Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/SGt4LIgRb_9vbVoAOIvAW9nlHZ4.roa
File: SGt4LIgRb_9vbVoAOIvAW9nlHZ4.roa (raw, json)
Hash identifier: 5bXnb6ekS07UTfTODC8EOGgXyFaUiiVE4JtTA2fs4Ns=
Subject key identifier: 48:6B:78:2C:88:11:6F:FF:6F:6D:5A:00:38:8B:C0:5B:D9:E5:1D:9E
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 01A1675BBA99502979B580236FEF889E805B
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/SGt4LIgRb_9vbVoAOIvAW9nlHZ4.roa
Signing time: Fri 23 Oct 2026 06:03:47 +0000
ROA not before: Fri 23 Oct 2026 06:03:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196695
IP address blocks: 185.253.2.0/24 maxlen: 24
193.193.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:5b:ba:99:50:29:79:b5:80:23:6f:ef:88:9e:80:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Oct 23 06:03:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=486b782c88116fff6f6d5a00388bc05bd9e51d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:9b:82:f1:f6:a9:58:49:a3:13:a0:43:f4:
09:35:91:b3:f7:d8:00:7e:56:c1:2e:8a:4c:2e:d4:
ec:7b:bd:36:67:6f:89:cd:33:1d:a4:dc:ac:b8:9f:
d3:52:98:78:ee:4c:40:d2:97:3e:91:28:94:6d:37:
6a:72:54:d8:66:9d:11:3b:c8:58:46:60:7d:c7:d7:
77:ee:9f:b7:ce:8b:6b:51:b5:cf:43:27:0a:23:04:
81:1d:28:f5:cd:24:e0:c2:8e:f8:4d:a8:dc:6e:8e:
9c:48:b2:5f:ee:f0:d7:5a:27:68:4e:19:18:41:21:
29:ed:ac:43:7b:53:2c:c5:33:93:af:c8:f4:f1:17:
61:1a:4b:9d:bf:45:00:50:0d:d8:62:b3:55:6c:17:
c3:4d:e3:c4:79:42:bc:6a:f7:bd:75:b1:5a:60:c7:
76:d8:50:07:15:22:e8:a3:0e:b7:c2:41:17:35:ba:
21:22:20:98:b8:f0:04:8d:01:e7:0b:d7:60:e9:74:
e2:a4:4e:d5:4e:fe:04:55:7f:eb:de:3f:8b:da:ea:
96:df:93:4b:08:8a:c5:57:22:66:d7:01:d5:e8:15:
f0:b3:3b:0b:62:db:42:f8:2f:db:b6:01:54:65:cc:
7d:ab:a7:f1:ec:fe:9c:5e:2a:ba:50:2d:20:76:92:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6B:78:2C:88:11:6F:FF:6F:6D:5A:00:38:8B:C0:5B:D9:E5:1D:9E
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/SGt4LIgRb_9vbVoAOIvAW9nlHZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.2.0/24
193.193.160.0/24
Signature Algorithm: sha256WithRSAEncryption
96:33:f7:e8:25:4c:f0:80:e9:ad:54:f8:35:fc:a5:22:3b:38:
12:f5:23:5e:89:c3:5b:87:b0:f9:c4:3a:f8:ba:22:16:a9:f5:
e6:df:a3:2b:ab:1e:6f:ec:36:b5:e6:f9:57:7c:97:79:4d:36:
35:b4:1a:ea:1d:d2:d8:63:ec:3e:d9:65:e6:9a:38:f0:68:84:
8c:58:6e:f7:f8:8b:29:93:0c:d7:8c:2b:da:4a:5d:4e:5d:77:
9a:ef:ce:03:8f:88:de:45:51:f8:66:ca:f1:cb:9b:ee:b2:d8:
a8:5a:bb:94:4b:89:1f:c6:70:c5:c2:74:2c:85:6e:64:6f:92:
88:77:54:c5:5d:b8:96:58:a3:b5:93:7b:11:11:ee:e1:54:bd:
63:6e:43:c0:41:ee:4c:0e:3d:25:ff:1d:73:db:79:83:26:96:
17:3e:39:1a:29:db:0a:6e:a0:ff:1e:7d:13:51:b5:7b:af:8c:
38:aa:25:bc:f6:e8:d7:6c:c2:aa:65:5a:4e:89:44:27:48:bf:
b8:12:a4:eb:fe:8f:2a:dc:3e:6d:0e:63:41:5a:09:f0:83:89:
68:bc:8a:1f:a6:80:4a:37:13:48:2f:a0:cf:10:16:26:6a:56:
22:d4:fc:79:9b:3e:28:4a:e6:b8:eb:a5:b4:69:c3:0a:5d:e7:
dc:dc:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:37 2026 by rpki-client