Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/san03MW_yrvtTZ5RG8pcpizHiFQ.roa
File: san03MW_yrvtTZ5RG8pcpizHiFQ.roa (raw, json)
Hash identifier: ywDnnu4W5OluQ5gSRGQwnztNVRHXgjKITaTHt+hlqlc=
Subject key identifier: B1:A9:F4:DC:C5:BF:CA:BB:ED:4D:9E:51:1B:CA:5C:A6:2C:C7:88:54
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A17D795445A9B1BD6DA939A1049D993012
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/san03MW_yrvtTZ5RG8pcpizHiFQ.roa
Signing time: Tue 27 Oct 2026 13:07:45 +0000
ROA not before: Tue 27 Oct 2026 13:07:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:79:54:45:a9:b1:bd:6d:a9:39:a1:04:9d:99:30:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 27 13:07:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1a9f4dcc5bfcabbed4d9e511bca5ca62cc78854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:08:50:87:5a:38:9f:f7:45:36:b9:2a:23:
28:88:b0:16:a2:22:6c:bd:db:2a:a8:7c:57:a6:84:
f5:f5:05:4a:3a:68:c6:31:b6:dc:48:6d:26:bb:ea:
ef:cc:8b:ab:dc:01:1f:14:61:d1:c2:6b:fc:aa:e2:
37:e1:56:63:03:7f:6f:3d:7f:7f:fd:5a:b5:6e:74:
30:d4:32:ab:b2:58:9c:3d:65:1e:22:3b:59:d0:e1:
b9:02:d5:cd:e5:98:87:20:ed:4e:9b:48:d9:32:78:
59:e0:df:8b:5a:e2:31:1f:4c:0f:94:a9:f1:04:c2:
dc:ab:00:0d:03:e9:19:cc:3d:f6:e6:37:af:88:15:
9d:05:7f:24:86:e0:79:87:52:f9:10:39:21:56:f2:
35:98:34:a6:fc:6c:c0:f5:30:4c:de:07:27:96:0c:
02:70:8d:6d:72:2a:78:47:67:fc:b5:f6:03:66:1b:
db:93:08:0d:84:5e:fe:25:c3:3f:5a:52:c0:42:e7:
b3:1a:01:b4:f3:d0:81:61:30:17:ee:20:b4:2d:b3:
c1:46:af:20:da:68:b1:10:7d:f6:b6:dc:19:e5:79:
e0:38:20:7d:31:10:d7:d9:f5:dd:ed:fa:d9:af:59:
15:bf:a5:96:61:1d:18:bf:1b:be:f0:3c:86:71:66:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:F4:DC:C5:BF:CA:BB:ED:4D:9E:51:1B:CA:5C:A6:2C:C7:88:54
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/san03MW_yrvtTZ5RG8pcpizHiFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:46:0c:89:59:57:46:25:1b:70:41:07:20:a9:8c:04:0f:28:
8c:ea:19:23:c2:b8:33:ef:e6:64:92:f2:9c:24:6f:7a:7c:92:
22:c8:9e:cb:2e:7d:f5:3f:a8:d2:4c:1e:ee:3b:d0:95:3c:45:
45:08:eb:8c:06:44:d9:a9:e0:1d:2c:43:17:74:4e:b8:0e:3d:
55:74:8b:6c:8b:aa:dd:ec:3f:29:f0:95:b3:32:69:6c:d0:80:
0a:23:6b:37:82:9c:9b:72:f0:1b:fb:ae:db:a0:34:16:df:81:
8c:83:3e:a6:6c:5a:5f:26:2a:92:7a:d9:d6:80:4f:4a:5a:b1:
12:86:f5:9f:d5:db:ec:3f:23:2e:67:31:d9:ee:72:6d:fa:79:
07:d7:96:24:5d:f7:74:e6:15:76:32:c9:9a:30:c8:ce:4c:a9:
17:12:a8:ff:e0:30:16:61:31:33:f2:42:43:ae:56:d9:65:db:
b8:fc:bd:5b:98:43:62:98:b0:73:53:56:d8:68:0b:6f:7c:3f:
47:32:6b:a6:32:e0:90:f4:73:7e:34:fe:0a:36:a2:a4:c7:6b:
63:d5:51:e5:89:74:29:c6:b3:46:0d:00:1b:dd:b5:49:27:e9:
77:34:ca:ae:e9:35:85:4a:41:6a:8b:c6:3d:71:97:86:91:3c:
3e:7e:dd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 23:47:16 2026 by rpki-client