Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/szqnV-EQ7Zc47uUj4TIEOszS0Ko.roa
File: szqnV-EQ7Zc47uUj4TIEOszS0Ko.roa (raw, json)
Hash identifier: BB1EaMKqakOcBvI67Ti7pAOUddyRbCtkKt+qHDe7zz4=
Subject key identifier: B3:3A:A7:57:E1:10:ED:97:38:EE:E5:23:E1:32:04:3A:CC:D2:D0:AA
Certificate issuer: /CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Certificate serial: 01A162A9A3EE9A816C7122AD8D3C800EA471
Authority key identifier: 4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/szqnV-EQ7Zc47uUj4TIEOszS0Ko.roa
Signing time: Thu 22 Oct 2026 08:10:47 +0000
ROA not before: Thu 22 Oct 2026 08:10:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45671
IP address blocks: 136.176.212.0/24 maxlen: 24
136.176.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a9:a3:ee:9a:81:6c:71:22:ad:8d:3c:80:0e:a4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Validity
Not Before: Oct 22 08:10:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b33aa757e110ed9738eee523e132043accd2d0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:7b:04:1c:de:60:68:d9:66:e3:e6:8f:45:
5d:ee:6b:e7:b2:db:d7:2c:9d:ed:3a:c4:69:36:5b:
86:eb:7f:9e:66:dc:c6:e0:1f:20:1e:06:29:94:dc:
21:83:ea:6f:56:6b:c9:eb:3a:f8:f3:16:10:51:1d:
a6:f9:0d:36:e2:0c:aa:a6:3c:a0:f5:1f:5e:26:7b:
2a:40:dc:0c:db:12:23:24:b0:e0:32:d1:6f:4f:b6:
aa:f3:ef:bd:3e:58:f1:c0:f8:9b:39:e7:4c:67:7c:
21:db:6a:e5:0d:53:46:e1:4c:04:7f:53:24:ea:16:
8d:a5:74:e5:1c:21:6e:36:4b:fe:a0:a3:bf:eb:36:
2f:b5:40:e0:c7:77:ca:ce:7f:53:82:4d:9a:c5:35:
3d:26:2e:80:29:61:66:bc:86:dc:37:ed:7e:e5:26:
16:89:df:09:3e:76:45:cf:ae:93:ce:24:97:7b:74:
46:69:d4:e1:14:13:77:c0:5b:ed:ce:d6:1c:74:3b:
d7:4b:23:99:4f:b0:b2:8a:fa:78:0c:17:b9:77:3f:
0e:44:15:ca:33:10:f4:d2:c3:f0:28:67:57:2a:ad:
aa:10:78:46:eb:f3:9e:65:83:61:e6:64:12:9d:94:
ea:f1:88:7c:1c:94:e9:32:5b:b3:b8:4b:0d:3e:8b:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3A:A7:57:E1:10:ED:97:38:EE:E5:23:E1:32:04:3A:CC:D2:D0:AA
X509v3 Authority Key Identifier:
keyid:4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/szqnV-EQ7Zc47uUj4TIEOszS0Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:7f:1c:7d:01:48:b3:d1:10:a5:cd:b8:21:a6:72:a3:f6:d6:
50:f3:15:6a:13:c1:31:c4:0a:e6:bb:11:4f:7c:aa:8a:d7:86:
e9:6a:3c:54:82:a8:b5:2d:fb:86:e5:00:71:86:63:68:44:c8:
12:41:e4:e1:03:40:52:2b:99:77:86:b0:e6:bc:7a:fd:8f:99:
69:49:de:9b:52:ed:bd:e1:1c:f0:50:48:f9:01:ae:d9:3d:9c:
25:6d:b6:ea:f8:17:b5:d5:06:3a:06:b9:16:6f:92:22:64:47:
2f:58:27:55:36:ac:81:67:1f:c1:e2:0d:34:b8:ae:e1:2e:2e:
d6:cf:4b:4f:3d:4e:3f:71:cb:e9:17:9b:a8:a7:ad:13:cd:f7:
43:5e:3f:73:5a:51:97:5e:f5:c1:03:2c:12:6c:07:4b:e6:87:
f5:5d:d4:e0:80:43:8b:49:e0:a2:63:19:50:9b:26:47:d4:ca:
a4:1b:98:1d:35:4b:42:09:08:9b:50:12:22:4f:07:0f:57:74:
9e:c9:7c:cd:a7:71:fe:ce:a9:53:ac:0d:d6:3c:88:4e:17:56:
1b:f8:c3:6b:59:5d:25:fc:78:d0:f9:fe:02:d5:1f:79:93:27:
fe:9d:f0:cc:83:a9:7b:97:93:c7:71:6a:4a:3d:6b:0c:9a:3a:
7f:72:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:56:57 2026 by rpki-client