Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa
File: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (raw, json)
Hash identifier: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=
Subject key identifier: 4A:FD:1E:7A:E0:EB:63:45:67:7D:E0:CE:70:9B:89:DF:08:20:DE:24
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 019F236877629649476FBD2B10DEFA630F4A
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198657
IP address blocks: 91.237.236.0/22 maxlen: 22
2001:67c:2b7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:77:62:96:49:47:6f:bd:2b:10:de:fa:63:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4afd1e7ae0eb6345677de0ce709b89df0820de24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:3a:14:8a:bc:57:fc:fe:1f:08:f7:93:f4:
a0:a7:12:6d:35:7b:5d:d7:f6:9d:bf:98:4f:1f:6f:
59:85:67:8f:c5:5e:05:3f:08:e2:55:af:01:ae:4e:
a1:77:9b:b6:97:f5:36:58:c6:b5:eb:25:57:30:98:
e7:1f:09:91:b0:f2:a6:c4:bc:4a:4b:32:bc:e8:91:
30:0d:9e:78:78:b7:af:7d:a8:05:e1:1e:e0:e0:19:
1b:82:e8:04:35:09:3f:09:3b:63:71:4b:f6:99:52:
43:0e:a6:a5:0e:2c:cc:91:df:21:76:fd:26:d5:3b:
bc:fd:b6:1c:2f:2b:88:f7:46:49:19:65:8c:cf:ff:
18:c3:38:73:1b:35:35:0e:c0:1d:22:4a:4d:52:fd:
e8:36:43:4c:68:53:32:4f:d0:1f:36:f9:c9:f4:56:
9d:4e:23:68:c5:0a:cd:45:bc:81:30:3d:5c:3a:85:
f6:1f:43:7a:a7:0e:bd:2b:de:26:89:b9:01:48:db:
35:4f:1c:b0:3d:a6:40:ae:97:28:0e:e6:6b:01:21:
07:f4:e6:d3:50:f0:38:0f:33:41:d1:41:2c:39:02:
fe:7a:72:08:ab:9d:e4:dd:8e:a5:e1:e4:99:e3:97:
58:96:d4:92:28:19:4e:ac:26:bc:71:ef:49:17:54:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FD:1E:7A:E0:EB:63:45:67:7D:E0:CE:70:9B:89:DF:08:20:DE:24
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.236.0/22
IPv6:
2001:67c:2b7c::/48
Signature Algorithm: sha256WithRSAEncryption
57:8d:ed:95:6d:e8:6c:6a:20:d1:d8:53:dc:8e:79:51:60:8b:
f3:dd:e7:49:ec:6c:20:8e:59:bf:04:41:99:0c:62:3f:16:5e:
49:e1:e2:f7:36:82:6c:30:1c:2c:65:b2:32:d8:ab:63:43:ff:
06:0e:ed:38:ec:b1:15:db:e4:7a:1e:75:34:03:05:b6:4e:7e:
f5:4d:0d:5c:cf:52:57:e3:cb:67:c2:58:db:0e:a5:24:eb:dc:
93:dd:25:82:17:c2:7d:dd:6c:53:df:79:1b:23:6e:93:5f:bf:
fe:1a:2d:e5:20:98:ca:ec:5c:6d:c0:aa:30:93:8e:2d:97:d3:
93:3f:b2:6e:5e:f5:2a:39:e0:02:f7:a2:dc:8b:11:8c:6c:bb:
aa:2a:24:dc:e3:1b:8f:63:55:fe:01:c6:da:08:e4:9e:d9:96:
dc:14:0d:7b:33:1d:1c:0b:7f:c4:a8:f7:39:9b:12:4a:f4:4b:
34:1a:af:55:da:e3:b1:e8:d1:c6:fa:92:d9:f5:7b:2f:2e:82:
4e:8e:2e:f3:3e:88:58:d6:c7:17:79:2a:4f:b9:c2:0a:72:2f:
e2:10:36:1f:3e:a1:2a:e0:09:b9:b1:f5:2a:44:e1:00:85:a6:
19:b2:7e:e8:09:57:d4:b6:c5:44:03:56:b3:8d:fc:ac:51:7a:
b7:84:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:57:59 2026 by rpki-client