Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/315Sro9qdF6X15vXhhg2OVvQLCA.roa
File: 315Sro9qdF6X15vXhhg2OVvQLCA.roa (raw, json)
Hash identifier: U6AFycBTrVpjiEoTt1Y5vnVNNV4EAqE/mSLqh12NuQ8=
Subject key identifier: DF:5E:52:AE:8F:6A:74:5E:97:D7:9B:D7:86:18:36:39:5B:D0:2C:20
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A057B4AC0E9BDB50AFF281873DD7FF710E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/315Sro9qdF6X15vXhhg2OVvQLCA.roa
Signing time: Mon 31 Aug 2026 12:04:13 +0000
ROA not before: Mon 31 Aug 2026 12:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50066
IP address blocks: 194.14.0.0/24 maxlen: 24
194.14.246.0/24 maxlen: 24
194.14.247.0/24 maxlen: 24
194.68.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:b4:ac:0e:9b:db:50:af:f2:81:87:3d:d7:ff:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 31 12:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df5e52ae8f6a745e97d79bd7861836395bd02c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7b:44:2d:d9:65:a5:c9:78:0b:f6:c1:ad:7b:
d2:a7:b6:c0:07:a2:0b:d8:03:df:39:e1:46:21:29:
81:9c:2e:dc:62:ce:50:a9:c7:ad:62:ca:d4:13:da:
5c:88:38:8f:e1:17:f7:7e:8f:e6:44:73:72:b0:e1:
ed:b6:57:cd:f3:15:ad:27:8f:f0:f4:e2:0e:d9:7d:
61:26:81:2f:7b:d7:25:0b:dd:b3:28:4b:7c:00:35:
8e:7f:ad:7e:7f:3a:5d:10:df:5f:a3:96:3e:f8:0f:
49:49:15:ec:8f:80:52:62:db:c7:63:97:2d:e3:8a:
7e:5f:4d:3b:a9:1d:4f:5d:0a:64:cd:48:3e:24:b4:
03:cf:29:1a:a9:e7:ca:fc:5b:d0:ab:e4:20:58:91:
a6:ee:f1:a6:0e:75:12:8b:f4:68:03:b0:3a:86:6d:
f4:4a:fb:80:d3:57:5d:32:ad:cf:44:06:51:b8:72:
0e:6c:d5:32:da:9f:73:38:37:87:16:17:d6:2b:5d:
b6:13:2d:89:fa:4f:5d:c7:81:ed:c7:9b:b1:95:0b:
39:30:e1:0f:65:3e:3c:d8:0c:f9:3e:61:c9:59:4e:
3a:c1:0c:6a:b2:17:ed:03:2b:74:2d:51:00:51:8d:
d1:67:04:09:86:d4:b4:d7:92:ba:9a:ab:96:e4:c6:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:52:AE:8F:6A:74:5E:97:D7:9B:D7:86:18:36:39:5B:D0:2C:20
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/315Sro9qdF6X15vXhhg2OVvQLCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.0.0/24
194.14.246.0/23
194.68.0.0/24
Signature Algorithm: sha256WithRSAEncryption
77:23:f0:cb:1f:a2:5e:db:bd:4c:da:ab:a6:f3:70:2b:0d:67:
77:1a:4a:91:28:5a:0c:61:70:45:45:29:fc:cb:96:47:89:46:
27:51:98:85:44:9a:7c:2d:e0:ba:61:4b:03:59:e9:10:0b:c6:
e1:9f:0c:e9:41:f4:fb:35:d4:1d:1a:66:e9:6e:1c:0b:5e:1b:
29:59:b9:54:b0:6e:cc:f5:40:7a:e2:44:6a:64:de:3b:c7:97:
8c:f9:43:68:65:75:01:0d:dd:93:99:31:29:2f:6d:f2:05:3a:
c6:64:11:7c:78:fb:a2:e3:7a:fb:72:0a:94:79:85:87:09:b7:
02:5e:22:d0:fc:00:60:8c:ae:11:0b:e6:13:db:84:5e:e3:38:
41:23:f6:94:c1:64:6f:04:4c:8e:16:28:3c:88:11:50:62:ae:
77:be:e1:60:cc:24:de:72:8f:71:b5:ed:5d:bc:7c:e0:2e:c2:
25:36:81:64:89:f9:9f:72:03:ce:19:08:c0:78:e6:e8:da:d9:
53:e5:76:a0:60:02:17:a2:19:e3:2f:2d:53:77:cd:59:84:5e:
4a:a0:eb:81:d0:50:3b:fe:83:a3:9f:15:d7:59:bc:d1:53:62:
a6:29:bd:3f:15:d8:84:4d:a1:74:da:f2:f3:2c:c6:1a:fb:48:
1b:38:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:32 2026 by rpki-client