Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/smLWrNVdnQXtj7nGE7oSMC17OSY.roa
File: smLWrNVdnQXtj7nGE7oSMC17OSY.roa (raw, json)
Hash identifier: 2gna9VdCLwGyL73TZbhQeXefvHaphCa0KxWv5nHt9zk=
Subject key identifier: B2:62:D6:AC:D5:5D:9D:05:ED:8F:B9:C6:13:BA:12:30:2D:7B:39:26
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019FB6F80523CD63D446444BC90456D25057
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/smLWrNVdnQXtj7nGE7oSMC17OSY.roa
Signing time: Fri 31 Jul 2026 06:58:55 +0000
ROA not before: Fri 31 Jul 2026 06:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219285
IP address blocks: 195.250.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:f8:05:23:cd:63:d4:46:44:4b:c9:04:56:d2:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jul 31 06:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b262d6acd55d9d05ed8fb9c613ba12302d7b3926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:91:9a:93:34:f6:50:bd:86:ca:aa:c3:dc:
16:50:57:6a:44:81:7f:0c:47:cf:c5:3f:f1:9c:15:
3c:d0:be:e5:85:42:9b:65:9b:d1:f9:38:3c:9b:78:
0c:a2:5e:ef:40:7e:71:96:18:e5:e0:eb:7b:08:95:
3a:57:25:e9:e9:c6:76:7e:10:d7:ba:28:28:a1:73:
d0:71:ba:5b:4b:18:d7:1e:90:1f:9a:29:76:53:3f:
13:1e:ed:32:70:1a:64:5b:64:13:8d:b4:14:f1:35:
f6:02:0f:7c:59:e5:d7:a1:55:62:e0:25:c4:b4:07:
37:31:72:49:c7:18:75:a3:d2:15:6e:25:61:35:39:
91:8b:b4:91:df:ad:47:9d:a8:56:e7:a7:b9:ee:2a:
94:1a:38:f5:7a:35:9c:b0:16:88:58:6d:2f:82:86:
49:b1:26:b1:cf:ef:43:94:f3:da:33:8a:16:9b:7e:
6a:75:9f:b1:cc:af:ab:18:01:43:04:9a:ed:7b:2e:
5c:23:c8:1e:a9:e0:53:34:72:fc:39:b3:11:3b:22:
30:88:7b:7e:ab:ab:3b:6d:8e:ef:09:9f:cf:af:a2:
0e:fa:9f:7b:5c:88:1c:11:fb:bd:68:1d:7d:f5:0e:
79:bd:60:c6:50:f3:f6:e8:44:dc:61:98:14:d0:87:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:62:D6:AC:D5:5D:9D:05:ED:8F:B9:C6:13:BA:12:30:2D:7B:39:26
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/smLWrNVdnQXtj7nGE7oSMC17OSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.192.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fa:4b:d1:1c:71:07:df:d9:74:a1:8f:cd:14:4e:7b:d6:2b:
52:ab:eb:93:81:e7:fc:06:96:eb:d3:0f:22:00:04:d3:52:1f:
fe:07:cc:fc:6b:80:73:28:01:1c:f8:f1:fa:c1:d5:ee:54:e0:
7e:44:8a:7a:08:fc:46:42:fd:32:c3:57:7c:05:4f:54:a7:1e:
b7:35:9b:d5:89:59:b3:38:36:2f:f7:e4:13:ae:b2:3d:dd:0e:
ae:40:e1:4e:c1:97:13:7f:ea:73:e1:b0:ed:61:ef:1c:c7:df:
7c:46:3e:24:ad:c5:a1:cc:e6:d0:8d:8e:b6:8c:a6:5c:f3:01:
1f:5a:79:0c:65:bf:5f:af:8e:8d:c5:e1:51:95:ad:c5:4f:b7:
7d:a5:1e:ed:90:00:f1:f5:9f:e7:75:0d:2f:46:c4:68:bb:a5:
ff:b2:0c:69:b2:23:54:32:d4:29:b8:5f:f5:98:a9:93:dc:6b:
ee:f8:57:9b:12:e8:12:3a:80:7b:65:d3:ce:a0:e1:57:2b:e0:
52:74:ca:d7:cf:a4:21:11:0c:a7:d2:e8:6a:60:81:ad:eb:a0:
83:06:8b:bd:57:77:e0:ab:25:6b:26:c0:63:c4:0a:4f:47:74:
42:a8:e7:c6:d0:40:dc:26:1d:1d:12:4f:7b:f2:fa:b4:ac:6a:
d1:11:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:48 2026 by rpki-client