Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/SNfUmvo9gx0Hj-JIlZR7sTnFtr8.roa
File: SNfUmvo9gx0Hj-JIlZR7sTnFtr8.roa (raw, json)
Hash identifier: bEueUt0KeZkVFHBGPAC+SWmZ1lXgE8wtxEC97wabMR0=
Subject key identifier: 48:D7:D4:9A:FA:3D:83:1D:07:8F:E2:48:95:94:7B:B1:39:C5:B6:BF
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01A1963EE1C272056525AEFEC740DE78809E
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/SNfUmvo9gx0Hj-JIlZR7sTnFtr8.roa
Signing time: Sun 01 Nov 2026 08:34:25 +0000
ROA not before: Sun 01 Nov 2026 08:34:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203217
IP address blocks: 185.117.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:3e:e1:c2:72:05:65:25:ae:fe:c7:40:de:78:80:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Nov 1 08:34:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48d7d49afa3d831d078fe24895947bb139c5b6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:75:1c:11:ea:7f:85:51:b4:7b:35:6c:8e:
93:ec:9b:ce:a6:bd:b0:85:6f:e5:a8:c3:4b:aa:b3:
4b:4b:b4:95:30:6b:9e:5f:35:3a:75:2f:33:a3:a0:
61:ae:a0:f1:d3:12:e8:19:2d:4b:a0:3b:ee:17:d0:
9a:c9:21:b1:7d:8e:c0:74:2f:df:89:f5:5a:3d:50:
be:23:6c:43:5e:e0:cf:12:0c:bd:d1:2c:8b:4e:d4:
11:22:37:66:b3:97:13:57:04:a7:2b:af:13:1f:cf:
a6:8d:71:84:81:14:9e:6f:17:b2:7c:33:2e:19:eb:
b4:fa:5e:72:4b:3c:06:07:bb:32:1e:9f:ce:c5:89:
3a:06:e8:a2:3e:61:8e:8a:81:55:c0:8c:bd:6d:30:
89:12:07:76:c5:9f:fb:a8:ea:bc:84:35:2a:8f:f0:
cf:54:eb:0c:46:6c:98:e0:5e:48:64:af:d9:e2:4a:
58:e5:e8:a5:ee:61:ab:ad:fe:56:32:b9:62:74:bf:
4a:b5:f7:17:05:73:2f:63:d1:b6:57:21:ba:c8:0e:
37:cc:30:1e:ec:f8:33:a4:d4:ca:44:b5:87:b9:86:
11:4a:c2:ec:d3:05:bf:8f:f5:9c:8a:a6:dc:80:12:
fa:87:2a:bb:29:35:5c:8c:11:31:15:74:44:c2:30:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:D4:9A:FA:3D:83:1D:07:8F:E2:48:95:94:7B:B1:39:C5:B6:BF
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/SNfUmvo9gx0Hj-JIlZR7sTnFtr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9c:90:72:6c:9b:de:b6:42:b8:a4:d7:f2:16:54:a9:a0:3f:
67:9d:30:6c:5d:5e:ea:34:89:5e:29:57:a1:c6:41:3c:7a:81:
d9:e4:b7:27:03:7d:52:2e:64:cf:b4:04:9b:ef:36:0a:f6:c1:
54:87:95:63:a3:88:f3:fa:cd:db:38:01:4b:47:00:45:5b:fe:
85:bd:18:fe:db:65:6d:4e:87:8d:e1:ac:8c:61:47:ff:5d:b2:
27:ba:10:a1:54:c6:9e:d9:2b:de:16:c9:eb:b4:95:0b:36:a4:
72:36:ab:f2:2e:15:c8:a1:dd:99:98:d3:75:89:83:ea:fa:2c:
39:4a:e5:60:64:ba:33:5d:d5:a1:62:a9:23:03:0a:42:fb:7d:
c8:08:d3:c9:a2:71:3f:c4:01:6a:f2:9b:1d:0f:5a:c5:19:13:
54:9c:af:aa:c2:e7:b9:1f:ff:eb:4f:e4:33:e2:7f:0a:6d:d8:
2b:48:00:be:ba:e2:fe:22:11:57:73:e6:da:a8:4f:9a:99:59:
7f:3a:a6:f2:14:58:71:30:4d:98:77:27:f8:09:63:f9:34:c6:
75:47:3f:4e:80:d6:c3:7d:4a:43:1a:e0:bc:c2:00:e1:1e:87:
f0:52:ec:db:2d:f3:17:3d:26:a4:2b:9f:92:c3:75:15:ae:4f:
1c:eb:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:15:53 2026 by rpki-client