Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/szxqBPi8_UDn-uhuhXjcm5JHs4g.roa
File: szxqBPi8_UDn-uhuhXjcm5JHs4g.roa (raw, json)
Hash identifier: jJ5MzBH3uxRXTpd8fptqNDXoiNaS6rdm88cL+1mMd2E=
Subject key identifier: B3:3C:6A:04:F8:BC:FD:40:E7:FA:E8:6E:85:78:DC:9B:92:47:B3:88
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019FCBAA4A1777E5316FAE69E3022463444C
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/szxqBPi8_UDn-uhuhXjcm5JHs4g.roa
Signing time: Tue 04 Aug 2026 07:26:02 +0000
ROA not before: Tue 04 Aug 2026 07:26:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211956
IP address blocks: 2a07:4247:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:aa:4a:17:77:e5:31:6f:ae:69:e3:02:24:63:44:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Aug 4 07:26:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b33c6a04f8bcfd40e7fae86e8578dc9b9247b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:18:8d:57:ae:83:cd:52:45:6e:ca:02:c6:
b7:ae:85:48:72:cf:30:51:8e:45:c3:0a:98:2e:93:
79:47:a1:5d:34:08:cb:f9:a3:69:35:cf:89:07:56:
ca:41:5a:0e:06:35:0d:af:41:d2:14:18:d0:e8:32:
3e:a9:62:08:41:3b:85:1d:7e:ae:a1:64:6b:fc:7c:
1a:9c:ad:68:2e:e8:b8:02:b7:99:3b:cd:7d:db:21:
c8:2a:e7:7c:c6:6e:89:31:b6:fc:b7:88:2b:ff:ee:
58:f6:e1:a9:8b:0c:12:3e:0e:c6:fb:53:85:0c:d8:
06:4f:8f:3c:a6:76:19:9b:61:e8:c4:23:f5:18:5c:
4d:fb:4b:55:75:b5:d5:54:19:57:20:13:85:2c:33:
47:70:69:e7:fd:1c:39:e2:b4:c9:3b:2a:b3:a2:4b:
f0:6a:33:dc:47:52:6b:44:4f:bf:06:7e:ed:11:25:
f2:b5:36:da:95:98:ed:90:9e:31:4d:68:ba:a6:d2:
63:ab:dc:74:6c:dd:d6:60:08:57:39:5d:d2:08:8f:
04:62:1b:af:bd:2d:49:de:3e:b9:a5:79:8a:27:6a:
2a:32:66:1f:2d:79:b3:c0:ac:d1:7e:c6:8a:60:79:
73:2a:c9:e9:c3:c2:9a:86:5c:ed:88:8b:f3:6e:b6:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:6A:04:F8:BC:FD:40:E7:FA:E8:6E:85:78:DC:9B:92:47:B3:88
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/szxqBPi8_UDn-uhuhXjcm5JHs4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4247:3000::/36
Signature Algorithm: sha256WithRSAEncryption
86:5b:a7:63:63:24:b6:27:5d:20:7c:0d:ec:f5:e3:43:e8:e1:
a3:d2:e8:46:ab:86:4c:ae:ae:0c:0b:42:bd:0f:7e:c1:0a:c2:
48:d0:3e:69:b0:dd:67:12:7f:3c:5a:f4:00:5c:55:70:0f:ff:
46:25:b1:e8:2a:29:3b:ff:a6:c1:ad:2b:a3:d5:7d:49:28:55:
87:17:a5:49:d0:6c:35:fb:9e:63:67:1b:a1:17:6a:d1:2e:0a:
5e:90:b3:b5:64:c6:04:a4:7a:dc:23:a8:7d:1d:9b:5c:50:4a:
21:81:53:cd:c0:62:95:95:ef:80:a4:cb:6a:dc:98:8c:c2:c2:
44:00:82:80:d7:26:17:f2:22:0e:37:5d:e6:e7:fc:9f:83:61:
01:64:93:2e:e6:e8:3c:6c:1b:e0:b8:83:b0:bc:ba:04:85:f4:
58:02:87:7d:1a:a3:f7:78:9c:68:60:2f:4b:98:fc:f7:11:cd:
3e:26:e2:f9:dc:06:24:00:99:2e:2a:a7:ba:0e:a2:df:4c:85:
11:79:d3:46:ae:f8:af:63:6c:62:63:d5:b9:9c:0a:78:ad:ff:
3d:3c:a2:ef:ac:cd:7e:8f:85:1b:f2:38:0d:32:18:59:0b:6f:
cb:d7:0e:5d:95:1b:b9:75:d3:ff:87:6a:4a:f2:5e:cb:b8:38:
85:57:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:53:28 2026 by rpki-client