Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/S2mByjeCvJnS5LNLCu40LNOxnxs.roa
File: S2mByjeCvJnS5LNLCu40LNOxnxs.roa (raw, json)
Hash identifier: gFdglKIx2lxhYtvHeBPmS1Q3CKXww/xFdjrxNiomvJA=
Subject key identifier: 4B:69:81:CA:37:82:BC:99:D2:E4:B3:4B:0A:EE:34:2C:D3:B1:9F:1B
Certificate issuer: /CN=85943fccfb3295cb168d13b5c63f315066b0b915
Certificate serial: 01A12EA347DA64A9FADCFB8D62A3B6E84591
Authority key identifier: 85:94:3F:CC:FB:32:95:CB:16:8D:13:B5:C6:3F:31:50:66:B0:B9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZQ_zPsylcsWjRO1xj8xUGawuRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/S2mByjeCvJnS5LNLCu40LNOxnxs.roa
Signing time: Mon 12 Oct 2026 05:43:35 +0000
ROA not before: Mon 12 Oct 2026 05:43:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9145
IP address blocks: 193.169.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZQ_zPsylcsWjRO1xj8xUGawuRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:a3:47:da:64:a9:fa:dc:fb:8d:62:a3:b6:e8:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85943fccfb3295cb168d13b5c63f315066b0b915
Validity
Not Before: Oct 12 05:43:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b6981ca3782bc99d2e4b34b0aee342cd3b19f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:55:26:65:93:e0:22:75:78:33:4f:8e:0e:
45:30:74:a8:3c:c0:2f:dd:41:9e:e3:fc:93:2c:62:
97:49:8c:09:eb:68:01:ab:08:c1:5d:15:ab:0a:bb:
3f:9f:ef:97:9c:5b:cd:6b:a7:72:fb:69:1f:e0:ef:
a5:32:06:22:f2:54:d0:ad:a9:1f:8a:e1:81:f3:5d:
fe:23:db:86:c3:71:3f:e4:d6:7d:62:6b:ae:84:e3:
fe:00:7a:b3:45:47:56:0d:12:de:97:02:1e:49:3c:
12:6c:b5:ef:54:6c:04:c9:ce:d3:ec:a0:dc:8d:f9:
25:c4:82:27:d9:9f:46:e2:97:90:20:37:e3:e6:ef:
61:ef:d9:bf:ac:b4:9f:4f:fd:05:fc:dd:e8:65:7c:
42:bb:b0:a0:3e:06:38:07:d4:f7:a8:2d:b9:a3:64:
a8:59:9a:f2:d1:61:ab:b9:56:31:5d:0d:ce:91:27:
ce:53:ff:e5:83:84:fe:18:b9:cd:7f:c4:c6:01:66:
e2:ea:00:a6:37:25:3c:d7:8a:08:d6:6c:09:39:4f:
35:6a:b1:fd:fc:c5:c7:84:b4:91:db:37:94:45:0b:
c0:4e:d7:46:48:6d:55:61:2e:8a:d0:d9:11:f3:17:
3a:dd:61:2b:94:84:c5:3f:5d:5c:20:4a:d9:d2:52:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:81:CA:37:82:BC:99:D2:E4:B3:4B:0A:EE:34:2C:D3:B1:9F:1B
X509v3 Authority Key Identifier:
keyid:85:94:3F:CC:FB:32:95:CB:16:8D:13:B5:C6:3F:31:50:66:B0:B9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZQ_zPsylcsWjRO1xj8xUGawuRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/S2mByjeCvJnS5LNLCu40LNOxnxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c2:82:63:cc:b6:c6:5b:ff:d2:b4:c2:5f:b6:a6:80:a7:65:
cb:1f:73:4b:d8:21:02:ec:13:7f:3a:b5:db:ff:39:aa:d2:04:
7a:00:c9:d7:6b:35:2b:9a:fb:ea:6b:87:d1:68:24:89:23:81:
60:09:72:a0:d8:e1:fc:4a:05:4a:5a:1a:0d:84:7b:51:6a:6a:
f3:6c:05:fb:39:82:6d:a3:c0:bf:52:2d:d5:3f:ff:1e:98:a2:
24:2f:29:14:7f:ad:cb:a0:5d:d5:d3:44:70:6d:02:75:72:91:
f4:2c:86:69:c6:1d:bf:be:65:89:3f:6d:09:63:9e:4c:c5:c1:
28:6e:ec:8c:5a:37:09:5e:a3:fa:0c:37:22:2d:9e:05:67:ba:
c5:4b:2a:7f:14:48:4a:0a:86:77:2e:36:68:d0:02:3b:9e:5f:
78:b4:ac:84:f9:14:de:ec:a9:bd:29:5f:0b:f7:71:08:42:b4:
1b:45:aa:0c:99:68:6a:d5:c1:d5:2c:64:5e:86:35:e3:af:8e:
c6:72:97:3f:cc:ca:70:d2:25:04:49:92:80:ca:7f:d0:9f:bb:
78:5a:37:5a:c2:d9:e7:59:9e:0f:05:16:96:25:f1:2c:f6:b5:
bb:08:be:2d:bc:d0:af:0d:bf:37:86:91:0e:9e:14:a9:43:00:
35:72:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:49 2026 by rpki-client