Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/scZvkun21Is5PRqjjJOokr7vv3k.roa
File: scZvkun21Is5PRqjjJOokr7vv3k.roa (raw, json)
Hash identifier: nZkf46asWgI7bQf2kDqMzJ8K9GjokdXc1dqOvremZI4=
Subject key identifier: B1:C6:6F:92:E9:F6:D4:8B:39:3D:1A:A3:8C:93:A8:92:BE:EF:BF:79
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 01A06C17962107DF1096682521A51825FBE5
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/scZvkun21Is5PRqjjJOokr7vv3k.roa
Signing time: Fri 04 Sep 2026 11:04:40 +0000
ROA not before: Fri 04 Sep 2026 11:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204324
IP address blocks: 185.252.40.0/24 maxlen: 24
185.252.41.0/24 maxlen: 24
185.252.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:17:96:21:07:df:10:96:68:25:21:a5:18:25:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Sep 4 11:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1c66f92e9f6d48b393d1aa38c93a892beefbf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:d6:7e:f5:22:08:94:20:ad:e8:23:16:d5:
32:42:06:fb:55:ae:0c:62:a5:bb:d3:52:8a:d8:1e:
11:3e:0a:09:35:34:8c:5c:43:17:4e:01:36:41:b9:
ae:7a:d4:a0:ae:92:08:40:96:61:05:bc:50:01:71:
b4:e8:9c:78:75:12:9b:5f:07:97:21:71:f1:10:83:
80:00:f3:0c:ed:bb:c3:9b:3f:d1:71:6b:4c:87:07:
b8:5c:84:a3:07:70:19:25:ca:ff:de:89:f7:07:0c:
8b:98:54:94:1e:70:c9:2b:4b:79:42:61:45:02:4e:
3d:d0:dc:21:9e:33:36:88:a3:aa:91:7d:34:36:52:
fe:4d:88:13:d7:27:68:18:68:ab:3e:33:02:c6:c0:
b4:9d:0a:c9:45:6b:77:ea:47:f1:76:8a:b3:89:76:
8d:c4:82:a5:3e:40:1a:43:9a:b0:ce:f6:fd:b9:1e:
8e:ca:68:7d:1d:6c:11:98:00:d2:da:72:f0:a3:4b:
38:b0:77:4f:04:85:e2:69:07:f5:39:a6:5e:85:aa:
0c:99:06:1f:18:ea:08:24:51:99:24:44:ee:a7:c9:
ca:ed:f5:1a:2e:8f:d2:22:6f:db:0e:94:3b:c5:34:
ea:48:0c:a0:64:47:d0:d4:21:79:42:a9:d8:b3:61:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:6F:92:E9:F6:D4:8B:39:3D:1A:A3:8C:93:A8:92:BE:EF:BF:79
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/scZvkun21Is5PRqjjJOokr7vv3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.40.0-185.252.42.255
Signature Algorithm: sha256WithRSAEncryption
3b:b6:61:23:31:bb:74:4b:8e:87:d5:f4:54:31:bf:e1:8e:54:
33:d2:f6:5b:bd:95:02:01:f4:da:21:5c:47:08:86:c1:4f:bd:
b8:f8:97:16:f3:97:28:fd:84:65:6f:58:02:ae:34:f7:f0:09:
72:d7:85:91:da:ea:5e:8c:26:1f:75:b5:aa:e1:33:ad:bf:69:
54:61:82:d1:73:ef:99:cb:8f:aa:e4:95:01:33:b3:c4:6c:8d:
51:e7:14:c6:ce:24:f4:d1:c0:47:78:a0:94:2d:6d:e9:75:3a:
b8:bd:92:0e:29:41:01:ca:ec:45:44:d9:b9:32:e4:4e:41:bc:
dc:48:fb:e3:d3:0c:93:4f:fb:1a:47:d4:a8:51:b0:46:1c:6b:
c1:93:8c:d6:33:29:65:53:45:55:e3:e0:f0:88:f9:f7:ba:b3:
bb:af:85:c8:6b:66:99:70:fb:2f:c7:3e:9a:31:61:67:49:e0:
b9:d4:37:8e:f4:91:18:5a:11:4a:92:53:8e:ed:d3:2e:3d:7b:
8b:c3:c7:18:b5:86:18:95:f8:e1:de:b4:f1:a0:86:9b:2d:63:
84:95:6b:6c:c6:a3:7d:f0:0d:7a:8f:58:17:f2:b4:a1:1e:8d:
33:7c:7b:a3:5b:25:82:57:e4:68:1b:6a:8b:ac:85:d9:90:67:
c3:f7:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:18 2026 by rpki-client