Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SPTf9DRZiWlTG1KyilzLN8Holew.roa
File: SPTf9DRZiWlTG1KyilzLN8Holew.roa (raw, json)
Hash identifier: YQxgIr/RB29Wxn7k0d9F3Tbs4Jjh6C6Eo5PpiLRDHoA=
Subject key identifier: 48:F4:DF:F4:34:59:89:69:53:1B:52:B2:8A:5C:CB:37:C1:E8:95:EC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16326281635BC6758D36479547D3043DF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SPTf9DRZiWlTG1KyilzLN8Holew.roa
Signing time: Thu 22 Oct 2026 10:26:47 +0000
ROA not before: Thu 22 Oct 2026 10:26:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201160
IP address blocks: 194.62.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:26:28:16:35:bc:67:58:d3:64:79:54:7d:30:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:26:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48f4dff434598969531b52b28a5ccb37c1e895ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:c8:60:a1:9d:82:8b:02:c8:c9:dd:20:62:
04:bc:34:74:eb:bf:c6:04:2e:bd:24:f5:56:cb:6b:
bd:e6:cd:ff:12:92:24:ed:87:8d:fd:4f:db:93:28:
11:26:8d:a0:da:a0:ab:bb:08:0f:b8:f6:d4:c7:eb:
da:0d:f9:5d:c2:19:10:cf:a2:78:78:d1:ce:76:cf:
3d:9c:31:9d:69:64:b5:66:3f:f6:32:8e:85:98:f5:
a7:3e:63:50:50:68:6c:e7:a2:58:11:f6:64:eb:88:
99:e4:02:ca:5e:45:80:70:15:1f:1f:8f:19:54:ce:
97:f4:0a:29:18:12:ea:5b:7b:9d:38:79:18:fc:3e:
60:c6:98:c0:4a:3e:4c:c9:b5:6b:03:4f:7d:2a:1a:
c6:a0:98:e8:27:96:89:d8:e5:c4:28:85:13:1f:a0:
7c:4e:8a:83:da:61:63:20:f5:20:b4:f8:89:04:8a:
7b:b0:1c:ad:62:95:c5:8c:bb:d0:3b:ba:81:15:88:
62:31:24:b0:a7:0d:50:89:0b:16:6d:c8:7a:7a:a9:
60:bb:c1:d5:d5:20:f2:d3:81:e8:40:02:87:6d:61:
8b:4e:8c:87:2c:7d:ab:5b:d0:88:05:6c:56:35:69:
41:9e:1a:63:eb:a0:7d:35:a1:8f:41:1c:56:f1:d1:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:DF:F4:34:59:89:69:53:1B:52:B2:8A:5C:CB:37:C1:E8:95:EC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SPTf9DRZiWlTG1KyilzLN8Holew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.53.0/24
Signature Algorithm: sha256WithRSAEncryption
04:39:06:d1:a3:da:95:d0:29:0f:bf:c5:24:40:12:6d:ac:1d:
5a:ca:43:e7:35:9f:3f:a1:a7:c7:1b:06:59:4f:7e:e8:e4:d3:
f0:22:c2:6a:a8:b1:76:62:32:de:4e:2f:e7:68:30:b9:0e:1d:
2b:51:9e:e7:8a:a5:d6:62:16:ba:5e:e4:41:72:0a:5f:a1:9f:
16:fb:d1:6b:1d:9b:b2:2f:da:b2:15:37:1a:d9:ec:34:ba:78:
04:78:22:30:e9:f9:44:84:15:c0:c5:80:d9:ec:11:79:ce:64:
a7:1e:8e:09:b7:08:72:7d:3c:1b:7d:4f:db:b9:d5:84:38:1b:
a3:0a:d8:33:7f:37:27:84:59:a7:ef:9a:93:7c:f2:76:d7:61:
0f:e2:61:2d:8a:f0:c1:5f:46:88:37:dc:21:c9:08:fa:18:c5:
bc:b0:0c:c5:60:ca:a9:a6:b1:fe:17:21:2c:c6:12:dc:c4:e3:
9e:54:73:10:14:fb:67:7b:75:bd:f6:cd:a2:c7:26:39:91:6e:
77:1a:31:fb:11:28:05:3c:0c:70:7c:5c:a4:aa:70:85:a0:25:
82:8d:6b:94:54:fe:87:60:e4:60:2f:2e:11:68:7a:58:6d:fb:
5f:b8:5c:77:bb:f0:73:00:20:45:20:c5:5f:0d:b1:17:d5:6f:
ff:8b:8a:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFjJigWNbxnWNNkeVR9MEPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYxMDIyMTAyNjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGY0ZGZmNDM0NTk4OTY5NTMxYjUyYjI4YTVjY2IzN2MxZTg5NWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t/IYKGdgosCyMndIGIEvDR067/G
BC69JPVWy2u95s3/EpIk7YeN/U/bkygRJo2g2qCruwgPuPbUx+vaDfldwhkQz6J4
eNHOds89nDGdaWS1Zj/2Mo6FmPWnPmNQUGhs56JYEfZk64iZ5ALKXkWAcBUfH48Z
VM6X9AopGBLqW3udOHkY/D5gxpjASj5MybVrA099KhrGoJjoJ5aJ2OXEKIUTH6B8
ToqD2mFjIPUgtPiJBIp7sBytYpXFjLvQO7qBFYhiMSSwpw1QiQsWbch6eqlgu8HV
1SDy04HoQAKHbWGLToyHLH2rW9CIBWxWNWlBnhpj66B9NaGPQRxW8dErMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEj03/Q0WYlpUxtSsopcyzfB6JXsMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU1BUZjlEUlppV2xURzFLeWlsekxOOEhvbGV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj41MA0G
CSqGSIb3DQEBCwUAA4IBAQAEOQbRo9qV0CkPv8UkQBJtrB1aykPnNZ8/oafHGwZZ
T37o5NPwIsJqqLF2YjLeTi/naDC5Dh0rUZ7niqXWYha6XuRBcgpfoZ8W+9FrHZuy
L9qyFTca2ew0ungEeCIw6flEhBXAxYDZ7BF5zmSnHo4JtwhyfTwbfU/budWEOBuj
CtgzfzcnhFmn75qTfPJ212EP4mEtivDBX0aIN9whyQj6GMW8sAzFYMqpprH+FyEs
xhLcxOOeVHMQFPtne3W99s2ixyY5kW53GjH7ESgFPAxwfFykqnCFoCWCjWuUVP6H
YORgLy4RaHpYbftfuFx3u/BzACBFIMVfDbEX1W//i4qe
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:56 2026 by rpki-client