Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/SqdW3wEJdQI6pSiu6sKuLSekouM.roa
File: SqdW3wEJdQI6pSiu6sKuLSekouM.roa (raw, json)
Hash identifier: rTImG/VwG887tYh4ok8g2ubTFK65bX66Ir6rONB+lXc=
Subject key identifier: 4A:A7:56:DF:01:09:75:02:3A:A5:28:AE:EA:C2:AE:2D:27:A4:A2:E3
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019FEC41506FF7BDDAC8C6F2E32A3159CD9F
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/SqdW3wEJdQI6pSiu6sKuLSekouM.roa
Signing time: Mon 10 Aug 2026 15:18:51 +0000
ROA not before: Mon 10 Aug 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219275
IP address blocks: 194.152.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:41:50:6f:f7:bd:da:c8:c6:f2:e3:2a:31:59:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Aug 10 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4aa756df010975023aa528aeeac2ae2d27a4a2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:a8:7f:c2:ad:90:bf:d2:90:5f:46:11:c1:
4e:56:11:ec:d4:8b:03:4f:07:cb:ab:c6:82:ca:84:
3b:5a:de:91:22:16:76:61:8a:58:b5:86:5d:16:0e:
5b:de:16:d9:e3:dd:db:d8:30:9f:bf:bc:a0:b4:61:
47:0e:d5:fe:80:31:4b:a5:69:8d:06:ed:4c:76:7b:
9a:79:92:f2:1e:1f:42:c9:5f:d1:0e:4b:ed:8c:cc:
32:1f:9f:aa:81:ba:d3:fc:05:29:20:1a:45:12:ed:
4e:2b:a2:75:a4:99:bf:08:0b:d8:74:65:0f:26:8e:
55:8e:5c:95:77:0c:4a:38:6c:36:42:35:6a:62:16:
e0:ec:03:99:6e:6f:e7:c8:df:9c:ea:07:61:13:a1:
74:b6:25:20:b0:9b:7e:81:80:10:4a:7a:e4:1d:f8:
a3:be:f3:31:2c:71:dd:c8:6c:39:25:ef:33:8d:57:
9d:50:88:d5:7f:52:a0:dc:c7:0a:7c:0f:2f:d6:42:
bf:89:89:04:27:9a:5f:4a:4e:09:fd:dd:90:fa:8d:
75:33:fd:2f:14:15:be:e9:5b:eb:fe:3d:cf:63:d5:
74:84:ee:e4:90:7a:78:fb:99:f1:51:48:0a:1d:5b:
d2:8c:f5:40:3a:a8:be:41:88:d3:ad:fe:a8:db:45:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:56:DF:01:09:75:02:3A:A5:28:AE:EA:C2:AE:2D:27:A4:A2:E3
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/SqdW3wEJdQI6pSiu6sKuLSekouM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.137.0/24
Signature Algorithm: sha256WithRSAEncryption
53:8c:6d:b1:2c:fb:0a:38:bb:10:5f:e8:d6:d4:ac:72:72:99:
7d:7e:99:a4:2d:18:a9:73:8d:96:ef:d0:fd:44:cd:b6:b3:30:
d4:5e:78:06:7e:f1:a4:01:2c:5d:47:27:a7:86:fe:51:68:ed:
49:7c:5f:b9:fa:b3:49:b7:cd:4d:0a:e8:0d:68:3f:9e:68:e9:
1e:d7:5f:8e:25:9f:76:06:ac:55:d1:db:58:2d:2e:c3:5f:a3:
8b:58:55:e3:ce:e9:5b:ed:26:29:bb:a2:af:9f:ac:a9:5a:f4:
6a:36:75:af:21:5e:6a:58:9a:79:55:79:a2:d5:d5:79:62:75:
af:4c:38:e0:7e:d5:c4:9e:33:92:0e:8d:a3:a0:97:2d:7f:ea:
ba:3f:c1:d9:e9:98:e9:5b:65:b3:ce:7d:13:92:47:80:23:15:
b7:82:03:ed:bf:de:fa:64:51:b0:51:eb:a2:82:e2:c6:5e:0d:
fe:47:3b:72:90:77:6f:c5:2f:94:da:ac:bf:e6:e6:66:26:a1:
eb:1e:38:89:90:23:8d:47:33:b7:b1:16:eb:65:b1:44:2b:55:
46:33:c1:f1:53:66:5f:ff:63:1c:b8:bc:70:30:c5:3c:b1:1b:
7c:5d:9e:0a:ff:8c:51:cd:a0:0c:4e:2d:e1:cd:d5:c5:5c:53:
0d:03:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:42 2026 by rpki-client