Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Sug4vWSNyHdKWqfR473yYmyLdbA.roa
File: Sug4vWSNyHdKWqfR473yYmyLdbA.roa (raw, json)
Hash identifier: fFBg2JXVgrhME2wCNd7RaCIs1pYUVhgUjrsuVrTCtEE=
Subject key identifier: 4A:E8:38:BD:64:8D:C8:77:4A:5A:A7:D1:E3:BD:F2:62:6C:8B:75:B0
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01A15E67CDE7F7CEB333A9650E64B22D2418
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Sug4vWSNyHdKWqfR473yYmyLdbA.roa
Signing time: Wed 21 Oct 2026 12:20:23 +0000
ROA not before: Wed 21 Oct 2026 12:20:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218431
IP address blocks: 85.222.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:67:cd:e7:f7:ce:b3:33:a9:65:0e:64:b2:2d:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Oct 21 12:20:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae838bd648dc8774a5aa7d1e3bdf2626c8b75b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:d2:dc:8b:8c:39:ec:a1:db:30:b3:7c:54:
a7:4f:b6:f1:e9:e3:38:9f:3a:31:12:7e:83:e3:15:
fa:8d:8f:7d:22:9d:66:65:48:32:4e:18:02:92:44:
32:eb:6d:26:ee:fa:a3:c0:eb:81:c4:1d:64:5e:89:
b8:07:0a:83:06:f6:c5:b0:0f:03:a7:78:09:33:d7:
66:56:46:cb:87:0d:d9:99:c2:5d:e6:ea:32:ab:4f:
6a:90:c7:1e:00:5d:4a:51:81:e1:61:5a:b3:9c:ae:
05:db:9c:b0:99:3d:bd:2a:4b:b5:7c:08:bc:bb:c3:
ab:bc:dd:5d:7c:12:af:91:43:5c:54:93:4b:5e:c9:
9e:47:57:a9:9e:30:66:47:bc:f6:1b:b6:ff:8e:c5:
c3:d2:88:d3:df:8e:36:e0:57:2e:6a:78:6c:d8:59:
94:95:eb:f8:1a:55:3c:86:01:de:b4:e0:1b:e0:f9:
41:f9:3b:17:e9:1f:67:89:eb:c5:a9:f1:91:4f:b3:
63:bd:70:bb:08:f5:10:38:65:15:54:1d:88:a9:96:
d2:76:4e:0b:38:29:30:31:61:70:5a:6b:5a:87:c1:
30:bf:fb:2a:ce:d6:04:49:2d:9f:ce:cf:5e:78:5e:
f2:3c:0e:61:17:98:7c:b1:ef:53:c9:13:f1:fe:ea:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:38:BD:64:8D:C8:77:4A:5A:A7:D1:E3:BD:F2:62:6C:8B:75:B0
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Sug4vWSNyHdKWqfR473yYmyLdbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.174.0/24
Signature Algorithm: sha256WithRSAEncryption
20:22:76:5e:21:e1:31:3a:8b:5e:bb:99:53:c5:37:3a:83:de:
e8:9f:ff:10:a0:d0:1b:a8:1d:68:38:25:76:4e:7b:f3:3e:13:
45:57:bc:91:aa:75:b1:74:76:c9:b2:08:84:5f:8e:ec:10:cc:
4e:50:79:23:f6:99:a2:7e:29:ce:8e:a3:bf:6d:7b:38:cb:52:
60:11:71:c3:1f:65:3d:38:7e:be:97:9e:45:28:29:69:cb:80:
3d:b0:39:57:c6:75:94:f9:d8:6c:84:7f:e9:e9:2c:66:4c:d6:
26:a8:98:75:26:b3:a9:ea:ba:6a:e1:9d:3b:5f:0c:df:82:bf:
4a:e7:92:ce:98:d2:40:9d:86:e8:d5:77:96:d1:9f:1e:a6:02:
bf:72:7d:65:c1:d9:28:8d:42:ba:1e:22:4b:89:7a:ce:1a:45:
8b:aa:57:56:f3:45:10:a3:66:23:9c:c9:ee:78:d1:b1:9f:3a:
37:a2:d7:d8:67:1e:0e:be:ae:5e:5d:7f:da:94:f6:b9:0c:9a:
fa:7b:ce:90:68:21:ac:77:84:49:06:bd:c2:69:62:d5:d1:96:
b5:68:bd:fc:78:0b:b8:51:9e:3c:25:96:3f:3b:b9:fb:70:51:
56:46:9e:04:ca:41:52:8c:79:73:9b:01:f2:d8:53:b1:02:dc:
f2:85:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:17:09 2026 by rpki-client