Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SLSMQo99u24Epa9sZ-35n9YwQ1g.roa
File: SLSMQo99u24Epa9sZ-35n9YwQ1g.roa (raw, json)
Hash identifier: XooSTwMO75gSa1IEA9BRq8RFfpIDKjq4YYrz5/hOOfU=
Subject key identifier: 48:B4:8C:42:8F:7D:BB:6E:04:A5:AF:6C:67:ED:F9:9F:D6:30:43:58
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A16E4F30C78CC96D602BFE6B93AC048F2A
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SLSMQo99u24Epa9sZ-35n9YwQ1g.roa
Signing time: Sat 24 Oct 2026 14:27:25 +0000
ROA not before: Sat 24 Oct 2026 14:27:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219472
IP address blocks: 87.236.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:4f:30:c7:8c:c9:6d:60:2b:fe:6b:93:ac:04:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 24 14:27:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48b48c428f7dbb6e04a5af6c67edf99fd6304358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:87:d8:84:7e:cd:d6:8f:96:06:78:24:fd:
38:8f:b5:0c:8b:d6:02:fc:16:06:3f:37:26:35:be:
e3:05:01:bf:21:d2:1c:ba:5f:25:84:9c:3b:b2:b2:
e5:63:ac:f0:f1:7d:46:62:87:c0:6f:58:4e:e2:b3:
07:1e:61:f7:c7:69:75:dd:26:2e:7c:a8:c1:82:f0:
3f:d4:b4:50:e1:ed:52:19:70:fd:28:93:76:f6:45:
7a:87:97:ed:89:02:aa:dd:ed:bf:52:c4:77:3c:64:
3f:0b:c8:de:6b:e2:b5:53:50:a4:79:39:73:96:fd:
7a:fa:69:ea:bc:22:a2:c9:6e:59:bf:94:3c:86:73:
2d:9c:ea:ce:ab:28:d9:61:d0:3e:27:49:ed:1f:3a:
3c:5d:6f:79:63:da:38:e0:42:7c:a1:19:ad:f8:13:
87:fb:34:16:1c:f8:8c:81:ab:fb:ac:24:28:8a:d5:
cc:05:4a:d7:e6:16:c4:ed:74:77:07:de:e1:8f:20:
22:b6:9b:1a:9e:3f:ba:51:da:9f:59:f7:ad:09:92:
12:55:93:c3:77:2c:4f:ea:37:73:df:e2:d6:b4:f6:
f0:1f:d6:aa:09:65:64:6f:8f:45:4d:2e:a0:4d:0b:
ea:47:f3:31:bd:ac:27:17:1c:d4:6a:06:d8:f6:7d:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B4:8C:42:8F:7D:BB:6E:04:A5:AF:6C:67:ED:F9:9F:D6:30:43:58
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SLSMQo99u24Epa9sZ-35n9YwQ1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
75:44:ec:77:b8:14:4a:11:0c:a7:54:f6:b3:af:d6:59:80:07:
34:22:be:a1:1d:16:c5:21:29:fa:da:05:25:bb:1c:f7:07:ae:
94:ba:ff:5a:6a:ef:ea:40:db:6d:7f:c4:6d:bf:5e:7e:63:b2:
0a:09:d0:39:64:c7:87:dd:8d:c5:6e:c6:89:4f:cb:6c:cf:6c:
36:ff:24:90:53:d5:0e:6e:e0:69:d1:79:44:3d:d0:d6:99:ad:
6e:7a:60:ae:2e:9d:3b:3a:18:54:3b:0d:5c:3f:fe:8d:46:07:
8d:b9:39:29:92:58:fa:f5:7f:be:8c:ad:64:f4:91:fb:6a:ab:
e9:38:71:05:22:a6:f3:b5:b3:f3:3e:08:45:be:1e:af:3e:36:
be:09:58:2c:4b:eb:cd:ec:65:f0:08:05:48:10:e1:53:ff:d4:
93:98:c0:a6:0b:93:23:87:1f:56:a1:f2:c4:49:67:eb:22:2b:
84:81:69:67:3d:fc:0a:05:41:9a:b3:b9:d6:f3:1e:01:43:04:
10:cd:92:f2:aa:0a:89:fb:01:8a:91:02:8f:47:c5:40:0d:80:
cd:7f:c2:e1:76:1b:67:a1:8a:32:85:95:2c:24:47:7d:15:ba:
45:64:1e:ce:37:42:ec:a7:a6:ac:34:dd:48:4d:4f:c1:ed:b3:
56:3f:41:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFuTzDHjMltYCv+a5OsBI8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYxMDI0MTQyNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGI0OGM0MjhmN2RiYjZlMDRhNWFmNmM2N2VkZjk5ZmQ2MzA0MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIeH2IR+zdaPlgZ4JP04j7UMi9YC
/BYGPzcmNb7jBQG/IdIcul8lhJw7srLlY6zw8X1GYofAb1hO4rMHHmH3x2l13SYu
fKjBgvA/1LRQ4e1SGXD9KJN29kV6h5ftiQKq3e2/UsR3PGQ/C8jea+K1U1CkeTlz
lv16+mnqvCKiyW5Zv5Q8hnMtnOrOqyjZYdA+J0ntHzo8XW95Y9o44EJ8oRmt+BOH
+zQWHPiMgav7rCQoitXMBUrX5hbE7XR3B97hjyAitpsanj+6UdqfWfetCZISVZPD
dyxP6jdz3+LWtPbwH9aqCWVkb49FTS6gTQvqR/MxvawnFxzUagbY9n2tlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEi0jEKPfbtuBKWvbGft+Z/WMENYMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvU0xTTVFvOTl1MjRFcGE5c1otMzVuOVl3UTFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+wmMA0G
CSqGSIb3DQEBCwUAA4IBAQB1ROx3uBRKEQynVPazr9ZZgAc0Ir6hHRbFISn62gUl
uxz3B66Uuv9aau/qQNttf8Rtv15+Y7IKCdA5ZMeH3Y3FbsaJT8tsz2w2/ySQU9UO
buBp0XlEPdDWma1uemCuLp07OhhUOw1cP/6NRgeNuTkpklj69X++jK1k9JH7aqvp
OHEFIqbztbPzPghFvh6vPja+CVgsS+vN7GXwCAVIEOFT/9STmMCmC5Mjhx9WofLE
SWfrIiuEgWlnPfwKBUGas7nW8x4BQwQQzZLyqgqJ+wGKkQKPR8VADYDNf8Lhdhtn
oYoyhZUsJEd9FbpFZB7ON0Lsp6asNN1ITU/B7bNWP0GS
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:03 2026 by rpki-client