Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SfVssagpmlLqkacWNaVNOz0XlmM.roa
File: SfVssagpmlLqkacWNaVNOz0XlmM.roa (raw, json)
Hash identifier: uCMy1ITfrqfwsVTW0YgDEO2gh3l99Zy01fzA2hgxApQ=
Subject key identifier: 49:F5:6C:B1:A8:29:9A:52:EA:91:A7:16:35:A5:4D:3B:3D:17:96:63
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A17876F9EEF295E0D1A94BECE50395785A
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SfVssagpmlLqkacWNaVNOz0XlmM.roa
Signing time: Mon 26 Oct 2026 13:47:05 +0000
ROA not before: Mon 26 Oct 2026 13:47:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 109.229.216.0/23 maxlen: 24
185.220.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:76:f9:ee:f2:95:e0:d1:a9:4b:ec:e5:03:95:78:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 26 13:47:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49f56cb1a8299a52ea91a71635a54d3b3d179663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:97:9c:93:d3:a4:66:c8:5e:f7:93:bd:3d:
8b:62:c0:68:89:a8:2a:42:95:86:41:70:fe:e7:42:
86:d8:1d:e0:05:2d:33:71:c0:7f:d9:f8:c8:1a:b3:
61:3f:8b:70:88:c8:1e:ba:44:e7:07:a7:5f:ff:cd:
c8:1a:4d:c7:c2:f8:ce:d1:98:c3:09:39:b4:c9:a5:
39:fc:2b:82:cf:ce:02:bb:cd:2c:01:01:0e:99:4e:
10:70:62:7d:7b:bb:7e:02:20:4e:46:ab:5f:37:eb:
e4:56:42:db:8b:61:18:77:74:76:ad:8a:e0:62:58:
48:bf:67:26:7b:09:07:c9:df:03:4f:87:4f:5c:f2:
6d:c5:dc:ac:9c:99:d7:8f:ce:f6:6c:3f:a4:5f:8f:
81:1b:16:f3:e1:a7:b4:70:43:e2:39:36:e9:86:66:
a6:52:0e:23:b6:29:88:2d:0a:b9:a8:e6:82:91:4c:
1c:80:65:0a:4d:ae:db:44:6d:fc:53:0a:88:1f:5b:
de:4b:be:bc:63:60:ee:4a:97:a6:c2:dc:9c:c3:10:
02:7c:bc:d0:55:42:ec:d6:ce:45:8e:5d:ca:fa:40:
cc:a6:ed:34:38:6d:24:d4:b4:5b:bc:bb:2b:ea:5a:
8d:d6:85:89:58:3f:d3:4e:d4:3a:5e:66:e8:11:2a:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F5:6C:B1:A8:29:9A:52:EA:91:A7:16:35:A5:4D:3B:3D:17:96:63
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SfVssagpmlLqkacWNaVNOz0XlmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
185.220.197.0/24
Signature Algorithm: sha256WithRSAEncryption
57:22:16:03:5d:dd:41:92:fb:10:ff:57:fe:dd:88:f1:44:69:
94:84:65:20:c7:6c:72:9e:12:9e:25:c2:ef:4f:df:63:73:9b:
c4:bb:29:f3:b6:43:a5:79:d4:7a:59:a4:db:92:8f:0a:8a:46:
ee:12:36:30:b8:70:1e:c1:2d:81:84:fc:97:b2:86:86:01:81:
e0:7b:cf:0d:ea:5a:b3:e8:28:ce:b0:62:a6:fd:da:6a:f4:e6:
f0:b1:4b:8a:1d:2c:17:4f:41:53:9b:0b:34:b6:35:bd:39:bf:
40:a2:01:92:e5:ae:74:59:b7:1d:84:ba:4a:9e:c6:53:ab:e4:
a1:23:12:68:54:a5:27:ba:83:59:32:7f:d9:8b:80:3c:00:9a:
f1:80:48:83:f8:66:6c:f1:fb:cc:52:95:46:74:ad:5e:21:e8:
ee:0e:26:1d:e6:ec:c0:3e:39:04:7e:a1:9c:59:8f:b1:30:cd:
ae:8a:df:ba:aa:3c:8f:56:24:1d:ae:a3:26:b3:b9:fe:4a:b6:
6b:0c:38:78:73:f2:5c:19:8c:28:f6:09:aa:a0:f6:3a:c0:36:
69:77:07:72:39:d9:27:a4:6d:1a:27:0e:23:ff:27:ea:72:0d:
b0:58:98:c2:fc:16:cb:a7:62:f7:24:4a:e7:af:e9:97:48:df:
44:c1:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:53 2026 by rpki-client