Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/sh4ZSUR-5SDhUeZisyReZWvEfTo.roa
File: sh4ZSUR-5SDhUeZisyReZWvEfTo.roa (raw, json)
Hash identifier: xfSoANu4z2LgPyZVkUEPA/lKj2d027Ah6/QFRa7bqzQ=
Subject key identifier: B2:1E:19:49:44:7E:E5:20:E1:51:E6:62:B3:24:5E:65:6B:C4:7D:3A
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F46A55467606F795632578386BEBC674C
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/sh4ZSUR-5SDhUeZisyReZWvEfTo.roa
Signing time: Thu 09 Jul 2026 11:31:07 +0000
ROA not before: Thu 09 Jul 2026 11:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a10:fa81:d00::/40 maxlen: 48
2a10:fa86::/36 maxlen: 48
2a10:fa86:10::/44 maxlen: 48
2a10:fa86:3000::/36 maxlen: 48
2a10:fa86:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:a5:54:67:60:6f:79:56:32:57:83:86:be:bc:67:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 9 11:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b21e1949447ee520e151e662b3245e656bc47d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:59:b7:03:50:76:ff:10:68:3e:7d:23:2b:
8f:d0:14:af:f7:a6:ce:49:8b:f7:c0:3a:60:45:e5:
7c:a7:2e:da:f3:4d:40:f8:e5:ad:47:d5:c6:9f:19:
d3:af:16:8c:21:5f:75:6c:4e:ca:12:05:ca:dc:9e:
a2:a8:38:cd:62:d4:f2:82:07:07:f1:3b:a7:c1:a5:
dc:a8:ce:19:fe:e8:ce:a6:e8:5a:1a:10:4d:29:48:
7c:45:bd:b4:38:bc:e3:48:5f:01:c1:05:ec:cf:ca:
60:da:dd:23:11:07:f7:12:15:df:a9:db:37:79:5e:
91:73:8d:d5:14:44:65:ac:c8:06:4a:c5:ab:00:13:
1e:5d:7c:8d:2a:5d:76:32:4d:55:e8:40:45:67:58:
d2:87:d4:f5:7b:c8:20:e6:96:d6:d0:51:73:4b:80:
2c:79:99:53:2d:65:e7:2d:b6:33:b9:a5:6d:da:ee:
8e:92:cf:bd:92:89:b4:b4:1c:8f:d4:27:60:38:27:
bd:45:d7:1e:6f:af:8a:f7:3e:ed:d2:18:9e:18:be:
4a:e7:9e:d3:fc:2b:bf:97:f4:20:c2:6e:d0:9b:90:
4f:ce:2f:c2:c7:5b:4e:4f:91:9f:6d:ce:5d:8e:73:
22:4d:24:35:d3:30:df:f8:af:34:5c:23:8b:3b:eb:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1E:19:49:44:7E:E5:20:E1:51:E6:62:B3:24:5E:65:6B:C4:7D:3A
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/sh4ZSUR-5SDhUeZisyReZWvEfTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:d00::/40
2a10:fa86::/36
2a10:fa86:3000::-2a10:fa86:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
53:d7:cb:63:a5:c0:7c:b7:b8:11:c9:00:b4:99:e1:12:9f:26:
3d:ed:79:2e:f2:b0:6f:11:ff:4e:43:09:c2:23:6d:c4:a4:36:
93:19:25:49:0a:1c:5a:e8:ef:e7:17:7c:19:3c:e7:71:c9:2e:
9c:d9:30:ee:70:93:e0:89:51:7b:ca:3d:60:19:02:d3:a9:8d:
ed:84:b7:65:09:4e:f8:bd:ec:6c:55:d7:63:3b:b4:50:c6:ee:
57:c2:66:74:95:db:16:2a:51:a0:38:aa:cd:c0:13:10:ea:6d:
92:8a:bb:2c:fa:cd:3c:98:95:fe:b6:16:57:e7:12:0f:d5:a1:
df:d9:86:e1:d3:92:f0:db:5b:dc:6b:36:d1:16:5e:f4:19:f2:
5f:38:a4:0c:b5:fc:89:c9:40:81:5f:db:e1:ee:b9:af:25:69:
be:f9:a9:68:0c:be:55:ec:08:93:74:4e:37:1f:07:59:48:8b:
94:60:9d:42:6e:d2:15:9d:51:c8:b0:24:4f:29:da:c2:86:3d:
0a:ce:c3:57:b3:80:24:68:c5:a7:cd:db:2f:80:03:b2:d9:5e:
25:29:eb:54:41:f4:3b:f7:ff:fd:f0:95:9e:8b:f1:72:ec:31:
22:d5:87:84:1a:15:d3:12:3c:0b:3d:ab:ce:4d:37:b0:0c:b9:
69:a5:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:49 2026 by rpki-client