:43:ed:e1:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:FE:7F:EA:8A:F5:E5:F0:37:23:A6:47:79:9F:7B:B1:0C:F0:DA
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/sUn-f-qK9eXwNyOmR3mfe7EM8No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bd:68:4c:b0:fa:df:20:20:0f:6b:64:94:e4:e2:fa:49:61:
15:a1:05:d5:13:ac:91:57:79:53:ac:fd:34:33:86:e8:72:3f:
86:9a:79:10:7c:50:ba:c0:15:4b:f0:df:bb:bd:53:d9:0a:ae:
96:91:cf:49:9d:04:57:69:e0:b7:58:7b:c4:d3:46:0a:e1:42:
e5:25:78:57:e3:12:dd:b1:1d:45:d2:6a:cb:d1:d4:63:22:f1:
9e:95:3b:43:4c:99:a3:6f:c9:c8:00:0e:fe:d3:91:e3:03:31:
3b:6a:16:2d:48:6d:0d:29:15:ac:d6:3a:76:e5:4a:10:f8:10:
6c:77:32:5f:d6:4a:1a:20:cc:ca:be:0f:d4:bb:2e:af:bd:03:
f4:09:56:42:ec:b9:3c:f7:15:03:91:36:f2:c3:cc:56:c9:62:
ed:5d:71:b6:1c:ae:d8:24:b3:7a:5e:6c:56:76:0b:ad:c4:f8:
0d:44:56:22:c9:d3:f6:d5:c9:b0:f6:00:73:0f:70:e0:f4:d7:
c8:f4:59:3d:f5:0e:be:2a:72:50:e8:98:bf:26:0a:d5:d3:fd:
c6:67:04:64:68:d5:35:3f:dc:bb:13:e1:d2:93:e7:12:92:7d:
c4:7b:3c:08:d7:55:9a:05:a6:e2:90:50:00:02:d8:d3:b4:04:
d0:81:22:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:47:21 2026 by rpki-client