Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/SF34wbOtYdRuApVr6Gux8pIJkSQ.roa
File: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (raw, json)
Hash identifier: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=
Subject key identifier: 48:5D:F8:C1:B3:AD:61:D4:6E:02:95:6B:E8:6B:B1:F2:92:09:91:24
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F236908B26BED3D1F722557ED803B8980
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/SF34wbOtYdRuApVr6Gux8pIJkSQ.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2a0f:1080::/32 maxlen: 32
2a0f:1081::/32 maxlen: 32
2a0f:1082::/32 maxlen: 32
2a0f:1083::/32 maxlen: 32
2a0f:1084::/32 maxlen: 32
2a0f:1085::/32 maxlen: 32
2a0f:1086::/32 maxlen: 32
2a0f:1087::/32 maxlen: 32
2a0f:9cc0::/32 maxlen: 32
2a0f:9cc1::/32 maxlen: 32
2a0f:9cc2::/32 maxlen: 32
2a0f:9cc3::/32 maxlen: 32
2a0f:9cc4::/32 maxlen: 32
2a0f:9cc5::/32 maxlen: 32
2a0f:9cc6::/32 maxlen: 32
2a0f:9cc7::/32 maxlen: 32
2a0f:a780::/32 maxlen: 32
2a0f:a781::/32 maxlen: 32
2a0f:a782::/32 maxlen: 32
2a0f:a783::/32 maxlen: 32
2a0f:a784::/32 maxlen: 32
2a0f:a785::/32 maxlen: 32
2a0f:a786::/32 maxlen: 32
2a0f:a787::/32 maxlen: 32
2a14:6a00::/32 maxlen: 32
2a14:6a01::/32 maxlen: 32
2a14:6a02::/32 maxlen: 32
2a14:6a03::/32 maxlen: 32
2a14:6a04::/32 maxlen: 32
2a14:6a05::/32 maxlen: 32
2a14:6a06::/32 maxlen: 32
2a14:6a07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:b2:6b:ed:3d:1f:72:25:57:ed:80:3b:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=485df8c1b3ad61d46e02956be86bb1f292099124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:ac:23:9e:78:08:a5:55:90:d2:a4:75:95:
81:c1:28:52:45:c1:e6:b7:f3:a6:c5:80:ec:c1:2b:
b8:7c:26:57:fa:54:cb:81:c6:66:d9:4b:5c:98:a5:
72:cb:fb:db:f9:34:e3:21:7d:be:94:1d:05:48:fe:
af:94:6f:a2:fb:19:5c:2d:51:28:b8:ce:aa:b0:28:
f1:5b:86:85:f7:7d:23:18:5f:63:3e:78:a6:67:ee:
5e:8d:05:6f:c7:2c:64:93:2e:29:91:65:d4:4d:05:
f2:f9:b6:c9:0b:b9:f3:00:bf:63:a8:4c:cc:08:64:
89:47:41:04:45:48:19:71:39:5b:23:ea:0e:32:9a:
22:f4:8a:53:2e:5f:7d:75:07:9b:ad:61:a4:31:b0:
b4:c5:6a:02:62:87:2c:4e:50:1f:9f:25:cd:ea:64:
06:d9:6e:5a:6e:c3:57:dc:63:0e:21:18:83:71:99:
8b:f6:72:45:90:27:b4:46:3a:b5:a1:8b:ef:12:3d:
88:1a:bb:f8:5e:f8:c0:25:ab:15:bd:d8:99:b6:cc:
c3:3c:7b:37:f1:b5:2a:90:92:f5:a5:76:7f:cf:d6:
5b:a5:86:df:21:6c:82:3d:d8:e6:0c:1b:d9:56:a2:
17:4a:d3:57:61:dc:80:4b:e2:12:ad:58:7b:30:07:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:F8:C1:B3:AD:61:D4:6E:02:95:6B:E8:6B:B1:F2:92:09:91:24
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/SF34wbOtYdRuApVr6Gux8pIJkSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1080::/29
2a0f:9cc0::/29
2a0f:a780::/29
2a14:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
a4:20:42:a7:3d:9c:46:be:03:da:30:48:02:91:e6:4e:1a:04:
79:8c:7e:6d:97:da:31:7c:e9:35:28:64:f6:a7:3d:f4:90:98:
ae:0d:39:6a:1f:15:07:f7:89:35:8c:9f:29:2d:71:bd:47:9d:
08:03:63:56:6f:be:9d:cc:9b:c4:52:0f:a2:c3:48:b9:cb:44:
24:52:c0:96:16:e2:50:bf:a7:5b:ee:95:63:5d:cd:97:95:3f:
3c:ff:68:92:3f:bd:ca:55:f7:2a:46:e2:d0:d9:7e:d8:b9:79:
20:88:4c:0e:9d:02:aa:c6:d3:3b:98:0d:80:b0:8a:80:71:15:
9b:c5:73:40:14:30:45:8e:bc:68:a4:67:5a:64:dd:33:3c:67:
7a:58:e3:a2:ea:f0:2e:4f:05:fd:f6:78:5e:ed:b2:f0:73:63:
89:f8:f1:5b:35:18:82:b3:8e:aa:c8:56:f5:59:a3:7f:2e:f6:
34:5c:1d:64:c0:69:4f:78:76:f7:04:6a:8c:ef:7d:6b:dd:f7:
0b:ea:fb:a2:e7:19:dd:dc:e4:b5:8c:d7:58:05:f8:4a:3b:ca:
9f:03:a4:04:4e:60:14:e6:01:86:a5:cb:1b:f5:e6:37:50:2a:
f4:38:b2:54:ed:f5:5b:0e:19:a8:f5:a5:cb:f9:34:71:5e:92:
8f:70:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:22:03 2026 by rpki-client