Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/SXZDSUmyZKq6tD_19hMcohlN_gg.roa
File: SXZDSUmyZKq6tD_19hMcohlN_gg.roa (raw, json)
Hash identifier: V6szuhAf/76RIYlrWQb7gbsXupUF54mJ8u6NpvUbtYc=
Subject key identifier: 49:76:43:49:49:B2:64:AA:BA:B4:3F:F5:F6:13:1C:A2:19:4D:FE:08
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 01A16221C80E29BD272CF6AC944FD3A974AD
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/SXZDSUmyZKq6tD_19hMcohlN_gg.roa
Signing time: Thu 22 Oct 2026 05:42:23 +0000
ROA not before: Thu 22 Oct 2026 05:42:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49289
IP address blocks: 93.185.112.0/20 maxlen: 20
159.255.136.0/22 maxlen: 22
159.255.144.0/24 maxlen: 24
171.22.232.0/24 maxlen: 24
171.22.233.0/24 maxlen: 24
171.22.234.0/24 maxlen: 24
171.22.235.0/24 maxlen: 24
178.239.32.0/24 maxlen: 24
178.239.34.0/24 maxlen: 24
178.239.35.0/24 maxlen: 24
178.239.36.0/24 maxlen: 24
178.239.40.0/22 maxlen: 22
178.239.44.0/23 maxlen: 23
178.239.46.0/23 maxlen: 23
185.63.132.0/23 maxlen: 23
185.63.135.0/24 maxlen: 24
188.94.120.0/21 maxlen: 21
2a00:c50::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:21:c8:0e:29:bd:27:2c:f6:ac:94:4f:d3:a9:74:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Oct 22 05:42:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4976434949b264aabab43ff5f6131ca2194dfe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:c2:9a:56:ed:9e:14:05:d4:b2:b6:a3:31:
7d:ec:a5:5a:fe:14:10:38:f6:f5:0f:59:78:8a:cf:
71:f1:42:8e:44:c3:26:0f:2b:ee:48:8e:45:bf:6b:
2b:69:45:55:5e:44:25:14:6e:43:78:d6:d6:e1:4c:
a9:75:60:32:37:ed:40:23:eb:44:da:e8:0f:c3:72:
2f:1f:94:06:26:81:c5:91:44:8e:4a:2a:0a:bc:6b:
30:2f:b5:96:3c:f2:64:f9:9a:bf:22:58:e8:a1:e6:
53:66:4e:2a:c2:ec:14:53:39:41:ae:bf:ce:9b:44:
3c:20:8b:cd:c1:ba:58:af:2e:b0:e4:0b:aa:0b:05:
fc:c3:24:1f:2f:cf:e2:8e:8c:99:45:89:cd:8f:2e:
5e:3a:dd:5b:0e:59:8b:54:08:c5:57:b8:b4:9a:42:
17:d5:30:f3:ca:b9:dc:ff:1f:df:fe:1f:38:40:14:
55:f9:cb:f7:0e:45:46:e0:b9:7d:9e:58:6e:6a:3c:
f9:85:c2:27:00:e0:7a:a2:2a:46:57:57:61:ae:5b:
fd:d5:84:d3:e0:d5:0b:81:ab:82:01:62:15:ad:96:
70:58:9a:5a:ca:bf:b8:0d:d9:9e:c2:46:ba:f7:74:
ee:ce:e9:59:e3:00:61:d9:ac:e2:ef:80:4a:71:b1:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:76:43:49:49:B2:64:AA:BA:B4:3F:F5:F6:13:1C:A2:19:4D:FE:08
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/SXZDSUmyZKq6tD_19hMcohlN_gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.112.0/20
159.255.136.0/22
159.255.144.0/24
171.22.232.0/22
178.239.32.0/24
178.239.34.0-178.239.36.255
178.239.40.0/21
185.63.132.0/23
185.63.135.0/24
188.94.120.0/21
IPv6:
2a00:c50::/29
Signature Algorithm: sha256WithRSAEncryption
1b:e3:98:9c:07:c3:b5:51:ad:a3:f1:87:a1:e1:a9:c1:ef:0e:
b1:88:13:15:89:88:60:86:c1:26:d0:be:f5:56:60:45:e2:5f:
72:4e:3f:2a:63:4e:f9:26:70:2c:73:d4:9f:26:5c:ce:39:04:
58:ba:bd:1d:2c:db:31:15:31:ef:b1:a7:83:dd:31:09:c3:b3:
90:6b:cd:41:32:a4:be:b6:5a:4e:de:06:b9:9d:4a:5f:8e:c8:
2a:a3:4a:6a:0a:6c:c3:dc:cb:0b:03:39:18:9c:70:45:d3:cd:
db:05:7a:b5:77:06:5b:2b:d3:8a:51:70:a6:c0:e4:b8:a0:91:
76:d0:4a:34:f4:74:a9:22:39:8c:f5:d4:b0:ea:a5:fe:60:9c:
7f:38:b5:6a:ab:02:5a:c7:53:eb:dc:0c:00:ee:69:ca:ee:bd:
61:13:2c:b3:a0:af:ff:2c:49:59:55:34:67:6f:ef:d1:ee:6f:
ad:27:f5:66:ba:62:a8:ec:a1:9e:72:6e:11:b1:3b:8a:ea:f5:
dd:78:8b:f2:1d:51:f1:e0:df:12:82:a5:2a:ca:2c:8c:7f:24:
a4:af:e2:88:49:ee:f3:0a:3f:35:42:1f:22:7a:d7:ef:47:11:
ba:67:65:e2:0e:64:b8:68:c2:d8:7d:8e:48:39:ce:d9:0e:7b:
80:a7:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:43:40 2026 by rpki-client