Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/sLLadZHcLuLxJyRCEcg6ugP5rdc.roa
File: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (raw, json)
Hash identifier: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=
Subject key identifier: B0:B2:DA:75:91:DC:2E:E2:F1:27:24:42:11:C8:3A:BA:03:F9:AD:D7
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 019D298471290F4D76DF3079EFEFE455202C
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/sLLadZHcLuLxJyRCEcg6ugP5rdc.roa
Signing time: Thu 26 Mar 2026 09:40:38 +0000
ROA not before: Thu 26 Mar 2026 09:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15547
IP address blocks: 81.85.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:84:71:29:0f:4d:76:df:30:79:ef:ef:e4:55:20:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Mar 26 09:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b2da7591dc2ee2f127244211c83aba03f9add7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:73:a5:4f:72:c9:6d:ba:3f:4c:18:38:19:
10:c0:17:d5:f5:80:29:0b:36:9d:d4:de:bd:0f:55:
0b:29:74:91:91:31:7c:77:d7:f5:5d:54:9a:74:02:
2a:05:5b:16:3d:c7:2f:8a:57:76:4a:18:3d:08:d4:
bd:57:63:37:cc:36:1c:bb:13:ff:dd:6f:14:35:39:
64:3c:99:f5:19:19:3e:e7:4a:61:72:e6:21:63:1f:
5a:e2:08:d2:92:ee:d6:71:e8:45:ae:18:a2:41:7f:
98:08:c5:96:dd:68:36:8f:cd:de:a3:8b:c3:fe:c7:
0d:1b:44:9f:00:61:34:e7:62:84:e5:a8:62:93:86:
7b:84:c8:b9:3b:25:e6:35:a7:e6:dd:02:a7:ba:b1:
51:d3:39:66:85:d4:b8:9d:91:87:99:66:7f:c0:6a:
6a:39:b5:c5:d4:21:00:c1:39:73:fc:a6:11:0f:62:
ca:40:9a:be:b8:13:ff:b6:89:a7:3b:c8:b1:76:33:
52:56:1d:bb:8d:14:a7:9b:cb:fb:07:68:cd:52:c0:
e2:d3:55:4f:4e:8c:5a:b3:0d:f0:ae:04:73:8f:58:
7d:78:0f:10:ca:95:31:6e:86:8b:e6:2e:74:20:3e:
8d:8f:5a:e5:f9:26:ed:1f:96:57:77:fe:dd:8c:52:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:DA:75:91:DC:2E:E2:F1:27:24:42:11:C8:3A:BA:03:F9:AD:D7
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/sLLadZHcLuLxJyRCEcg6ugP5rdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.56.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1c:94:e0:04:34:8d:e3:48:c6:38:87:c9:e6:8e:ad:d2:c6:
79:d6:f0:69:41:74:e7:f0:b2:ca:42:89:6f:c3:89:17:78:17:
a5:56:6a:75:12:bc:ed:a7:3f:8d:33:64:38:4a:95:70:bf:6d:
d2:dd:e2:9d:0a:54:d5:9e:c5:e8:06:de:0a:6b:a6:ba:65:55:
7b:63:8f:69:07:f4:f2:c0:22:8e:8c:93:d4:17:45:3d:95:5f:
ea:40:21:07:57:27:25:52:81:a8:91:7d:1d:b4:94:b5:d6:bb:
34:a2:0e:19:31:37:2a:b4:28:0f:f5:7a:b6:12:83:8b:af:29:
9a:ff:dc:45:d2:a5:38:97:07:0c:13:4f:c1:55:a7:04:1d:46:
ed:f4:f5:e1:9a:6c:dd:14:7c:f1:d1:c1:73:99:d6:4f:77:a9:
d0:78:94:72:54:98:20:55:9e:83:10:35:19:4d:62:e5:75:75:
6d:88:43:a0:bf:b9:8f:5d:6f:5c:ce:0b:59:06:01:69:7a:0b:
7f:77:bd:6f:de:47:23:7a:9c:92:23:84:7b:e4:2f:09:ab:d3:
db:5a:11:a1:94:a4:ef:7d:84:00:5f:24:de:29:db:06:e1:b9:
27:5c:c6:73:91:a4:01:29:93:71:a0:f0:6d:64:cb:ee:57:5b:
61:99:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:34 2026 by rpki-client