Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/szELXMMZDl10r61Z-sPdEgawXsM.roa
File: szELXMMZDl10r61Z-sPdEgawXsM.roa (raw, json)
Hash identifier: tZdz9tbK5EcrYgaSOLiWdcaYZFFpvCka0dgVAUXxuEs=
Subject key identifier: B3:31:0B:5C:C3:19:0E:5D:74:AF:AD:59:FA:C3:DD:12:06:B0:5E:C3
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019F4638EDCFFE0F4C8B31EB1E5FD9EFB76F
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/szELXMMZDl10r61Z-sPdEgawXsM.roa
Signing time: Thu 09 Jul 2026 09:32:43 +0000
ROA not before: Thu 09 Jul 2026 09:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 176.118.193.0/24 maxlen: 24
185.53.249.0/24 maxlen: 24
185.115.205.0/24 maxlen: 24
192.35.206.0/24 maxlen: 24
198.135.220.0/24 maxlen: 24
212.11.93.0/24 maxlen: 24
212.104.211.0/24 maxlen: 24
2a0c:a300::/29 maxlen: 29
2a12:ea80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:38:ed:cf:fe:0f:4c:8b:31:eb:1e:5f:d9:ef:b7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jul 9 09:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3310b5cc3190e5d74afad59fac3dd1206b05ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:12:2e:4d:93:8d:23:b3:de:27:57:06:cb:
49:81:c3:28:48:a4:68:72:e9:01:ea:ab:5c:3b:38:
59:3d:73:39:fc:5f:e8:11:b0:42:0c:8e:f9:5c:55:
94:00:b8:26:0b:4f:14:d5:cc:d2:d7:b6:72:8a:df:
6b:16:d3:e4:07:2d:d8:1a:9f:ca:84:6f:36:f5:99:
7a:84:d3:23:5d:50:f0:05:30:6d:9f:1a:f6:39:70:
30:07:d6:a4:75:85:b7:03:6d:29:3a:7f:44:d4:dd:
2a:20:6d:94:cb:71:d1:fc:04:5c:4e:12:f2:e9:73:
06:1f:29:ac:30:af:55:9d:68:ef:0b:76:ef:fa:e2:
f9:e8:48:d0:59:8a:31:2e:42:b0:8e:c7:fc:77:54:
66:2d:6d:61:0f:81:6c:cd:17:5a:c7:d4:9d:b2:55:
06:14:1e:34:d6:af:1e:66:a0:21:4c:00:c9:fc:b1:
2e:3b:7a:87:3c:3e:ff:59:a4:3d:f8:79:29:33:d8:
a3:e3:55:45:a7:d7:d4:ee:74:df:62:50:3a:68:6f:
44:f5:a6:a6:e9:4b:05:e2:e7:3a:35:6e:2f:c9:c1:
0c:81:c0:19:ed:49:cd:68:de:f5:53:d8:be:a4:57:
d1:2d:d4:55:24:4a:34:f7:7a:a5:57:19:07:7f:35:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:0B:5C:C3:19:0E:5D:74:AF:AD:59:FA:C3:DD:12:06:B0:5E:C3
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/szELXMMZDl10r61Z-sPdEgawXsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.193.0/24
185.53.249.0/24
185.115.205.0/24
192.35.206.0/24
198.135.220.0/24
212.11.93.0/24
212.104.211.0/24
IPv6:
2a0c:a300::/29
2a12:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
04:d2:dd:4c:99:95:f7:52:a3:62:e1:3d:ef:52:a1:0d:55:5e:
2d:cd:96:66:4b:f6:1f:fd:b2:1e:5f:ce:96:59:26:ce:6e:39:
f5:93:d2:87:b3:0c:ee:ec:00:0d:10:1a:98:ac:32:9d:45:3f:
73:de:a4:76:89:31:2d:0f:2d:f4:c0:48:60:2e:5a:90:64:f3:
f1:56:cb:fc:36:cd:70:a7:a3:7a:7e:29:69:b3:57:94:4f:3c:
e3:59:67:fb:fa:76:10:66:4e:3c:66:d0:77:f1:6f:2f:d2:fc:
95:d2:2a:81:3c:17:02:d1:d4:69:ac:90:91:72:ab:ce:9e:23:
49:74:ec:df:2f:44:52:54:12:1d:ba:d2:04:05:24:f5:03:30:
65:b2:89:37:10:4d:b5:5e:34:51:19:17:c3:8f:6a:e4:39:1a:
51:81:a8:58:b7:9e:36:e5:34:45:c5:7f:02:bc:52:fa:f1:3e:
1f:6e:b9:6c:a7:46:6e:84:83:7b:59:7f:50:c5:9e:48:da:45:
41:9f:68:c0:7e:83:6e:47:9b:fe:07:af:eb:2c:79:ff:ed:94:
25:2a:c4:9c:ac:fc:b2:67:fc:0f:bd:67:1f:af:d4:1a:1d:2b:
97:23:7a:05:ba:61:7c:fa:42:11:f5:5b:8d:37:77:3c:a3:db:
86:23:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:48:16 2026 by rpki-client