Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sSmiX7qzIyZZBnvlsyXWyCUq0w0.roa
File: sSmiX7qzIyZZBnvlsyXWyCUq0w0.roa (raw, json)
Hash identifier: tkEIfRS+g8cxAhTQ3NQOI8Ng+3BIy+8//+cVCwbQgNY=
Subject key identifier: B1:29:A2:5F:BA:B3:23:26:59:06:7B:E5:B3:25:D6:C8:25:2A:D3:0D
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019E4A47C0B761CA2C90C1E94A25830FB4F2
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sSmiX7qzIyZZBnvlsyXWyCUq0w0.roa
Signing time: Thu 21 May 2026 11:24:36 +0000
ROA not before: Thu 21 May 2026 11:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205486
IP address blocks: 2a09:6282::/32 maxlen: 32
2a0e:b140::/29 maxlen: 29
2a10:4b00::/29 maxlen: 29
2a11:b1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:47:c0:b7:61:ca:2c:90:c1:e9:4a:25:83:0f:b4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 21 11:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b129a25fbab3232659067be5b325d6c8252ad30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:d2:45:05:50:31:9e:2b:ce:fc:93:2a:78:
e3:56:c1:e7:de:ae:b1:83:df:52:1a:99:7f:9b:f5:
de:a3:71:6a:41:9c:3c:31:91:7b:a7:15:d3:61:09:
e7:4b:c6:20:1a:8e:2a:37:29:e7:76:35:bc:dc:4b:
96:33:46:f7:82:b5:41:44:f9:f3:4a:1d:a9:c6:81:
57:21:67:4d:b6:98:6d:d0:5b:40:25:cd:e4:86:8e:
17:80:38:26:02:3f:2e:c0:52:a6:90:fc:44:63:2d:
15:aa:19:b9:4d:df:a6:17:3c:78:84:db:8f:b5:28:
05:a7:ea:cc:4c:ed:f2:d3:55:0a:3a:de:f1:24:ec:
bd:57:8d:47:0f:3b:20:e1:4e:38:48:49:fe:05:99:
99:2e:54:85:b4:55:ce:c4:bd:57:99:f9:a8:56:89:
e6:55:52:4b:13:65:19:37:4c:7e:b5:a5:73:12:37:
2d:67:bb:47:2c:d2:05:f3:65:95:c2:77:0a:bb:6a:
b3:f7:fb:13:3d:66:ec:4c:ef:8e:da:e1:01:2f:bc:
d3:1f:30:1c:d0:23:ea:a5:b8:0b:e7:b1:6a:f1:4a:
72:3b:1f:eb:60:9c:6c:9a:78:7a:f4:9f:e4:e7:9e:
19:ba:3d:fc:c4:4f:86:4e:fb:20:93:87:80:f6:84:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:A2:5F:BA:B3:23:26:59:06:7B:E5:B3:25:D6:C8:25:2A:D3:0D
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sSmiX7qzIyZZBnvlsyXWyCUq0w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6282::/32
2a0e:b140::/29
2a10:4b00::/29
2a11:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:f6:d9:64:41:bb:bc:fa:bc:3d:fe:10:65:2c:6f:66:5f:af:
37:dd:cd:4c:4b:b9:9d:b0:1b:74:3b:c6:41:59:99:f6:1b:9d:
f9:1b:3e:f9:5c:66:95:19:8e:ef:2e:1f:60:55:33:f6:9b:b1:
fa:03:ef:db:d9:6e:58:f2:c6:ef:ab:12:eb:f3:75:80:74:75:
f7:fb:10:8b:96:e3:e2:85:07:e0:e5:f4:1b:59:19:e1:ba:16:
51:0c:16:e5:5c:2e:62:4e:aa:92:1e:93:04:ee:14:11:1d:79:
d6:7b:78:45:b1:ab:84:db:08:b0:9a:71:9f:e1:19:58:4f:9e:
81:f9:82:0c:6a:45:f7:97:de:f1:99:40:bb:68:2c:dd:e5:d6:
8d:70:5f:6c:e0:5c:89:8b:e2:29:81:ec:1a:03:bf:00:92:3d:
48:d8:5e:5a:b8:73:f7:de:e7:f7:1c:10:f1:b2:d2:5e:45:01:
ce:67:1d:71:25:c8:3e:e4:cb:6c:0d:d4:4d:96:48:20:f7:b7:
77:d8:fe:c4:19:ae:aa:6f:8a:0c:64:e8:46:88:7c:2f:7e:57:
04:27:e4:47:4d:d8:28:5f:fc:ec:6c:1b:ed:8e:3d:14:c3:9f:
3e:64:25:3c:aa:08:b3:af:54:fb:55:d8:20:79:f0:8f:9c:cd:
69:4a:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:11:37 2026 by rpki-client