Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Sx_HpmqfaZBFBR7SYdp5b78Q1RE.roa
File: Sx_HpmqfaZBFBR7SYdp5b78Q1RE.roa (raw, json)
Hash identifier: t+n2JlQ9lvrBagPtLB2mB8Uwq+b3apq+JH5zcSQRq88=
Subject key identifier: 4B:1F:C7:A6:6A:9F:69:90:45:05:1E:D2:61:DA:79:6F:BF:10:D5:11
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0479C3CC03C0B6515C6F4067A683AA68D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Sx_HpmqfaZBFBR7SYdp5b78Q1RE.roa
Signing time: Fri 28 Aug 2026 09:03:36 +0000
ROA not before: Fri 28 Aug 2026 09:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150072
IP address blocks: 193.141.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:9c:3c:c0:3c:0b:65:15:c6:f4:06:7a:68:3a:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 09:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b1fc7a66a9f699045051ed261da796fbf10d511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:e0:83:83:26:ba:34:03:1f:32:18:65:1e:
e9:07:7a:c4:f4:3d:ad:a9:61:db:48:bf:b7:e7:c4:
67:f2:5e:ba:13:4b:95:e9:b7:ab:16:d1:57:a8:6a:
cc:b1:19:18:1f:86:02:78:b6:e1:b3:3b:29:4d:c1:
e7:99:28:36:bc:3b:e0:0d:be:fc:1b:52:55:93:0a:
00:24:90:e1:65:b6:bc:f0:fa:24:1f:75:be:1a:b2:
fb:2b:78:52:ff:32:7d:ed:e7:c1:48:06:93:8b:28:
5f:be:33:da:ab:13:b7:4d:ae:e0:25:15:f5:98:b5:
11:54:74:63:56:d6:5b:31:95:77:7b:80:ba:dc:a2:
69:07:ab:94:ab:a5:b9:13:e8:8c:d9:de:ad:71:27:
31:2b:f3:2f:9f:a7:5f:3a:58:d8:fd:69:16:2c:e0:
28:9c:8f:82:e6:16:10:06:b9:6a:bd:97:40:dd:89:
c2:e8:51:6d:12:51:63:f5:7c:c0:33:0d:1b:ec:6d:
8e:ea:8e:9f:3f:ea:2f:ee:c2:b8:1b:3b:01:fb:29:
21:85:c9:59:cc:5e:9f:c1:19:f3:ea:a5:15:87:b4:
0b:64:a5:c8:02:f1:99:e3:e2:d4:44:4a:8c:97:53:
da:f8:a0:57:75:94:0a:16:1f:bb:c1:af:95:a2:91:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1F:C7:A6:6A:9F:69:90:45:05:1E:D2:61:DA:79:6F:BF:10:D5:11
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Sx_HpmqfaZBFBR7SYdp5b78Q1RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8f:7f:26:58:97:88:af:77:a8:26:cb:7a:79:9e:f0:d4:93:
36:7d:5d:bb:01:9b:74:93:11:d0:77:0c:59:0f:15:ea:7b:67:
63:66:da:ad:22:ba:80:32:67:bb:ec:1e:6d:22:10:d6:bc:cb:
87:76:47:1b:51:38:d0:d9:0a:b8:66:f2:dd:0e:d2:06:c2:9c:
9f:36:de:63:d8:05:be:c6:a1:d5:7b:76:15:f9:bc:b3:4a:63:
8e:68:68:bb:1c:c5:bc:e6:91:82:ba:21:60:7d:55:6a:cb:11:
53:c9:8d:e7:4d:11:c1:91:04:52:0c:2c:00:d0:1c:42:ad:be:
64:28:44:11:0d:81:9f:66:05:1c:81:25:9d:8e:1f:94:83:10:
9d:16:c0:71:2e:ff:29:01:96:72:98:16:74:43:56:7c:6f:3e:
e8:99:75:6c:58:a6:df:0d:ea:59:63:0d:31:a3:49:b0:c9:a8:
39:81:5c:5c:73:b2:a4:a0:33:26:02:45:3b:03:88:d7:4d:c2:
20:48:24:b6:d2:12:50:cc:80:d0:e4:8f:47:47:62:61:81:ae:
cd:48:cf:25:03:7d:f7:5e:fd:95:a4:26:44:a1:15:3f:9d:6c:
d6:49:32:bd:51:11:cb:8e:47:fc:69:eb:f3:7d:3e:0c:4b:ec:
ea:c1:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:26:55 2026 by rpki-client