Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/svzCPtJ_Y3m9AyVp7hkA53WhSO8.roa
File: svzCPtJ_Y3m9AyVp7hkA53WhSO8.roa (raw, json)
Hash identifier: A+aTrRICJ1trNaeeAH0idbYQjHa/sT3eD3TFBht/fL8=
Subject key identifier: B2:FC:C2:3E:D2:7F:63:79:BD:03:25:69:EE:19:00:E7:75:A1:48:EF
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019FC32BD05B964330BDD907836E53FD93CE
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/svzCPtJ_Y3m9AyVp7hkA53WhSO8.roa
Signing time: Sun 02 Aug 2026 15:50:56 +0000
ROA not before: Sun 02 Aug 2026 15:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 200.169.188.0/22 maxlen: 32
201.24.60.0/22 maxlen: 32
201.34.156.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:2b:d0:5b:96:43:30:bd:d9:07:83:6e:53:fd:93:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Aug 2 15:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2fcc23ed27f6379bd032569ee1900e775a148ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:a4:c7:95:a1:ba:fc:ff:31:81:d9:55:aa:
ef:8d:9c:56:bc:d7:25:81:82:06:27:96:18:d3:3a:
27:68:f9:bd:61:80:31:52:b6:fb:35:9a:17:0a:b9:
ba:97:a7:13:3a:5f:d9:53:2d:e5:99:49:f8:34:57:
21:90:a7:32:94:03:de:c0:53:b7:4e:56:92:d4:49:
c4:6c:2f:a1:a6:9b:16:9c:bf:d3:cd:02:6b:5b:b9:
d0:9f:df:e3:a4:48:15:17:24:af:e7:eb:99:87:0a:
64:c3:9f:d7:85:a8:e9:76:0f:3c:e7:bc:80:db:ef:
3e:f1:12:06:59:30:39:e3:f3:74:67:a9:5e:2b:06:
1c:2c:dd:c1:39:2b:6a:bc:ec:75:13:c6:99:f8:b3:
d1:f4:4f:a1:d3:a7:6b:36:4f:1a:71:23:84:f1:12:
c0:49:84:6e:d4:ce:de:06:72:12:b6:89:39:1f:8f:
76:bd:d3:d4:8e:00:ee:7b:64:a3:d5:55:c2:fe:9c:
5d:15:21:1f:4d:77:82:e9:37:f9:64:09:32:d9:78:
3c:a3:e3:16:ae:79:96:24:58:fb:1d:44:5e:3f:61:
67:53:bc:9f:27:90:73:65:a4:10:b0:4b:95:4e:9c:
a6:e7:53:27:a1:69:44:b1:0d:86:24:32:86:38:93:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FC:C2:3E:D2:7F:63:79:BD:03:25:69:EE:19:00:E7:75:A1:48:EF
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/svzCPtJ_Y3m9AyVp7hkA53WhSO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.169.188.0/22
201.24.60.0/22
201.34.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:a5:60:c8:e8:13:4b:4e:39:0a:d1:fc:09:fc:95:6e:5f:0b:
b0:2c:a4:c3:51:7a:b3:00:2c:ea:1b:8d:22:9c:58:e8:1c:e2:
cf:e1:b0:98:fc:15:6b:d4:1e:f7:07:32:15:2d:76:60:1b:d4:
fd:46:0a:f8:94:a9:03:b8:a4:98:ae:0e:de:54:c5:ba:21:a1:
40:18:ac:f8:b1:8c:79:64:8a:d6:33:d2:fa:e3:e4:ed:e8:59:
4b:9d:2e:17:7a:67:c5:ba:b4:8d:44:44:12:0d:5b:16:d0:71:
44:1b:f3:76:a2:9e:5d:02:a0:5c:c5:17:29:22:ae:59:1d:14:
a2:b7:22:d6:d5:92:f9:0e:e5:1a:dc:fe:70:99:4d:85:46:03:
20:20:4e:f3:35:b1:1b:bd:1a:54:6a:33:b6:59:2a:07:14:bd:
2a:2e:96:9b:37:51:83:99:61:b0:63:cf:39:2c:5c:bc:23:b8:
8b:d9:02:49:47:f2:23:5b:cb:02:74:a0:3f:57:4a:16:0d:1c:
86:46:52:b6:a0:7c:19:0b:70:37:32:56:30:64:15:7e:71:3b:
21:42:87:52:50:43:ca:5e:41:b9:32:a5:f7:17:5d:0d:ca:be:
3b:78:e3:89:18:bf:12:ab:84:e4:95:69:10:04:4b:02:e1:92:
9e:7a:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:06:51 2026 by rpki-client