Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/sMp4PvvMOMfY9d5zvU7QU27V56A.roa
File: sMp4PvvMOMfY9d5zvU7QU27V56A.roa (raw, json)
Hash identifier: jcGvWscyQTE+fFXfpX+ODKz1jq1sberOohhcSwiczMk=
Subject key identifier: B0:CA:78:3E:FB:CC:38:C7:D8:F5:DE:73:BD:4E:D0:53:6E:D5:E7:A0
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23688EB94638349B88D01E1C622E1D28
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/sMp4PvvMOMfY9d5zvU7QU27V56A.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49600
IP address blocks: 193.46.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:b9:46:38:34:9b:88:d0:1e:1c:62:2e:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0ca783efbcc38c7d8f5de73bd4ed0536ed5e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:d6:4b:1e:cb:25:36:79:fe:3b:7a:0d:16:
34:b1:fb:d4:f3:87:8e:df:1c:0a:55:4c:18:b1:b9:
c2:7d:e0:29:bc:3e:b2:be:49:17:63:be:de:d9:ae:
5f:ca:1c:fa:af:2d:03:1b:55:53:3b:16:51:7b:8c:
fb:7e:4b:50:18:17:15:a5:83:7b:0b:49:6b:f0:0c:
3f:5e:39:c3:af:1d:7d:78:15:17:e3:52:06:c7:3c:
44:7f:41:fa:a5:a8:67:5c:55:1c:0a:08:00:68:47:
71:cd:ba:a6:56:86:84:a7:e7:d1:b8:6a:3e:2e:00:
41:c9:87:91:7a:d3:30:14:b5:5e:1f:0b:ac:68:29:
d7:69:eb:ef:5d:3c:4e:5c:41:1a:e5:01:f6:d6:a8:
0f:df:f9:e6:f5:06:d5:be:8e:54:2e:ec:55:54:84:
97:19:ff:59:60:f9:d1:5f:e3:ba:eb:57:12:9f:2b:
6d:7f:e3:45:50:d7:fb:bb:3f:52:c6:0d:7d:09:54:
f9:01:79:59:b2:e9:41:ec:1d:7b:07:b6:3c:f6:20:
63:29:54:c8:ea:11:7d:29:42:6f:ad:5f:2a:a9:c1:
2d:9c:db:66:d4:a8:69:4a:92:29:9e:ec:ec:ca:bf:
6a:be:88:ad:db:d3:2e:a6:aa:42:2d:8a:8a:b8:7e:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:78:3E:FB:CC:38:C7:D8:F5:DE:73:BD:4E:D0:53:6E:D5:E7:A0
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/sMp4PvvMOMfY9d5zvU7QU27V56A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.219.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6d:fe:4a:ab:b7:0c:06:32:3b:b5:f8:51:7c:75:35:5b:f7:
6d:7b:00:08:7a:20:5f:e8:7d:91:9f:94:6c:7c:3c:12:33:cf:
32:18:db:8d:b4:e3:46:b9:c0:53:3a:c2:3e:4b:2e:b9:df:3b:
dd:36:f9:69:84:be:c9:3b:03:44:25:2e:62:26:cb:da:da:38:
81:5c:57:c8:17:dd:62:67:97:e6:d2:2e:a0:a1:d5:5b:84:61:
da:90:2d:0e:bf:fc:4c:79:23:86:ca:ee:40:b6:fb:5e:74:a0:
52:a1:74:3f:1a:91:6f:3f:29:51:1f:00:01:c1:eb:24:59:e4:
32:79:23:4d:32:11:76:fc:59:2f:13:7a:c4:c2:b5:20:84:7b:
c6:46:41:95:a0:93:5a:6d:7c:47:a4:a5:18:d6:07:cb:6c:6c:
66:57:f7:ee:e4:80:60:6d:7a:ab:0c:59:6b:4c:c7:ba:50:32:
f6:c4:28:e0:bc:dd:e5:43:3d:11:ac:83:66:4a:30:a5:e3:3f:
20:32:4b:ba:89:ec:d5:09:dd:b2:88:12:f7:a1:cc:71:f1:41:
71:99:a6:58:c4:13:e4:89:f1:0a:0b:f0:41:7d:6e:d3:91:15:
71:18:93:f3:38:4a:ea:3f:d4:1f:a4:ea:c0:2b:bf:cc:a3:c1:
97:39:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:46:35 2026 by rpki-client