Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/SVumR0eZs32hPqbBjUR4HDm8fAo.roa
File: SVumR0eZs32hPqbBjUR4HDm8fAo.roa (raw, json)
Hash identifier: DeiP7EKKHH59wJlo6Dh3tVePScpcWUXWWtOb3hiHuns=
Subject key identifier: 49:5B:A6:47:47:99:B3:7D:A1:3E:A6:C1:8D:44:78:1C:39:BC:7C:0A
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE7D6BD90091F4A82307F35DC1208
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/SVumR0eZs32hPqbBjUR4HDm8fAo.roa
Signing time: Tue 15 Sep 2026 21:49:30 +0000
ROA not before: Tue 15 Sep 2026 21:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 198.33.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e7:d6:bd:90:09:1f:4a:82:30:7f:35:dc:12:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=495ba6474799b37da13ea6c18d44781c39bc7c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:48:09:10:f6:c9:6c:73:a4:6d:93:d3:ab:
f2:28:1e:ba:b0:ae:6d:1b:48:fe:47:a4:0c:83:93:
31:dd:c1:e8:00:73:46:c8:8e:2e:31:a0:0a:dd:02:
4d:79:62:d3:89:a4:e4:97:dd:79:b1:db:9a:00:d9:
43:0f:f4:01:da:70:17:60:05:2f:fa:0a:8a:18:83:
f5:d3:a4:00:9b:86:ea:2c:81:01:96:04:94:70:7d:
04:0c:b2:7c:cc:e5:3f:0b:a6:f1:28:3c:6b:0a:65:
71:60:b7:84:9a:a0:5d:2e:e2:67:6f:17:0a:54:59:
8c:17:ea:1a:cd:93:7a:de:c1:ab:85:93:61:42:c5:
f8:dc:ab:53:34:69:15:a6:03:1c:c7:47:35:82:65:
ce:9d:fa:c5:48:9b:05:03:bb:c3:f1:c8:4b:4a:3d:
94:6a:03:7b:d0:34:83:b1:95:0e:c6:37:8b:41:c8:
22:17:0c:5b:3a:c2:cf:0d:b1:6d:98:14:86:5a:84:
3c:75:68:6e:4d:e5:c6:ff:17:00:18:08:a9:89:7d:
f6:b4:26:70:d0:ed:63:92:90:45:4c:5e:d6:e7:3a:
2c:a9:23:98:e1:79:dd:ed:47:a5:c5:5e:47:12:b1:
84:c5:75:4b:b6:31:70:39:0f:84:36:b6:77:13:72:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5B:A6:47:47:99:B3:7D:A1:3E:A6:C1:8D:44:78:1C:39:BC:7C:0A
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/SVumR0eZs32hPqbBjUR4HDm8fAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.33.225.0/24
Signature Algorithm: sha256WithRSAEncryption
26:51:31:79:4b:d4:df:41:22:cc:10:66:f5:17:58:f1:60:fa:
d6:7f:3f:13:91:4b:9b:b1:c9:90:6d:8f:39:9e:8a:22:4e:22:
c6:80:88:f3:02:5f:51:b3:3c:25:8d:ff:09:88:ab:9d:41:ac:
2a:50:f6:ba:78:5b:97:6b:d2:7a:3c:42:d3:35:63:62:1e:bf:
34:4e:5a:ba:9f:f2:e7:bf:0d:26:2a:8c:f7:dc:b9:b3:18:37:
a9:b3:51:96:91:36:de:9b:53:c1:b9:86:b8:5f:77:8d:9b:f1:
5f:3d:5b:de:64:bd:f4:de:0d:5b:1b:14:fc:bc:9f:5a:3d:08:
fd:da:99:f9:0d:43:54:3e:d1:8c:57:60:ad:ca:93:10:72:cf:
b6:7b:57:9d:1e:35:b5:df:83:7a:f0:56:51:fc:28:83:b4:3a:
77:e2:1a:f9:f1:58:45:c5:f9:9b:31:76:9c:a5:95:72:fb:1c:
63:03:cf:46:d0:ca:6c:e5:c0:d7:34:b7:96:ec:39:06:2c:30:
c5:f3:af:42:07:0a:34:8e:ea:f7:12:4a:b8:05:9f:fc:94:8f:
9f:23:0b:c6:95:9a:6e:23:8d:cd:d3:b1:ac:5e:e1:d5:02:dd:
06:81:a2:b2:74:e9:a2:4d:e2:a4:da:cf:d6:c4:79:4b:05:ef:
20:c2:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:51 2026 by rpki-client