Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/sSzoGmb0IFEri5laX7ARsRI2Hbo.roa
File: sSzoGmb0IFEri5laX7ARsRI2Hbo.roa (raw, json)
Hash identifier: 0+biMH822AYWrPm5wB07sipoafcSiFO4oU1D1H9G5sg=
Subject key identifier: B1:2C:E8:1A:66:F4:20:51:2B:8B:99:5A:5F:B0:11:B1:12:36:1D:BA
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789D6CA02FB92005231F48A2D43AE66D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/sSzoGmb0IFEri5laX7ARsRI2Hbo.roa
Signing time: Mon 26 Oct 2026 14:29:05 +0000
ROA not before: Mon 26 Oct 2026 14:29:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9d:6c:a0:2f:b9:20:05:23:1f:48:a2:d4:3a:e6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:29:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b12ce81a66f420512b8b995a5fb011b112361dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:98:db:17:7f:3d:2a:0e:29:0e:e2:f5:ac:
62:a1:41:93:6d:0b:06:4a:a3:69:ed:50:d0:ee:75:
dd:82:a4:52:ee:a7:2e:7d:30:73:c9:11:75:13:58:
19:db:8b:d1:bb:4e:b6:a5:9c:af:03:15:b3:96:18:
6d:d0:6e:1b:e8:4d:03:43:87:69:1c:2c:1e:63:c6:
f1:36:2b:8f:af:21:75:d4:b6:55:01:f9:70:d1:4b:
ff:15:f7:ec:cb:c7:e5:97:b2:66:c6:b7:73:94:5b:
d1:8c:11:23:ea:30:dc:4b:8c:3d:12:73:8f:3e:3a:
41:66:17:3a:a6:eb:ec:d2:d1:f3:a1:c1:7b:cc:5b:
7a:ba:0e:77:6b:67:7a:a3:6a:73:7f:b5:a6:8b:11:
fa:a1:9b:9a:8c:bd:87:c1:4a:7e:c2:37:17:2e:2b:
e5:0e:47:4e:87:b7:23:0f:8c:cf:89:af:68:d2:6d:
84:23:34:be:d8:38:77:fd:53:cf:51:52:58:ba:24:
0a:30:a8:11:0e:90:88:85:7b:ff:43:db:2c:58:71:
08:26:a7:3b:95:1d:fb:77:16:ba:ff:bb:34:05:d2:
77:ff:70:e7:e7:76:6a:3f:4a:6f:ae:57:b8:73:48:
3c:84:08:e4:32:95:4f:7d:8d:da:b7:c9:bf:0a:c9:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:E8:1A:66:F4:20:51:2B:8B:99:5A:5F:B0:11:B1:12:36:1D:BA
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/sSzoGmb0IFEri5laX7ARsRI2Hbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3f:21:18:e7:0a:d9:5c:8f:1a:7c:15:4a:ad:b6:ae:ed:40:
88:1f:b4:1b:74:9d:86:38:f0:6f:3f:1c:b8:f4:37:a4:ef:19:
b7:8f:6f:b9:53:50:43:32:3b:a4:b9:6d:48:fe:7b:3a:c3:8e:
69:ae:d6:cc:91:f8:6b:05:05:3d:33:7c:c4:1d:33:32:4e:c6:
96:a4:6c:dd:fe:df:e9:4f:7e:f3:ac:f3:de:74:63:5e:47:d0:
09:9e:e0:d8:62:99:f7:f9:f9:67:57:f7:a0:95:96:86:9f:38:
e7:7b:13:33:da:34:a6:d0:43:3f:c4:80:71:2f:c2:3a:39:8a:
f2:c3:74:8d:01:da:56:92:73:ad:04:7d:b1:80:10:2e:be:e2:
5f:79:c4:16:33:92:ef:93:3e:d6:70:1c:62:bc:c6:11:27:02:
03:72:4f:54:74:3c:b0:f8:ca:cd:e6:9a:cf:ca:53:85:d7:cb:
bb:81:a3:bc:9c:52:2c:de:61:b4:54:09:b9:0f:ee:13:e9:51:
8d:9d:64:5a:b7:2c:b8:a1:05:d4:28:af:b7:ab:78:42:db:9b:
01:80:eb:cd:c1:50:a1:7c:e9:ad:fb:6d:54:3a:ab:35:40:bf:
0c:dd:f4:b7:48:0c:3b:03:9b:05:12:50:4d:e2:89:13:b8:6f:
59:1a:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:44 2026 by rpki-client