Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SICqctuob7LKpjHMHlTL9BKMXF0.roa
File: SICqctuob7LKpjHMHlTL9BKMXF0.roa (raw, json)
Hash identifier: YxXg8B/+U9HgCgcJlh6pzSviIU9e9c6Wth+N8tKmuIM=
Subject key identifier: 48:80:AA:72:DB:A8:6F:B2:CA:A6:31:CC:1E:54:CB:F4:12:8C:5C:5D
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01A0187FDD172CBC6C2C7E6ADDCD9560FD5F
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SICqctuob7LKpjHMHlTL9BKMXF0.roa
Signing time: Wed 19 Aug 2026 05:30:27 +0000
ROA not before: Wed 19 Aug 2026 05:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44947
IP address blocks: 89.46.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:7f:dd:17:2c:bc:6c:2c:7e:6a:dd:cd:95:60:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Aug 19 05:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4880aa72dba86fb2caa631cc1e54cbf4128c5c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:8b:8c:75:88:fc:83:a3:95:2f:be:0d:fe:
e3:47:a4:11:cd:6c:b9:7a:b9:12:5b:d2:36:78:c2:
0e:83:0d:32:ee:7d:d7:74:5a:07:cc:ee:a8:46:88:
f4:87:66:d9:a4:44:07:a2:8f:b1:65:2f:77:39:53:
39:66:79:45:32:49:b2:ff:36:26:51:f5:c9:f6:d4:
35:9b:c5:2c:8a:35:b8:20:0b:5f:c1:77:81:5b:0c:
a2:f4:76:60:6c:f7:f7:46:11:bf:4e:83:03:64:4d:
fc:0b:81:fd:64:ad:6d:b6:36:c6:33:ca:22:cf:cc:
f7:f9:9d:db:d8:34:e8:94:7a:f3:e0:98:1e:c3:ed:
07:db:17:3f:7f:cc:40:61:8a:a0:25:11:0c:e4:7b:
6f:c1:4f:31:30:68:f1:02:e1:08:e5:cd:95:2e:ef:
b2:c7:64:c7:1b:1c:28:fb:5f:f3:24:04:e1:d4:df:
41:fd:27:9b:f8:9e:ad:4a:92:af:fc:70:de:a7:11:
0d:b2:3a:01:5a:32:6c:fe:f8:4a:2e:4f:af:0d:31:
be:63:59:d7:0b:eb:58:11:82:f1:b4:72:c9:55:f8:
8b:09:c3:00:27:8d:3a:41:a5:06:05:fc:4a:1d:59:
63:9d:48:63:5f:d7:89:df:86:19:42:23:7a:9b:f5:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:80:AA:72:DB:A8:6F:B2:CA:A6:31:CC:1E:54:CB:F4:12:8C:5C:5D
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SICqctuob7LKpjHMHlTL9BKMXF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.26.0/24
Signature Algorithm: sha256WithRSAEncryption
56:25:4e:8a:8a:b9:05:0c:94:26:02:31:2d:03:2b:90:44:8e:
65:35:66:79:67:1f:7d:94:18:0c:51:2e:40:72:05:03:56:35:
3f:e0:85:d1:eb:f9:43:47:b3:6c:16:23:37:01:de:89:da:94:
a0:c8:09:6a:c4:a3:db:d0:51:dc:03:43:7e:d9:df:2b:28:0f:
9a:e6:5b:0d:3a:bf:ac:f4:48:d6:5c:d7:0c:c3:06:55:33:de:
91:85:d2:21:16:0f:df:bc:68:bf:13:b3:14:d0:04:df:a7:d4:
bb:74:3a:c0:99:1d:93:5b:bf:4d:67:24:aa:42:a1:8a:97:e1:
f8:7b:02:cb:82:07:b2:c5:54:b5:93:ae:ff:25:2c:57:e9:e4:
76:40:f5:cc:1c:69:fa:7b:56:63:4e:ad:c2:9b:e9:d9:35:28:
8c:c2:7b:15:a6:85:f0:28:e4:4e:34:54:d2:37:22:e5:b7:f7:
b1:54:c3:7b:b9:48:76:53:a5:ae:d7:78:21:a7:1e:b9:44:9f:
e6:9e:5e:b7:a1:4a:f6:66:e6:14:2f:21:65:f0:8d:ba:3b:b6:
8e:ee:49:ad:b0:93:98:02:1d:01:e2:df:03:fc:6f:fd:c6:7f:
b6:e6:93:3b:43:e8:70:51:38:19:c0:fb:15:0b:a3:9f:10:87:
89:7c:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:03:05 2026 by rpki-client