Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SjUP2abbSuOluHC3kxLXXNfHaD8.roa
File: SjUP2abbSuOluHC3kxLXXNfHaD8.roa (raw, json)
Hash identifier: Gk1fTUmie4WBaAgpxX2YKloIxEKVXeRqqqO6dinwnhs=
Subject key identifier: 4A:35:0F:D9:A6:DB:4A:E3:A5:B8:70:B7:93:12:D7:5C:D7:C7:68:3F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D06B70420162B082F295E301F67CF27
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SjUP2abbSuOluHC3kxLXXNfHaD8.roa
Signing time: Mon 02 Nov 2026 16:10:25 +0000
ROA not before: Mon 02 Nov 2026 16:10:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 201.58.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:06:b7:04:20:16:2b:08:2f:29:5e:30:1f:67:cf:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 16:10:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a350fd9a6db4ae3a5b870b79312d75cd7c7683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:80:7f:9f:4f:d0:6e:4a:c9:89:da:6b:9c:
6e:bf:8f:8f:70:f9:5f:23:eb:43:74:90:84:d1:ba:
0d:0f:ea:2a:2d:1b:57:91:8b:51:64:b3:7b:41:3c:
d5:2d:c7:da:b9:ed:5c:15:c4:2a:8d:ab:97:c3:1a:
eb:8c:fc:e6:64:25:ff:bb:7b:c6:56:44:e1:6f:b4:
1c:30:26:55:0b:eb:1f:d7:ae:07:d7:33:e2:3a:c4:
ca:fc:b1:b7:c0:2d:04:9e:40:df:31:f8:9a:81:fd:
50:99:cc:1f:4e:d8:e7:d4:38:d4:ec:55:23:38:6e:
b4:ae:d4:bd:e4:9f:61:5a:6e:46:5a:85:2d:21:65:
67:dc:75:3e:fe:ed:53:33:11:1e:8a:74:9f:25:a3:
e0:60:6c:3c:6a:5b:35:95:a3:c8:f5:1c:d4:36:1b:
f6:c8:38:17:a7:b4:43:dc:67:10:67:56:13:50:75:
1a:ae:20:c2:b8:fa:13:12:33:96:3b:f7:c7:56:6c:
28:f1:42:52:c7:9f:d1:2c:7e:79:66:28:4f:cf:57:
09:fe:43:d8:73:c0:2b:90:59:d3:67:6b:15:e0:0f:
72:d4:55:07:48:d8:9a:61:e6:41:3d:33:02:3b:8b:
39:e0:f3:e0:72:17:b3:33:3b:2d:ca:44:3b:19:4e:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:0F:D9:A6:DB:4A:E3:A5:B8:70:B7:93:12:D7:5C:D7:C7:68:3F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SjUP2abbSuOluHC3kxLXXNfHaD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.58.131.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ee:d7:6c:f5:82:0e:8c:cb:7e:de:51:ab:d9:63:33:4a:2f:
98:00:02:3e:3e:6a:06:c8:0b:5e:ad:c4:7f:52:53:eb:04:22:
b6:c7:f0:83:38:84:c8:fb:ca:e7:a6:41:52:a5:2b:d8:fb:cf:
ed:b5:65:f8:d0:70:fc:5e:f9:fa:09:e9:e9:1e:d4:ae:a4:d2:
73:91:41:ff:da:72:2a:22:93:d8:61:a9:34:e1:88:03:ae:75:
a1:19:01:dc:a0:4c:4b:0f:78:88:3f:c9:d5:fa:7d:80:23:bd:
2a:08:a8:58:c7:8b:02:d8:76:c1:71:78:d4:9c:a4:0b:00:a9:
c8:0b:f2:28:b1:4f:03:5d:db:64:3a:36:b5:92:e3:9f:d9:a8:
e1:81:07:a4:4b:af:9e:54:c9:e3:5e:2c:55:a0:81:4c:20:8d:
ed:6c:cc:5d:70:b4:1c:23:50:b4:58:0a:21:1a:b6:28:89:93:
e8:b4:f3:88:4a:d4:d5:dc:88:2f:19:f7:4e:ae:a5:a3:29:a9:
71:4c:a9:fc:22:47:11:37:e4:79:3c:1b:c7:15:64:ea:f0:96:
c5:9c:ef:e0:d9:41:71:bd:70:60:70:21:a3:1b:39:f3:dd:63:
ad:7b:69:f4:14:c6:c3:16:fa:b5:05:29:f6:0a:da:aa:ec:38:
b1:16:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:47 2026 by rpki-client