Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa
File: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (raw, json)
Hash identifier: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=
Subject key identifier: 49:77:B8:2F:CD:02:E8:D3:40:8B:CF:D9:FE:BF:CE:CD:89:45:24:C7
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019CE6706BDE2012BAC3EB3A5595668D6140
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa
Signing time: Fri 13 Mar 2026 09:04:13 +0000
ROA not before: Fri 13 Mar 2026 09:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 5.181.2.0/24 maxlen: 24
5.181.3.0/24 maxlen: 24
185.161.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:70:6b:de:20:12:ba:c3:eb:3a:55:95:66:8d:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Mar 13 09:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4977b82fcd02e8d3408bcfd9febfcecd894524c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:81:42:91:88:31:9a:04:75:ea:2b:fb:bb:
81:74:ed:61:37:7f:a9:1d:08:b0:d2:d5:33:c4:db:
6f:4d:b9:c2:2d:25:de:e0:b2:24:ec:4c:ff:16:08:
d5:42:aa:6d:fc:6a:0b:38:24:d8:3d:44:78:9b:75:
77:b7:90:37:da:76:17:aa:11:12:c8:66:61:93:16:
02:34:dc:aa:29:a7:da:52:30:6c:ae:5d:6c:58:5b:
4d:96:41:26:b0:00:62:1a:7f:ed:52:92:4a:ed:30:
72:a6:83:3b:2a:45:21:53:33:15:9f:83:99:30:6c:
f7:18:cd:45:ea:bd:23:7f:45:f7:72:a3:77:b6:54:
e4:06:62:84:92:49:d4:b3:c6:4b:61:31:0e:0d:b9:
df:86:b6:28:84:70:14:b9:50:ca:3a:4f:9f:5f:2e:
7a:d3:2e:d9:19:8c:1d:d6:e8:17:03:dc:fd:36:5e:
0c:6d:aa:2c:ae:a9:f0:8e:f3:2d:91:f5:9f:b8:14:
e2:02:a7:03:71:b5:eb:7e:3c:f7:3c:4d:1f:e6:b6:
1e:9c:39:da:c3:5c:6b:10:23:ad:ca:e0:f8:d1:e4:
a4:a6:ef:47:a8:00:6d:b8:10:bb:1a:53:99:2d:8a:
a7:76:68:61:39:12:5a:c7:0f:1c:87:52:e2:2b:f1:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:B8:2F:CD:02:E8:D3:40:8B:CF:D9:FE:BF:CE:CD:89:45:24:C7
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.2.0/23
185.161.251.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6d:ca:1c:ed:3c:68:e3:a7:8d:38:2c:0a:be:f5:1c:3c:66:
50:ba:1a:59:e7:0c:de:1d:6f:c4:0e:23:84:d8:8a:a3:23:59:
4d:68:48:36:f2:3a:95:20:9e:41:b0:23:21:d8:2c:9e:be:90:
9a:7b:c5:d9:c9:3d:97:c3:2e:e2:4d:5d:54:8f:3c:2f:8d:14:
d6:71:ce:2d:d0:ef:2a:63:3d:69:90:e2:60:55:cf:be:6b:43:
59:31:a8:13:cc:02:cf:f2:5b:47:7f:bf:fd:4e:36:12:56:4a:
87:d8:73:0f:72:f1:e3:26:2f:c9:60:4e:0c:1f:ac:9b:16:6e:
6f:20:ea:bc:82:ce:9c:9e:10:c4:f7:14:92:51:17:5e:aa:6c:
12:ff:e6:90:0c:43:f7:54:58:bb:77:47:8e:ba:a5:69:74:c8:
1f:36:b1:4e:01:e5:2d:ee:b7:de:d3:10:55:c5:78:e5:69:4c:
a3:d7:cd:04:18:ac:f2:29:1e:b1:e5:01:d6:09:eb:4e:65:ae:
13:2a:b3:33:f9:64:67:c8:b2:13:5a:cc:f5:72:39:05:6e:0f:
6c:58:fb:6f:76:3b:cc:83:ed:88:6d:43:dd:19:b4:4a:00:e6:
9d:4b:04:0c:00:b7:f5:4e:8a:be:dc:68:1c:10:ce:fa:fb:2c:
9e:ac:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:28 2026 by rpki-client