Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/SvSic5atQpKafNQ1ytl5_R7Pkcg.roa
File: SvSic5atQpKafNQ1ytl5_R7Pkcg.roa (raw, json)
Hash identifier: UJNcwAbliupzHab/bQcj6OQlCTnr3Sf4hnJi91RNxoI=
Subject key identifier: 4A:F4:A2:73:96:AD:42:92:9A:7C:D4:35:CA:D9:79:FD:1E:CF:91:C8
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019FD13280BD0286440C39565CB1C8239118
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/SvSic5atQpKafNQ1ytl5_R7Pkcg.roa
Signing time: Wed 05 Aug 2026 09:12:55 +0000
ROA not before: Wed 05 Aug 2026 09:12:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8615
IP address blocks: 85.143.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:32:80:bd:02:86:44:0c:39:56:5c:b1:c8:23:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Aug 5 09:12:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4af4a27396ad42929a7cd435cad979fd1ecf91c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:23:c8:c1:c4:00:52:4e:f1:6a:a9:dd:90:
73:19:21:d5:71:e2:94:22:6d:ad:43:15:fe:ba:52:
dd:98:68:18:2c:f6:0d:ff:25:3a:2e:dc:f8:4d:61:
d2:7c:3b:4b:77:bf:f2:74:90:d8:21:07:05:ae:1b:
8c:05:30:13:c1:2c:3c:c2:6d:29:7f:bf:db:a7:13:
98:82:73:d4:e8:ba:75:29:eb:4c:a4:85:ad:a3:97:
a5:a5:8c:c6:9e:3c:11:ab:9c:42:66:11:fa:11:a3:
f6:a6:0a:f8:ad:5f:5c:e1:14:7c:83:58:eb:40:76:
a3:2a:b1:39:97:a2:47:f6:82:54:82:fa:2b:37:25:
f6:d5:4c:a0:63:e9:5a:f5:21:fa:4f:9b:37:0a:c5:
8c:0a:12:ec:13:33:3a:72:d3:8d:fb:0c:b6:47:10:
44:ef:27:dd:c2:c0:a3:cc:c7:89:57:30:15:b0:aa:
bc:be:c0:7a:fa:64:cf:8c:6a:ec:92:db:82:64:cd:
59:f3:01:97:6c:95:0e:14:26:d7:7e:e6:4a:34:15:
fc:4f:ea:53:87:9b:bd:b7:8c:10:7b:f4:6a:44:7d:
40:14:95:32:f1:98:b9:03:1c:bb:83:e1:e9:e3:8c:
0d:08:ff:36:f2:5c:0f:b9:8f:99:ae:b4:64:d1:1f:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F4:A2:73:96:AD:42:92:9A:7C:D4:35:CA:D9:79:FD:1E:CF:91:C8
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/SvSic5atQpKafNQ1ytl5_R7Pkcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.102.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4f:55:fa:e3:71:12:f8:7c:9d:a5:60:58:9c:43:34:31:4f:
92:06:25:37:ea:9b:d1:88:e2:6f:1c:42:81:65:58:6d:43:20:
90:f4:b9:8f:69:2f:73:15:01:88:71:77:90:39:a5:91:dd:02:
2b:5c:4c:d5:52:15:e4:6e:4c:af:f2:b9:cf:17:86:5a:6c:b3:
da:df:dd:35:47:8c:4c:73:85:57:ad:b3:b6:95:f8:4d:b9:7a:
f3:c4:3b:be:e4:77:00:18:21:b2:b3:e2:02:da:da:ef:7f:34:
64:63:78:e7:d4:7c:f7:73:70:dc:59:7f:78:54:f3:df:88:b2:
5c:01:03:ae:23:47:e7:31:76:19:56:b9:a9:f6:35:fe:25:bd:
15:7f:d2:ee:b8:d0:d1:6e:1e:a0:e9:d1:1d:94:0e:ce:42:e8:
17:10:4a:07:a4:6e:ec:d0:e9:d7:66:21:89:c4:95:83:0c:0d:
d3:c7:5d:ed:e7:26:20:82:5c:f1:92:3d:e6:d5:0e:33:56:bf:
42:53:66:92:de:3a:db:e7:0a:09:1a:f1:a7:75:08:9d:15:8a:
20:b2:e5:22:60:64:5c:11:f5:82:1e:ba:96:17:a8:59:81:2a:
fd:04:b8:39:4e:bc:45:81:2c:04:00:fe:e0:eb:23:69:8f:77:
90:89:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:22 2026 by rpki-client