Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/SirBpcdRe0m-u_7kALpPCFiPrPs.roa
File: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (raw, json)
Hash identifier: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=
Subject key identifier: 4A:2A:C1:A5:C7:51:7B:49:BE:BB:FE:E4:00:BA:4F:08:58:8F:AC:FB
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F2369234AE8C321AD346B40DB377EE059
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/SirBpcdRe0m-u_7kALpPCFiPrPs.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213323
IP address blocks: 89.42.132.0/24 maxlen: 24
89.42.135.0/24 maxlen: 24
93.174.166.0/24 maxlen: 24
185.248.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:4a:e8:c3:21:ad:34:6b:40:db:37:7e:e0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a2ac1a5c7517b49bebbfee400ba4f08588facfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:8a:69:6a:fb:0b:a6:17:60:45:8d:0d:f3:
a8:ee:c8:69:d9:74:49:12:c0:58:2e:03:08:89:05:
51:8d:4c:d5:b8:1e:b1:28:d2:8d:b4:c3:85:44:a7:
5b:bb:79:d5:b6:ff:67:7d:19:73:fa:70:b6:df:58:
56:46:7e:f3:8f:3f:fa:73:71:ed:88:ce:19:bf:dc:
87:77:28:78:6f:6c:f9:f7:88:39:f4:9b:b7:76:37:
29:c9:c0:a6:7f:89:1f:e9:9f:74:5b:38:2b:20:09:
da:66:27:81:21:78:45:b6:bc:f4:22:11:24:a5:96:
af:00:6a:06:1e:bb:a7:15:35:d4:7b:83:78:26:56:
c8:a7:66:fd:94:9c:4e:13:85:4b:02:ac:14:7a:19:
ab:4a:fe:33:c3:52:06:42:e4:b4:68:75:2d:45:52:
de:55:91:99:c3:1b:36:88:2b:cf:59:61:cb:de:02:
1a:b5:a4:dd:61:cf:57:0a:a6:98:eb:7c:06:88:f4:
e1:9c:53:7d:20:1b:72:db:fb:7d:41:86:54:1d:c0:
20:18:48:86:b7:71:a2:5e:27:20:58:69:c5:4d:fc:
f5:65:2a:22:9a:8a:31:3d:94:be:2a:28:d1:04:5b:
86:f1:3f:9f:2d:0c:88:26:19:4f:da:51:3c:80:c8:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:C1:A5:C7:51:7B:49:BE:BB:FE:E4:00:BA:4F:08:58:8F:AC:FB
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/SirBpcdRe0m-u_7kALpPCFiPrPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.132.0/24
89.42.135.0/24
93.174.166.0/24
185.248.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b5:64:e1:ae:47:d5:10:14:de:8b:fc:2b:6a:ce:cc:c8:40:
ff:b4:fc:3e:8f:5c:c7:1e:ab:b5:38:0b:a6:2f:fa:43:f8:a5:
96:b5:43:67:2e:4a:b3:1f:2e:d9:49:7c:ef:72:70:ad:b6:53:
96:9b:82:f0:f1:c3:e9:8c:94:0a:d9:78:4c:5f:2f:e8:aa:26:
cd:05:54:90:e8:da:f9:c5:11:68:7d:9f:57:4e:f0:d6:ed:6c:
f1:e8:90:1b:18:54:8a:e2:fe:f3:f2:f5:f9:0e:09:5c:2d:f9:
90:f3:c5:fb:60:04:58:18:f7:ae:d8:37:87:f8:3a:8a:b0:6d:
07:34:af:9e:b7:65:92:5e:a6:4c:48:83:f6:19:bc:c1:4e:58:
0b:bf:7c:c5:07:0d:dc:30:99:7e:7a:1f:1e:cf:ca:b6:68:73:
16:ba:da:c3:f5:b0:8e:36:a3:7a:da:a1:ed:7a:47:1c:74:56:
4c:44:ba:ab:fd:99:78:10:f0:a8:ad:76:f3:29:13:d2:24:58:
9d:7f:c7:0e:34:c3:b4:95:51:7e:ec:23:8c:78:c5:0c:98:b0:
61:af:bb:e9:80:20:57:6b:d6:cb:db:b0:43:80:dd:4e:2d:9a:
86:7b:bf:0b:03:1e:d3:dc:40:a9:a2:12:37:0e:51:0d:65:10:
4a:e6:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:15:56 2026 by rpki-client