Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/Sd77dI_qV2VOleKbTZ9J7vrGLBM.roa
File: Sd77dI_qV2VOleKbTZ9J7vrGLBM.roa (raw, json)
Hash identifier: 9837dwWgkQpzHNpoztGYCouYdhQpJU6Gwe5FfqDOYks=
Subject key identifier: 49:DE:FB:74:8F:EA:57:65:4E:95:E2:9B:4D:9F:49:EE:FA:C6:2C:13
Certificate issuer: /CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Certificate serial: 01A17C79379138BEEEC8147BA8FAD06AFB83
Authority key identifier: 07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/Sd77dI_qV2VOleKbTZ9J7vrGLBM.roa
Signing time: Tue 27 Oct 2026 08:28:01 +0000
ROA not before: Tue 27 Oct 2026 08:28:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20570
IP address blocks: 161.145.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:79:37:91:38:be:ee:c8:14:7b:a8:fa:d0:6a:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Validity
Not Before: Oct 27 08:28:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49defb748fea57654e95e29b4d9f49eefac62c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:77:12:78:dc:5d:d9:01:2f:2b:42:69:29:
aa:f4:24:3a:ef:2d:3e:b3:c3:26:7c:dd:70:fd:18:
fd:8f:2d:12:54:a0:47:f6:e9:31:23:64:14:0f:eb:
de:3a:81:a7:27:23:75:55:21:2b:4a:bc:1a:75:ea:
55:47:46:c7:04:b3:e4:07:73:5d:be:28:3a:06:88:
66:64:35:9f:9d:31:dd:a4:33:cc:b4:34:f1:d3:75:
4b:78:2c:4b:46:30:59:f2:a5:ae:de:94:f6:96:e0:
5f:21:bc:6f:8e:3f:55:cf:aa:05:47:fb:1b:95:ab:
1b:b0:1b:51:64:19:7d:32:0e:5e:92:c6:78:3e:d7:
f7:8d:b8:90:ea:db:3c:b7:c5:58:12:af:fc:a1:a4:
14:00:49:c0:34:e6:70:4f:79:49:72:4a:28:78:da:
ef:4f:dc:9a:c2:ae:8c:d5:d1:2d:a4:38:a7:a7:f9:
fd:f2:96:a3:dc:1a:d4:9c:5c:84:9e:a8:c0:5b:43:
d0:57:d3:16:04:18:bc:07:64:d6:6d:a7:ae:2c:78:
8a:9d:ee:90:0a:68:36:2d:15:f3:c8:40:dd:32:60:
13:8a:28:2e:1e:ec:7c:78:96:e3:d7:1f:14:d8:01:
93:00:46:6f:41:59:eb:ca:b4:fd:6a:71:3d:3d:21:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:FB:74:8F:EA:57:65:4E:95:E2:9B:4D:9F:49:EE:FA:C6:2C:13
X509v3 Authority Key Identifier:
keyid:07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/Sd77dI_qV2VOleKbTZ9J7vrGLBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.145.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9e:bb:10:38:34:76:7c:d1:16:23:d2:ad:07:c2:85:25:21:
d7:d6:be:a7:c6:c1:60:52:df:9c:0b:37:a1:ab:28:20:b3:18:
8e:7a:94:14:cc:df:22:e5:5f:70:0f:ca:b6:05:ff:36:54:8a:
79:85:c1:50:8b:96:1f:42:32:c8:bc:e3:a1:79:71:1b:d8:e0:
af:23:fd:21:7b:1a:78:5c:28:7b:b8:61:8c:31:4e:ab:3b:bc:
c0:47:aa:e2:27:79:ef:82:4b:ee:18:b2:77:59:86:1d:0e:5c:
67:fc:bb:92:b6:1d:f6:ce:6d:8e:ea:71:1e:61:36:7b:4c:c0:
65:21:6d:8a:1a:71:bf:51:2f:f7:a8:67:b2:38:ea:96:6d:c8:
c7:55:c6:95:a2:9b:a6:15:e8:0b:ac:af:71:22:c5:00:59:ea:
80:2f:9b:c1:49:0a:b7:ff:06:8e:a4:f5:a6:f8:d6:17:6f:ce:
a8:ed:4c:df:66:71:15:ab:21:f1:18:2b:68:1a:32:09:6a:0b:
be:94:4e:2b:1b:10:0d:5a:3b:1b:a9:2d:4a:f3:dc:64:53:6e:
08:5a:42:a5:31:85:a3:cb:ef:13:1a:f5:bb:5e:ba:f5:e4:f3:
50:ab:1f:31:7f:04:19:a3:ff:b4:39:94:9c:38:8a:1a:e6:a5:
ff:4d:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:59:42 2026 by rpki-client