Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/smMdv_-HUKB9o1SN60BqNTKIRKY.roa
File: smMdv_-HUKB9o1SN60BqNTKIRKY.roa (raw, json)
Hash identifier: ozUtLx+Ca1FQOeVoLfIOrLVvfNRiDbVizsQUikzvOg4=
Subject key identifier: B2:63:1D:BF:FF:87:50:A0:7D:A3:54:8D:EB:40:6A:35:32:88:44:A6
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 01A13E8CD4D16871C91E82BECC7E9F2E0372
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/smMdv_-HUKB9o1SN60BqNTKIRKY.roa
Signing time: Thu 15 Oct 2026 07:52:59 +0000
ROA not before: Thu 15 Oct 2026 07:52:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 95.215.202.0/23 maxlen: 23
185.208.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:8c:d4:d1:68:71:c9:1e:82:be:cc:7e:9f:2e:03:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Oct 15 07:52:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2631dbfff8750a07da3548deb406a35328844a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:1c:89:e2:65:ee:11:61:3e:64:7c:70:9c:
33:93:12:77:bc:32:bb:7d:a7:22:22:6c:56:14:a9:
8d:bd:72:6e:1f:65:a3:b6:ae:e5:4a:98:3e:06:ec:
a8:f7:11:e6:61:7a:0f:3d:79:2e:a3:7d:df:fb:c4:
dc:41:12:32:39:da:3e:29:4c:f9:c4:99:a6:88:06:
b2:da:45:1e:d1:db:e2:77:69:38:4c:90:44:e0:f4:
fe:0b:18:bb:ee:2d:9a:35:e3:5a:02:39:e2:4a:b3:
24:63:eb:49:3b:64:d6:64:28:66:6c:80:9c:21:04:
36:b7:e3:6c:b2:27:3d:67:ce:93:1b:d0:6d:46:2d:
14:a2:16:56:78:92:da:c4:49:6f:57:3f:e9:99:cf:
f7:e4:4b:d9:9e:d9:a2:50:a4:c2:3d:7f:b5:88:c7:
f3:00:f9:01:18:4a:0d:d1:ea:4b:98:f4:19:bd:00:
19:98:46:c5:82:23:10:d8:ab:c8:5c:4e:3a:92:52:
29:0f:0d:23:38:83:93:94:75:f6:3e:87:51:f8:03:
3d:16:03:59:17:c5:c9:08:bc:ac:e7:fe:f8:4c:4e:
8c:37:20:3a:2b:47:a4:fd:76:c1:3c:8a:e4:01:80:
e1:e6:02:20:ea:64:1b:b4:e1:55:4d:68:59:4b:c8:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:1D:BF:FF:87:50:A0:7D:A3:54:8D:EB:40:6A:35:32:88:44:A6
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/smMdv_-HUKB9o1SN60BqNTKIRKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.202.0/23
185.208.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:70:36:c1:5a:dc:3c:31:d2:c5:2f:ee:08:f8:b4:de:79:b5:
43:a2:cb:e0:16:f8:cf:f2:5c:d6:6f:eb:89:62:c8:8e:5f:a7:
ba:71:24:b2:a5:c0:57:1b:ef:8f:3d:71:7f:9f:4b:bc:36:1d:
a7:a7:51:a5:13:62:40:89:4b:01:a8:75:a1:5f:9c:45:4a:df:
f0:0d:2f:18:4d:31:8b:71:34:79:45:1f:58:21:98:da:c8:55:
3c:c0:32:c6:38:a4:37:39:3d:af:c6:9c:23:97:5d:cd:52:e2:
42:1b:cf:4f:19:91:81:08:27:06:6e:91:86:a4:c1:50:9c:d6:
2d:f0:8f:70:a7:94:94:fb:e9:a2:08:0d:a6:f3:cd:e5:af:a8:
85:49:5a:bf:69:36:4c:32:80:6b:2d:37:b2:62:18:a3:de:7f:
98:59:65:87:25:70:c5:9b:6d:f3:f7:e2:e7:54:39:ff:53:2f:
b0:1e:af:08:ff:ec:ad:b7:9e:1b:ee:aa:85:d4:16:a1:7d:da:
f6:a5:84:8a:e3:f8:72:32:32:ec:f3:f9:e0:01:04:25:74:92:
00:c7:55:e1:ea:b5:1c:a9:ad:49:9c:f0:74:c0:9a:d7:b2:83:
39:79:fb:66:16:51:f7:fc:8e:2d:55:67:91:91:d4:3a:a5:ad:
bb:d9:1a:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE+jNTRaHHJHoK+zH6fLgNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4
ODBiZTAwHhcNMjYxMDE1MDc1MjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjYzMWRiZmZmODc1MGEwN2RhMzU0OGRlYjQwNmEzNTMyODg0NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4kcieJl7hFhPmR8cJwzkxJ3vDK7
faciImxWFKmNvXJuH2Wjtq7lSpg+Buyo9xHmYXoPPXkuo33f+8TcQRIyOdo+KUz5
xJmmiAay2kUe0dvid2k4TJBE4PT+Cxi77i2aNeNaAjniSrMkY+tJO2TWZChmbICc
IQQ2t+Nssic9Z86TG9BtRi0UohZWeJLaxElvVz/pmc/35EvZntmiUKTCPX+1iMfz
APkBGEoN0epLmPQZvQAZmEbFgiMQ2KvIXE46klIpDw0jOIOTlHX2PodR+AM9FgNZ
F8XJCLys5/74TE6MNyA6K0ek/XbBPIrkAYDh5gIg6mQbtOFVTWhZS8h4GQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLJjHb//h1CgfaNUjetAajUyiESmMB8GA1UdIwQY
MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt
ODdmNWI2NDc5ZDFlLzEvc21NZHZfLUhVS0I5bzFTTjYwQnFOVEtJUktZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl
LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBX9fKAwQA
udAKMA0GCSqGSIb3DQEBCwUAA4IBAQBscDbBWtw8MdLFL+4I+LTeebVDosvgFvjP
8lzWb+uJYsiOX6e6cSSypcBXG++PPXF/n0u8Nh2np1GlE2JAiUsBqHWhX5xFSt/w
DS8YTTGLcTR5RR9YIZjayFU8wDLGOKQ3OT2vxpwjl13NUuJCG89PGZGBCCcGbpGG
pMFQnNYt8I9wp5SU++miCA2m883lr6iFSVq/aTZMMoBrLTeyYhij3n+YWWWHJXDF
m23z9+LnVDn/Uy+wHq8I/+ytt54b7qqF1Bahfdr2pYSK4/hyMjLs8/ngAQQldJIA
x1Xh6rUcqa1JnPB0wJrXsoM5eftmFlH3/I4tVWeRkdQ6pa272Rqn
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:59:13 2026 by rpki-client