Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/SM90LiH91VtlPCGHFr3CKSsHv0Y.roa
File: SM90LiH91VtlPCGHFr3CKSsHv0Y.roa (raw, json)
Hash identifier: XAYb3lsOE4KC9elTgFUEcm0bx9BxW9iNpIaDYCdyiew=
Subject key identifier: 48:CF:74:2E:21:FD:D5:5B:65:3C:21:87:16:BD:C2:29:2B:07:BF:46
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 01A0722EBB13DB4A23B3BCB36E725BB8657A
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/SM90LiH91VtlPCGHFr3CKSsHv0Y.roa
Signing time: Sat 05 Sep 2026 15:27:40 +0000
ROA not before: Sat 05 Sep 2026 15:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210980
IP address blocks: 185.70.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:2e:bb:13:db:4a:23:b3:bc:b3:6e:72:5b:b8:65:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Sep 5 15:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48cf742e21fdd55b653c218716bdc2292b07bf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:72:62:ed:26:b1:bc:95:76:ae:3b:b7:7e:
46:e9:3a:2a:f2:3b:98:13:1a:d2:8a:56:b4:8a:a9:
c8:cd:e5:f3:54:8e:08:36:a5:9a:65:8c:3f:2f:f4:
1c:f1:87:40:26:f9:84:aa:28:b1:c0:e7:5b:e7:8a:
00:15:c4:25:e4:45:3b:22:d1:19:96:29:bf:8b:a1:
71:8b:8a:2b:af:65:68:a8:fa:b9:a2:a2:b2:97:42:
42:b2:aa:63:8a:25:2b:32:fb:a5:93:3e:6d:3d:9e:
64:74:8d:87:d3:a6:6d:06:61:7a:3a:4f:d6:9f:66:
1f:eb:cd:0f:ae:9f:5b:42:af:db:9c:61:20:e9:ce:
cf:21:50:6b:8c:44:64:a1:f8:01:3b:2f:f9:4a:f6:
fe:66:a4:7b:07:b9:2f:e7:d1:8c:2b:6a:62:1c:d1:
56:c1:85:81:72:97:63:78:f9:8e:d0:9e:03:23:af:
da:1f:fb:b3:8c:c3:3f:f8:6d:6d:f2:39:7f:ea:63:
fc:59:e7:51:83:75:d2:2a:92:8d:3f:2b:b7:fb:56:
9d:13:c6:93:0b:ff:2f:30:a8:9f:71:50:d5:6a:6f:
26:58:1e:f7:76:e1:52:93:36:c4:e7:46:51:95:03:
0b:d1:0b:e1:fb:53:a6:69:56:d1:03:b7:ab:7e:f8:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:74:2E:21:FD:D5:5B:65:3C:21:87:16:BD:C2:29:2B:07:BF:46
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/SM90LiH91VtlPCGHFr3CKSsHv0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.223.0/24
Signature Algorithm: sha256WithRSAEncryption
30:23:d5:17:f9:7b:f0:f5:32:ad:ef:cd:b2:de:0d:37:30:55:
e5:5d:26:25:ea:dc:0f:a9:a5:80:44:6b:83:3b:48:0e:1c:df:
fd:a2:d4:ac:40:cd:37:03:6c:25:6f:c2:11:d3:80:d6:0e:eb:
e5:38:64:ae:03:39:55:58:04:d3:76:1c:7b:96:fd:f4:20:1e:
de:1b:2e:2d:95:8a:f0:81:26:44:52:73:11:9a:42:32:3e:b1:
a4:b6:8f:85:42:c2:cd:aa:7c:ee:a9:64:31:c4:aa:e5:89:cc:
dd:a6:08:c2:f0:1b:99:cc:61:e8:c8:56:a8:ff:5f:c2:8d:4c:
90:a2:60:52:f3:0c:37:e4:57:5e:be:14:14:78:ec:44:8a:6d:
1d:b0:25:ad:df:25:d8:79:97:49:dc:95:ac:97:61:13:08:28:
0e:b6:1b:2f:ce:b5:fe:eb:48:96:49:a1:1a:1b:4b:36:31:0b:
07:43:a5:7a:45:fa:42:1c:49:fe:02:a5:1a:24:ac:7a:12:09:
e0:5d:81:d6:c0:15:31:cb:86:e5:21:0b:af:21:9b:0d:14:2d:
61:1a:e6:70:4c:21:51:bf:ee:46:72:03:76:f9:aa:07:4b:1e:
05:64:1c:ad:4c:15:dc:49:3e:19:0c:32:3f:8a:fe:1c:12:06:
15:24:3e:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaByLrsT20ojs7yzbnJbuGV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1
Njg2ODYwHhcNMjYwOTA1MTUyNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGNmNzQyZTIxZmRkNTViNjUzYzIxODcxNmJkYzIyOTJiMDdiZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh1yYu0msbyVdq47t35G6Toq8juY
ExrSila0iqnIzeXzVI4INqWaZYw/L/Qc8YdAJvmEqiixwOdb54oAFcQl5EU7ItEZ
lim/i6Fxi4orr2VoqPq5oqKyl0JCsqpjiiUrMvulkz5tPZ5kdI2H06ZtBmF6Ok/W
n2Yf680Prp9bQq/bnGEg6c7PIVBrjERkofgBOy/5Svb+ZqR7B7kv59GMK2piHNFW
wYWBcpdjePmO0J4DI6/aH/uzjMM/+G1t8jl/6mP8WedRg3XSKpKNPyu3+1adE8aT
C/8vMKifcVDVam8mWB73duFSkzbE50ZRlQML0Qvh+1OmaVbRA7erfviiywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjPdC4h/dVbZTwhhxa9wikrB79GMB8GA1UdIwQY
MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt
ZGQ1ZGRkMDVkYjBiLzEvU005MExpSDkxVnRsUENHSEZyM0NLU3NIdjBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi
LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUbfMA0G
CSqGSIb3DQEBCwUAA4IBAQAwI9UX+Xvw9TKt782y3g03MFXlXSYl6twPqaWARGuD
O0gOHN/9otSsQM03A2wlb8IR04DWDuvlOGSuAzlVWATTdhx7lv30IB7eGy4tlYrw
gSZEUnMRmkIyPrGkto+FQsLNqnzuqWQxxKrliczdpgjC8BuZzGHoyFao/1/CjUyQ
omBS8ww35FdevhQUeOxEim0dsCWt3yXYeZdJ3JWsl2ETCCgOthsvzrX+60iWSaEa
G0s2MQsHQ6V6RfpCHEn+AqUaJKx6EgngXYHWwBUxy4blIQuvIZsNFC1hGuZwTCFR
v+5GcgN2+aoHSx4FZBytTBXcST4ZDDI/iv4cEgYVJD4G
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:44 2026 by rpki-client