Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SnSOXlVyl0s_2Nd6F0EOE3F8Kto.roa
File: SnSOXlVyl0s_2Nd6F0EOE3F8Kto.roa (raw, json)
Hash identifier: dLXnBdtYZzniT0cBzBu0FxxhXR6tQYPApx4aHe4R1HE=
Subject key identifier: 4A:74:8E:5E:55:72:97:4B:3F:D8:D7:7A:17:41:0E:13:71:7C:2A:DA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019E40F40F00718AA57AFC4CE461A8E42978
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SnSOXlVyl0s_2Nd6F0EOE3F8Kto.roa
Signing time: Tue 19 May 2026 15:56:36 +0000
ROA not before: Tue 19 May 2026 15:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 103.102.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:f4:0f:00:71:8a:a5:7a:fc:4c:e4:61:a8:e4:29:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 19 15:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a748e5e5572974b3fd8d77a17410e13717c2ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:66:f8:7d:38:e0:47:d3:c7:65:20:94:89:
e6:35:10:55:54:20:64:9d:1a:6c:70:95:00:a4:b3:
10:5c:f5:e9:46:f4:97:e6:21:ca:49:f1:ac:ec:ca:
e7:30:83:1c:9d:5a:61:ce:bf:56:cb:11:a5:b7:38:
5d:85:04:0e:e9:b9:4f:b0:43:d6:a1:f3:1a:64:ee:
8a:61:99:62:3d:4e:d5:76:88:af:c3:b5:53:8d:b0:
09:a5:52:9a:ad:c2:ef:df:3f:6c:1b:42:13:08:d6:
38:1a:de:4c:98:d1:96:18:92:c7:54:c9:dc:17:31:
22:db:de:51:41:2e:1f:56:c0:3f:df:b9:5f:63:a8:
5f:a2:ed:8d:af:1b:5f:92:89:ed:4d:84:da:73:c0:
af:0b:46:70:6e:e5:30:b6:9c:28:d4:01:16:ee:40:
e7:d6:2c:e5:20:3a:32:5f:01:73:d5:4b:ca:83:56:
b6:3c:5f:88:be:43:eb:3c:67:7a:f0:0e:1e:30:49:
1e:c0:ff:92:3b:3c:ed:ec:57:3a:47:ed:12:01:6c:
40:06:b8:cf:e5:3e:74:07:51:4d:ad:d3:bc:4c:03:
96:07:26:20:a0:68:a1:59:ae:e7:a7:0c:a3:62:39:
46:f0:5b:cf:8d:14:aa:4c:71:32:bf:cf:cd:36:42:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:8E:5E:55:72:97:4B:3F:D8:D7:7A:17:41:0E:13:71:7C:2A:DA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SnSOXlVyl0s_2Nd6F0EOE3F8Kto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.132.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ae:db:06:fd:3f:76:bb:7f:67:cc:3e:23:76:64:96:77:ec:
eb:a2:5b:e5:90:2d:bd:aa:b1:9a:b1:99:b8:18:1d:2f:13:ca:
52:b9:ae:87:a6:10:e9:a1:62:ba:c5:05:22:61:83:88:44:84:
d8:a2:7e:b9:ad:de:a5:9d:bc:c0:ce:f6:34:3c:f1:07:52:d2:
be:28:a3:ca:40:df:2b:46:59:0f:9d:d6:4c:ed:92:12:5f:e6:
03:cc:ed:b0:68:f8:a3:cb:d5:83:19:11:d0:46:ae:bf:3f:2d:
7c:95:6d:0d:d4:54:9d:76:bb:86:19:6e:60:ac:a4:7f:0b:ab:
99:c1:05:f8:ae:2e:f5:16:2b:0e:e1:87:6b:b9:ba:9d:0b:15:
71:6c:8d:8c:84:ea:3f:81:c0:d4:30:fa:c1:50:8a:23:73:26:
0b:bd:51:2b:42:2c:78:71:28:c8:4a:06:d3:e3:70:cd:61:fe:
e2:28:76:da:a8:1f:42:4f:75:9f:5a:7e:7b:12:8d:83:a9:77:
27:1e:af:b3:07:fc:15:9f:a5:a7:41:7e:5b:54:22:98:fb:de:
aa:12:03:19:fe:06:c1:72:f2:b1:a1:c7:3a:a8:ac:0a:f0:d6:
c0:32:3c:37:fe:46:ef:c6:8f:04:e8:e4:b1:ff:7d:26:53:7f:
55:88:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:11 2026 by rpki-client