Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/SPmAGAX-HhGvdb2FGlSvhloC7qs.roa
File: SPmAGAX-HhGvdb2FGlSvhloC7qs.roa (raw, json)
Hash identifier: wD9K5uuwJt4n76VUMnGNIiYa93BQGfXYF8xRbmpUuYw=
Subject key identifier: 48:F9:80:18:05:FE:1E:11:AF:75:BD:85:1A:54:AF:86:5A:02:EE:AB
Certificate issuer: /CN=1c30f78f69c4feda757bcf4255df05b315a17034
Certificate serial: 01A1449B5C0F8BA6B83F8A0A891929996FCF
Authority key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/SPmAGAX-HhGvdb2FGlSvhloC7qs.roa
Signing time: Fri 16 Oct 2026 12:06:34 +0000
ROA not before: Fri 16 Oct 2026 12:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218378
IP address blocks: 185.237.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:9b:5c:0f:8b:a6:b8:3f:8a:0a:89:19:29:99:6f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Validity
Not Before: Oct 16 12:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48f9801805fe1e11af75bd851a54af865a02eeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:83:17:34:b4:e4:23:21:1c:00:ef:a4:b6:
55:97:f8:f4:ed:43:0c:c8:93:c7:c9:13:4b:8d:7a:
bb:13:ca:13:1a:b3:cb:12:65:b3:6d:28:f7:e5:e7:
f9:12:83:c1:29:dd:0a:71:62:e2:a1:aa:50:4c:13:
4e:d7:9e:db:d6:71:f9:b1:2c:b6:cf:8a:85:8c:80:
e6:de:94:f4:32:4a:54:17:88:54:51:05:92:d8:de:
cc:41:5e:1f:af:9d:77:ac:66:0b:eb:0d:d1:6b:e3:
2e:2f:5d:eb:60:55:3d:96:b3:7f:35:67:c1:b5:6e:
70:6c:48:1d:aa:44:e8:37:d4:e4:6c:b7:f4:ed:ce:
e8:18:2c:6d:a5:9f:1c:00:72:d2:38:b5:3a:a7:45:
10:4c:7f:68:a1:69:61:13:9c:18:64:ae:4a:ba:13:
88:e1:8f:a1:a7:b2:5a:9e:ce:b7:3e:13:98:c0:9f:
7f:c3:c3:67:8e:b5:5b:5e:c1:f7:48:23:ac:93:02:
21:85:89:ad:fc:38:e9:90:df:ef:bc:a8:81:d9:92:
8b:8b:a4:bd:4d:37:3b:b8:ae:e0:62:34:61:4a:cd:
df:5a:ed:9d:ac:da:db:e0:77:87:b5:32:ae:1d:d7:
0e:fb:26:91:7b:50:56:25:b0:e6:61:d9:a9:31:d7:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F9:80:18:05:FE:1E:11:AF:75:BD:85:1A:54:AF:86:5A:02:EE:AB
X509v3 Authority Key Identifier:
keyid:1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/SPmAGAX-HhGvdb2FGlSvhloC7qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e2:12:ef:e9:b4:d0:9f:15:20:1d:e3:11:4e:9c:c6:0a:c5:
8b:e4:c3:91:89:e5:be:29:ef:c3:c7:bb:4a:79:d2:5d:24:a7:
2a:27:c4:48:aa:f8:8c:96:5e:de:1e:9d:fa:a1:10:62:c9:ad:
e8:ad:5e:d6:a7:a1:33:4a:d5:43:e6:42:1c:e0:23:ed:2a:4a:
23:b8:a7:68:93:a3:17:6a:2c:5b:0a:4b:65:c9:46:1f:a9:75:
1d:a3:df:16:07:54:07:5c:80:ec:bd:d5:41:be:20:d6:77:6b:
7c:cb:8d:ad:88:b3:52:bc:01:5a:da:66:f4:90:76:9c:74:20:
4a:f0:6b:7b:9f:cc:74:83:66:7b:c8:6b:30:7d:85:86:c8:3e:
d1:38:72:a5:45:67:93:46:d8:69:95:57:e0:aa:1b:9f:42:9b:
56:fb:4f:9d:73:c0:71:d8:c6:a9:78:9e:3b:db:3e:ee:ae:b7:
60:bc:01:d2:ca:12:b9:47:e8:c7:86:e6:49:92:66:f5:6d:c1:
11:55:be:bc:c2:9d:aa:47:0d:c0:1c:35:71:ae:0f:f1:32:98:
57:5b:27:b0:ea:a3:c7:a4:63:3d:3a:05:fd:82:30:c0:dd:f5:
db:49:38:24:f4:34:40:00:80:8f:d0:ba:29:e2:99:ec:eb:7e:
78:d3:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:53 2026 by rpki-client