Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/snSTXxhwfXF_fIYPcvtX5TUfp4s.roa
File: snSTXxhwfXF_fIYPcvtX5TUfp4s.roa (raw, json)
Hash identifier: SgcxZ1WIAaLU78YEFmwNxYxKFCEo2F5UZtkVPdymnyk=
Subject key identifier: B2:74:93:5F:18:70:7D:71:7F:7C:86:0F:72:FB:57:E5:35:1F:A7:8B
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019F6F8DADE521E2D7FAA08524149CC5991E
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/snSTXxhwfXF_fIYPcvtX5TUfp4s.roa
Signing time: Fri 17 Jul 2026 10:09:43 +0000
ROA not before: Fri 17 Jul 2026 10:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:8d:ad:e5:21:e2:d7:fa:a0:85:24:14:9c:c5:99:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jul 17 10:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b274935f18707d717f7c860f72fb57e5351fa78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:ac:5b:ae:ea:7d:9f:f7:bc:e5:76:02:97:
68:7f:7e:1b:d3:00:ec:22:c5:fe:45:1d:ff:e2:1c:
db:c8:2d:9c:a0:5b:c9:a3:a2:cd:43:0e:f6:30:d2:
94:ee:37:b5:62:83:65:b1:8b:94:04:d0:eb:c2:9f:
9c:cd:58:b3:d3:28:d4:52:65:49:83:5f:6b:f8:e4:
c7:bd:8f:72:b4:75:b4:13:05:cd:00:a3:41:d8:cd:
30:98:39:0e:1c:3f:d8:30:29:e2:52:23:8c:8b:b0:
90:9e:95:d7:09:65:55:fe:60:33:1e:dc:ad:3b:28:
18:65:61:68:5e:55:2b:3c:40:e2:9b:fc:52:2b:58:
80:08:0f:7c:9c:99:f7:f6:73:6c:ad:c6:b7:c3:13:
04:cb:60:d1:33:18:7a:d6:c0:72:16:e8:02:cb:b0:
4b:84:e4:28:ee:a9:25:e4:9b:eb:e0:e3:84:27:57:
59:8e:6c:14:e9:35:fc:19:71:f3:12:a6:f9:64:5e:
a0:0d:0c:09:18:05:cf:11:07:58:08:66:1e:5f:b5:
69:86:62:bc:f1:49:af:a9:9a:02:42:7f:eb:ec:eb:
0f:a1:a2:2c:6b:7b:68:42:5a:c5:4b:6d:f9:ff:ec:
b8:3c:55:07:a4:18:d4:94:b1:c6:82:20:77:94:a3:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:93:5F:18:70:7D:71:7F:7C:86:0F:72:FB:57:E5:35:1F:A7:8B
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/snSTXxhwfXF_fIYPcvtX5TUfp4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c9:ca:9e:69:de:99:fb:f3:1f:00:e7:d9:a5:57:4a:6c:c0:
d1:85:26:57:39:10:7d:27:f3:e9:4d:ed:e6:86:d0:91:2a:c2:
ba:42:6f:a5:8a:da:ff:d9:09:2d:78:11:bd:8a:2a:21:34:9d:
04:9b:87:4b:2d:e9:66:c1:58:f0:d8:3e:52:d4:2f:af:c4:bc:
83:cb:65:cb:bd:17:a0:03:45:14:e7:34:bd:14:b6:be:b1:22:
6c:53:d5:dd:33:00:39:05:c5:3d:20:09:b3:17:6c:1b:6d:85:
9e:82:75:3b:c8:eb:9d:a0:94:e0:68:05:fc:de:0c:b4:91:54:
f2:00:61:dc:ab:ad:b7:cc:e9:3e:90:e9:b9:59:67:93:ec:73:
16:8d:cd:b4:be:ea:38:7c:de:e7:a3:a5:09:06:73:4f:01:3f:
d3:fc:0d:46:fb:d6:0b:48:5d:ec:4f:51:c6:d4:d7:59:d7:ec:
34:ea:39:1c:7c:d8:c5:ac:95:c9:4e:e9:06:31:12:d9:45:b4:
fd:c5:94:66:76:fa:ca:01:ed:c5:a8:3c:0b:09:90:4b:fb:7f:
ee:18:d3:dc:90:b5:6b:78:d1:ea:7b:c3:23:d9:23:5a:8b:05:
06:0c:eb:f9:de:af:0a:2c:9c:88:ca:db:7d:dc:a0:7b:8e:7a:
70:ee:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:06 2026 by rpki-client