Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/SS1trll_jJth-99tdKeZ_ZRXElE.roa
File: SS1trll_jJth-99tdKeZ_ZRXElE.roa (raw, json)
Hash identifier: dAGh/v5+aRUaKoZovKOMDDNudug1o0UcUdEQBS1qqyg=
Subject key identifier: 49:2D:6D:AE:59:7F:8C:9B:61:FB:DF:6D:74:A7:99:FD:94:57:12:51
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019D403AA1F4223C8BDC494A7FE9E3FD3872
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/SS1trll_jJth-99tdKeZ_ZRXElE.roa
Signing time: Mon 30 Mar 2026 19:31:17 +0000
ROA not before: Mon 30 Mar 2026 19:31:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214116
IP address blocks: 5.45.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:3a:a1:f4:22:3c:8b:dc:49:4a:7f:e9:e3:fd:38:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Mar 30 19:31:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=492d6dae597f8c9b61fbdf6d74a799fd94571251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:c6:96:f4:a6:c0:43:a8:34:9d:ea:b1:86:
22:dc:71:12:cd:b2:d9:05:66:7b:d1:9e:af:8e:69:
4a:fc:e6:62:d8:ec:73:72:22:3b:b7:3e:39:55:10:
ff:3e:ec:cd:c5:02:9f:3b:24:e8:1e:82:d4:2c:d2:
84:d8:e7:56:c6:62:db:85:4c:59:fe:97:6c:60:26:
f9:58:0f:bb:35:50:26:64:6e:20:bb:42:7d:38:37:
a5:9d:d5:47:01:87:d0:47:49:59:83:08:57:d0:5a:
e2:c2:73:49:94:cb:0d:ed:7d:e9:df:6b:72:56:16:
f8:7f:5c:05:f6:24:de:15:53:ed:27:78:a5:bd:15:
c8:dd:c1:8c:e6:7e:e9:a1:54:0a:74:23:0c:2c:82:
62:7d:31:be:27:df:8a:90:9d:92:a1:80:77:15:3e:
c9:c4:c2:3c:90:0d:e5:f5:dc:08:40:80:5e:40:a2:
4f:57:91:23:78:2e:5e:27:e0:91:4b:32:42:9b:c4:
b5:01:68:40:33:3a:a0:17:88:77:7d:17:e6:4c:fd:
bb:9d:d4:ff:81:ca:3a:ee:71:3c:82:62:57:99:0c:
20:ba:61:62:82:83:0a:91:f0:e5:cf:60:bc:e4:13:
c8:43:0b:d2:a1:b0:63:47:75:f4:23:5d:e0:10:61:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:6D:AE:59:7F:8C:9B:61:FB:DF:6D:74:A7:99:FD:94:57:12:51
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/SS1trll_jJth-99tdKeZ_ZRXElE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.24.0/22
Signature Algorithm: sha256WithRSAEncryption
01:e3:94:21:04:7c:0d:b7:68:63:ed:ec:3f:2b:b3:c3:07:f4:
ae:90:0a:01:fe:f6:61:7d:a1:82:7e:74:dd:da:8c:ca:9c:77:
e4:ea:d3:fe:65:79:51:81:e3:d3:5d:97:9b:dd:24:ff:44:4e:
80:18:67:e0:fe:59:44:42:f6:67:95:e3:e7:23:3a:6f:10:1a:
98:f7:42:08:ac:24:0f:89:f9:70:ce:37:a1:04:59:ca:bd:54:
65:2f:be:97:d2:26:15:6f:e2:92:66:1d:0d:22:c8:ac:c7:c1:
b7:2c:e3:98:7c:32:27:07:c9:34:52:01:68:91:5d:b2:0f:ca:
56:2e:ce:4a:ae:1d:75:7f:2d:dd:0f:d2:1c:52:77:6f:2b:23:
5e:be:81:bc:59:ed:b8:63:0d:84:92:33:d6:4f:82:f0:30:a7:
df:2e:42:ae:83:e2:b5:be:11:28:20:a8:4a:67:9d:68:b8:4a:
ff:64:6d:dc:0e:c8:b9:7c:ca:00:d0:69:9e:32:89:58:d8:e3:
bd:da:f6:90:b4:7d:7e:22:cb:d9:f4:5f:47:11:68:35:01:17:
2f:a2:8d:f3:bc:72:ef:be:b3:56:9d:33:9b:81:5f:37:da:7f:
c9:05:d1:2f:3f:6a:fb:bc:69:13:ed:83:53:73:57:45:83:b6:
2d:e9:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:55 2026 by rpki-client