Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/sz_RURVVArJ2c0K_kIxh1TMdrjQ.roa
File: sz_RURVVArJ2c0K_kIxh1TMdrjQ.roa (raw, json)
Hash identifier: 2vEISfxUPcn+xHZ+k4Ao76dl9RMN0Hg4rGFr03MSLWo=
Subject key identifier: B3:3F:D1:51:15:55:02:B2:76:73:42:BF:90:8C:61:D5:33:1D:AE:34
Certificate issuer: /CN=c7272abead67c0fe09420b7e3c4384c1d90b39be
Certificate serial: 019F364202E7E5DF36AAC72C316807CEB6C1
Authority key identifier: C7:27:2A:BE:AD:67:C0:FE:09:42:0B:7E:3C:43:84:C1:D9:0B:39:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/sz_RURVVArJ2c0K_kIxh1TMdrjQ.roa
Signing time: Mon 06 Jul 2026 07:08:43 +0000
ROA not before: Mon 06 Jul 2026 07:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.110.92.0/24 maxlen: 24
194.242.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:42:02:e7:e5:df:36:aa:c7:2c:31:68:07:ce:b6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7272abead67c0fe09420b7e3c4384c1d90b39be
Validity
Not Before: Jul 6 07:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b33fd151155502b2767342bf908c61d5331dae34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:24:cd:95:45:2a:fc:c2:23:ef:c3:ad:cc:
14:93:7d:fb:62:6f:5d:9a:aa:8d:5d:62:fa:05:e9:
cf:6a:14:40:39:93:1d:3d:27:70:6b:52:f6:18:7c:
9d:95:6e:41:cd:6c:97:17:6a:08:4b:95:6f:34:48:
c5:01:7a:6a:e3:d3:87:00:fd:6e:14:37:e3:49:84:
d6:88:10:e8:c7:a6:3a:4a:22:86:34:db:39:7a:2f:
d1:f5:72:4e:a1:81:36:c0:d9:90:44:99:69:36:a0:
73:d7:58:f8:29:ff:1f:66:9d:62:93:e8:01:40:dc:
8a:0f:42:28:ae:54:54:eb:39:dc:6c:a4:5c:6b:e2:
9e:97:79:55:5c:48:57:7b:de:1a:60:f9:48:08:77:
41:ea:7d:2a:b2:de:d0:5b:86:4c:8f:48:ef:04:90:
e6:08:9c:08:fa:25:95:a5:fe:7c:91:e9:a9:26:90:
58:ad:e8:61:79:92:5d:0f:6d:35:de:ba:7b:6a:dc:
5f:ad:a1:26:8b:00:28:86:7c:99:1f:21:29:7b:89:
d7:16:f9:75:cf:0a:72:b7:d8:59:72:3a:87:a6:6e:
40:16:ee:0f:73:7a:af:a6:9f:0a:f0:e0:68:7c:47:
a1:2b:64:53:08:76:c3:6f:e2:a9:b3:f8:42:32:ed:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:D1:51:15:55:02:B2:76:73:42:BF:90:8C:61:D5:33:1D:AE:34
X509v3 Authority Key Identifier:
keyid:C7:27:2A:BE:AD:67:C0:FE:09:42:0B:7E:3C:43:84:C1:D9:0B:39:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/sz_RURVVArJ2c0K_kIxh1TMdrjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.92.0/24
194.242.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c2:ba:84:a3:dc:da:8b:cd:01:20:e2:a4:93:8b:35:96:23:
60:9b:04:af:75:1a:8b:f1:cb:94:ac:92:00:dc:9e:49:8d:53:
5c:56:06:65:a1:77:77:b2:d6:0a:9e:e0:7d:d9:bb:d0:14:f8:
44:4d:e4:c3:2b:c9:6d:b5:3e:8f:ad:46:9f:3b:3a:df:fa:93:
9d:58:8c:58:92:23:67:ff:82:57:ed:36:00:af:fd:8e:2c:44:
b1:13:18:8a:ac:16:a8:34:3a:f9:09:1c:72:f2:ff:c1:e6:0c:
97:7b:8b:87:b2:b3:5c:ec:87:49:00:fa:79:ba:69:0a:93:df:
ae:1c:cc:52:0e:8e:54:ac:b1:08:ec:5a:44:bc:da:0a:fe:9d:
a3:d4:82:a0:ad:c8:72:cb:5f:3c:d0:2d:b0:8f:cc:98:27:c6:
6e:0b:03:04:b0:9b:78:c4:a2:d0:7c:23:f5:eb:a7:85:29:ed:
93:98:3b:26:69:d2:94:9a:3e:35:d7:c4:e3:64:94:53:60:42:
c1:f2:67:07:0f:f8:7a:e4:06:a6:f0:5a:69:8c:91:ca:9b:3a:
9b:cd:e4:ac:54:d5:c2:19:e6:5c:ef:59:19:53:12:46:c7:8f:
01:56:6d:9c:60:ff:92:0f:8b:c4:ce:8e:21:70:3f:4b:c8:6a:
90:78:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:19 2026 by rpki-client