Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/sgX4F5K8Qccr6OFohW4hHuLF2Vg.roa
File: sgX4F5K8Qccr6OFohW4hHuLF2Vg.roa (raw, json)
Hash identifier: rghc6qyYVspOa4pYawS4O5flLqi7PmZ7bsphW/d5guw=
Subject key identifier: B2:05:F8:17:92:BC:41:C7:2B:E8:E1:68:85:6E:21:1E:E2:C5:D9:58
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019EB37E2E6CA0F24DD0C190D9D6DC617B50
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/sgX4F5K8Qccr6OFohW4hHuLF2Vg.roa
Signing time: Wed 10 Jun 2026 21:44:11 +0000
ROA not before: Wed 10 Jun 2026 21:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 109.122.58.0/24 maxlen: 24
194.62.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:7e:2e:6c:a0:f2:4d:d0:c1:90:d9:d6:dc:61:7b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 10 21:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b205f81792bc41c72be8e168856e211ee2c5d958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:b6:f7:9f:9a:e6:c8:54:23:16:95:3f:e1:
4b:eb:c2:d6:40:60:33:b8:4a:3a:50:80:a2:30:a7:
c2:ab:37:22:2e:e9:39:e6:39:35:ac:ca:81:f5:c5:
55:69:9f:27:84:01:cb:d8:cc:81:db:04:95:1c:eb:
83:bd:7d:88:15:88:db:a5:b4:35:5d:aa:71:da:42:
19:14:34:23:8e:cc:2e:7f:6d:d1:38:d8:0e:ca:34:
d3:1e:ac:81:da:7e:15:e6:2b:55:d9:58:3f:db:2b:
90:a6:9b:8b:17:28:04:1a:b0:12:92:1a:b9:d5:04:
76:4d:71:d0:15:6a:61:2f:72:12:c7:1e:25:a3:4b:
d6:ec:39:87:23:17:3a:0c:44:34:98:e8:54:b1:61:
03:f7:da:82:d1:56:c4:98:30:c2:b0:d1:15:31:90:
1d:47:df:a3:77:8c:a3:20:b1:3d:fc:a9:da:7a:a2:
ff:91:b2:e5:73:4f:66:17:86:e6:ec:6c:ba:b4:95:
0b:7f:a0:c9:f3:c2:65:83:f2:27:23:8d:f1:a4:b9:
b5:ce:1e:61:12:da:a1:38:92:e8:07:cb:08:54:db:
09:d3:2c:b8:7f:b7:8f:a3:8c:5e:ba:53:5a:a4:f7:
f8:f8:da:6d:b5:91:32:96:32:65:6b:0f:86:b0:f6:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:05:F8:17:92:BC:41:C7:2B:E8:E1:68:85:6E:21:1E:E2:C5:D9:58
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/sgX4F5K8Qccr6OFohW4hHuLF2Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.58.0/24
194.62.119.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9f:8c:7e:89:19:8a:d9:4e:e1:e5:ce:cc:9b:37:0c:96:0d:
d1:69:5d:89:ae:27:30:61:8b:ac:ab:e9:ad:29:61:5c:b2:28:
c0:42:9e:7e:08:53:86:a1:06:91:2c:43:4f:0f:d3:38:b9:44:
79:94:8e:bb:0b:57:ce:17:35:98:16:70:2c:a6:84:69:f5:ce:
56:f6:39:06:5a:f3:21:7a:24:87:20:53:13:4d:16:d0:0e:8b:
47:b7:0e:6a:8e:a0:fb:61:2b:15:8b:ea:63:09:8c:9f:25:03:
50:3a:b5:a2:49:9d:20:6e:9a:a0:30:b9:2c:94:21:af:c5:78:
f8:23:1d:37:0e:56:ea:3b:e4:b6:ee:cb:ff:d4:dd:df:2d:11:
07:8d:27:60:5a:2d:29:82:ff:ad:5c:23:da:c3:11:98:2d:2d:
64:89:73:48:10:a2:dd:52:f1:25:39:39:8b:9b:18:47:73:c3:
10:81:f0:a3:c7:f5:a0:70:cb:7d:d9:9b:b1:39:cb:b5:38:e9:
ae:63:d3:48:2e:d5:0f:87:94:2e:e5:93:d0:ce:e2:b7:7e:da:
2a:71:23:85:a2:fd:7e:11:1a:54:7c:5e:19:f6:20:b5:96:28:
9e:fc:f9:e4:66:bf:73:45:8a:b3:a7:64:7f:77:cb:1d:e7:fd:
13:b4:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:17 2026 by rpki-client