Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa
File: sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa (raw, json)
Hash identifier: 7+WO1NdpHvda7ZiRwxhmc9q1DRZhsi2qaxRrJ7/628M=
Subject key identifier: B2:0B:43:F1:46:05:F5:A4:72:DA:1B:CB:BC:C6:5E:AB:F0:CB:F3:20
Certificate issuer: /CN=52c68385c020be581f59d6347576eb7b05c86bcd
Certificate serial: 019F2368713244D6F15016924D462024BF58
Authority key identifier: 52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 192.108.32.0/24 maxlen: 24
193.25.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:71:32:44:d6:f1:50:16:92:4d:46:20:24:bf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c68385c020be581f59d6347576eb7b05c86bcd
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b20b43f14605f5a472da1bcbbcc65eabf0cbf320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:ac:c2:2e:74:fb:6c:f3:b0:e1:f9:ef:e3:
e6:30:09:16:9a:af:97:7d:9d:6b:c9:00:0f:e2:d8:
a5:07:13:98:0f:8d:63:4a:5e:3c:12:cf:a6:a4:50:
88:c2:f7:c6:56:81:80:2f:fa:d4:01:ee:0d:7b:89:
7e:c3:a0:3c:0b:1b:1c:25:d0:1a:b3:df:59:d6:fb:
93:c2:13:e0:5f:3d:b7:70:22:14:c8:e5:01:91:5c:
de:d0:cd:52:2e:52:44:57:a9:40:77:ad:c4:25:8c:
7d:8f:00:41:64:75:78:8f:12:11:7d:f0:97:9d:a9:
fb:cf:44:e8:a4:fc:47:c2:ad:e2:85:09:84:5c:f2:
3d:65:16:9a:f1:33:1a:f1:17:df:20:89:4d:0e:c8:
cb:7d:bf:74:14:04:1c:6e:21:4e:bd:f1:35:02:f6:
7c:c5:c8:57:94:7f:45:87:2e:15:22:92:03:7f:44:
92:3d:c0:b4:f0:9a:44:f4:0d:0c:98:55:8b:4f:d8:
38:b8:8d:3e:d6:55:7b:bf:82:55:77:a5:91:36:cc:
0d:8b:a7:62:31:c7:89:0f:39:97:c8:43:1c:f1:d5:
e1:8a:27:15:fc:65:b8:81:79:1b:eb:64:5d:e8:7c:
bb:1d:8c:ce:c5:20:34:7f:67:28:7e:65:9f:14:ff:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:43:F1:46:05:F5:A4:72:DA:1B:CB:BC:C6:5E:AB:F0:CB:F3:20
X509v3 Authority Key Identifier:
keyid:52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.32.0/24
193.25.32.0/20
Signature Algorithm: sha256WithRSAEncryption
51:f0:20:fb:98:ef:e4:ff:02:c5:77:8e:54:2b:61:d6:c9:36:
19:b1:e3:ca:08:64:92:d4:60:8d:87:31:af:68:99:2d:2d:35:
0f:c0:a9:1d:a1:1a:ca:67:4a:8f:89:8d:2f:b4:54:63:c2:70:
7a:2a:08:59:76:18:f6:01:8d:1f:81:b2:69:35:91:86:21:23:
c2:bf:6d:4f:92:65:96:b8:55:a3:1e:0e:21:0b:8d:11:96:b3:
82:20:14:d8:60:4a:05:e3:8f:52:9b:fc:fd:bf:ab:fc:1a:26:
96:c0:6b:f3:40:4f:1d:2d:36:0e:a7:89:57:a7:da:ca:08:f0:
98:3b:3d:3c:8c:45:25:d3:b2:ae:57:a6:6a:f9:41:a5:2f:82:
e4:51:0d:1d:bd:79:04:80:77:ef:46:8a:3c:08:d2:9b:5e:fe:
6a:85:28:0f:a5:dc:8c:cc:1d:f2:5c:20:87:50:6e:d1:e9:5b:
31:fb:52:a7:d1:c3:94:34:06:9e:4b:84:06:d9:bb:f7:10:9e:
89:bf:89:0f:ac:cc:fe:e5:ed:4b:f9:4d:7f:12:d8:c8:32:1e:
b4:dc:aa:02:47:98:9b:f4:b5:16:18:f5:d5:7e:e1:bb:fd:7d:
89:f8:cc:4b:2b:1c:ee:08:f5:4e:a4:da:c0:80:1f:18:54:af:
5f:8f:4c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:52 2026 by rpki-client