Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/SH3pYzGJ0F7gmqFvylZKGzCQ_K4.roa
File: SH3pYzGJ0F7gmqFvylZKGzCQ_K4.roa (raw, json)
Hash identifier: k967cJxC2KK2fNAPD1SlBDWcVETDx+a636MqmbqOiTo=
Subject key identifier: 48:7D:E9:63:31:89:D0:5E:E0:9A:A1:6F:CA:56:4A:1B:30:90:FC:AE
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01A0F4228B5E4AC8C6D078C6909769008CC9
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/SH3pYzGJ0F7gmqFvylZKGzCQ_K4.roa
Signing time: Wed 30 Sep 2026 21:04:59 +0000
ROA not before: Wed 30 Sep 2026 21:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31034
IP address blocks: 185.94.83.0/24 maxlen: 24
194.50.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:22:8b:5e:4a:c8:c6:d0:78:c6:90:97:69:00:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Sep 30 21:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=487de9633189d05ee09aa16fca564a1b3090fcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:a6:d5:da:f4:c4:fa:a5:b2:51:59:9b:e5:
54:cc:5a:6f:b8:6f:2d:1d:eb:bf:22:be:70:54:7d:
0b:f9:c2:38:a6:fc:2e:08:2b:ee:66:76:27:85:d7:
e9:2e:dd:71:af:b1:91:16:d3:80:60:ac:cd:10:2c:
3a:20:65:ce:ca:05:94:01:76:27:82:bd:24:b6:3d:
04:08:ec:89:62:df:16:17:93:f1:f3:f6:d7:13:c0:
f2:32:30:e8:12:96:e0:bc:39:85:cd:b3:de:ac:f9:
2f:d6:d1:3f:76:1e:93:ab:28:40:d3:4f:6f:af:5a:
f1:25:f4:63:09:d8:bf:d0:8a:e1:03:32:c5:54:ba:
16:50:f2:44:d1:e1:db:ee:a7:60:75:3f:74:df:2e:
c7:45:86:d8:cf:c9:a6:64:83:09:64:cd:cf:af:d7:
a5:83:a8:d5:35:ec:7f:77:f0:f6:98:11:46:90:4e:
ab:5c:15:72:fb:6a:b9:79:eb:be:12:cb:19:56:84:
38:ae:5d:5b:1e:98:9e:e1:7a:a7:ee:05:6a:a2:f6:
7b:e5:87:3e:c3:5a:ba:08:60:5d:d6:e0:74:cc:40:
29:33:d5:26:91:32:2c:02:c2:51:28:84:2b:bb:dc:
d2:a8:ef:46:ef:c1:98:18:51:af:83:86:f3:9c:6d:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:E9:63:31:89:D0:5E:E0:9A:A1:6F:CA:56:4A:1B:30:90:FC:AE
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/SH3pYzGJ0F7gmqFvylZKGzCQ_K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.83.0/24
194.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8b:b5:ae:d4:61:cf:72:8c:35:b7:6e:fe:72:ec:7a:aa:e5:
bf:b7:2d:13:7c:33:e6:fa:3c:4c:51:7c:68:7b:47:a4:e6:be:
14:cb:b9:09:61:c0:9c:dc:3c:e1:cf:74:ad:a6:75:1f:8c:1a:
ae:96:80:d3:6c:31:12:43:5f:d7:95:a0:0d:26:ae:bf:93:fe:
58:57:d5:6f:25:68:cb:ad:6e:83:e4:08:b5:dd:12:28:84:1c:
09:6c:f7:8c:af:f4:6f:6f:39:79:d6:26:14:8a:c9:ab:c5:bb:
7d:2b:ac:91:b4:a1:bf:5f:49:0c:bf:b0:a5:4e:5d:48:70:fe:
4c:b6:e5:de:99:fe:7a:a2:72:5c:cd:58:8d:40:65:23:10:43:
ae:d4:be:52:51:7e:a8:e7:35:03:fa:5a:f8:b4:27:6b:d8:a2:
c5:d8:f5:dc:f2:d0:ea:24:29:b4:ef:03:70:c8:8f:d4:e8:2d:
a8:38:c1:fd:12:f6:e1:dd:d9:7c:f8:e8:d6:62:f7:05:ce:28:
f7:e0:51:fc:3c:5a:3f:65:32:32:ab:5f:5e:55:c4:4f:50:52:
b3:92:f7:61:6f:48:6c:d9:bc:ad:b0:39:ed:8f:66:67:12:9c:
5f:d8:63:83:ec:de:1d:b7:24:18:da:38:2f:41:2e:d6:59:f4:
f8:3f:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:08:22 2026 by rpki-client