Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/sIwtMgSLwoMidXac2nJ71qi4_js.roa
File: sIwtMgSLwoMidXac2nJ71qi4_js.roa (raw, json)
Hash identifier: zMSbXlEzGzEvRSISFMw5oU4Wqz6Z/skGDxHBRIE6e+8=
Subject key identifier: B0:8C:2D:32:04:8B:C2:83:22:75:76:9C:DA:72:7B:D6:A8:B8:FE:3B
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 01A020CAF78AD52D8D074B5B3B46F027D5BF
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/sIwtMgSLwoMidXac2nJ71qi4_js.roa
Signing time: Thu 20 Aug 2026 20:09:27 +0000
ROA not before: Thu 20 Aug 2026 20:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210659
IP address blocks: 202.181.204.0/24 maxlen: 24
2a13:d8c4:30::/44 maxlen: 48
2a13:d8c4:70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:ca:f7:8a:d5:2d:8d:07:4b:5b:3b:46:f0:27:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Aug 20 20:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b08c2d32048bc2832275769cda727bd6a8b8fe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:e6:fb:e8:d5:da:71:60:07:4f:0d:c9:54:
94:92:22:45:1f:df:48:8e:5d:ff:c1:0e:3c:c3:78:
94:82:8b:10:51:6d:d1:93:6c:ef:af:64:2f:79:12:
2d:a5:bb:60:c7:9a:4f:05:76:79:64:b0:df:f2:6a:
5f:12:69:86:0a:a9:90:d4:4e:ae:3a:79:93:2e:f3:
67:b3:12:66:77:af:41:bb:94:e5:a2:e5:72:58:b7:
59:de:19:43:cf:08:a0:cc:4f:e8:a2:94:8b:c0:b1:
b1:13:e8:0f:e0:4a:85:0c:67:e2:c9:e1:c9:fe:72:
52:e0:3e:19:e7:f2:ff:47:bb:22:f3:6b:38:d7:2c:
e8:ae:da:82:2e:3d:4a:8d:6f:49:9b:04:f6:c2:98:
70:7e:64:b0:f0:76:ae:e3:2d:d0:80:fc:16:6c:f1:
9f:d2:b0:5b:1e:8f:e3:e1:1e:df:ec:10:8d:db:73:
dc:cc:9b:da:ec:3a:78:e7:68:20:0b:6c:20:ef:a5:
01:30:7a:53:7c:2a:98:9e:35:41:02:e7:b1:5f:5e:
4b:e2:dd:6a:43:3f:79:1a:1a:a2:d3:f4:11:0f:be:
f9:ab:d0:4a:0e:e0:fc:4a:aa:53:7b:f4:0e:17:31:
27:14:f4:2d:23:ba:53:76:f8:f1:df:98:b2:53:f4:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:2D:32:04:8B:C2:83:22:75:76:9C:DA:72:7B:D6:A8:B8:FE:3B
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/sIwtMgSLwoMidXac2nJ71qi4_js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.181.204.0/24
IPv6:
2a13:d8c4:30::/44
2a13:d8c4:70::/44
Signature Algorithm: sha256WithRSAEncryption
8a:e5:52:26:5c:80:fd:92:04:49:6e:b2:8c:2a:07:2b:94:77:
f4:65:95:a4:34:4c:e6:74:c7:cc:4f:fe:2a:d9:ae:28:ea:03:
25:f2:69:68:3e:85:6e:0d:1b:ad:c3:6a:84:e9:62:bb:a9:ae:
3c:2d:55:cc:ac:a9:7f:1f:b9:e8:de:68:53:17:e8:c1:98:2f:
8d:2a:64:35:9b:65:f5:22:fd:51:42:dd:77:ee:c2:73:7b:9d:
60:64:3b:ff:84:a1:8c:a1:da:c6:37:7e:50:33:1b:20:de:a7:
77:db:d9:45:e8:a0:01:f7:26:c4:c5:77:a1:d3:aa:85:25:89:
b4:75:b6:0e:94:92:f7:66:ed:72:f2:09:1b:d7:dc:7b:01:07:
65:b6:31:43:d1:c4:81:fd:0e:15:c5:4d:7c:6e:45:a7:67:31:
f3:74:17:07:c4:b6:82:b0:22:61:3b:af:81:91:14:91:0d:ea:
e9:90:07:88:83:03:06:9c:62:e7:6c:2d:ef:57:f1:30:41:4e:
33:ae:ed:8a:ea:28:dd:41:ab:be:d8:dd:54:d7:f3:80:f4:88:
10:ff:7a:45:f0:7f:c9:24:85:24:34:e0:f7:32:af:56:72:91:
af:56:38:be:f2:d8:66:2c:78:f8:96:d9:e2:fa:8c:df:61:57:
39:63:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 09:39:12 2026 by rpki-client