Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/sXYBYOzWape5FZOss1s2gbpkzzU.roa
File: sXYBYOzWape5FZOss1s2gbpkzzU.roa (raw, json)
Hash identifier: KREfilkta372D7Yqg/hHtPffqvz0AiEw0qbCO9glSQM=
Subject key identifier: B1:76:01:60:EC:D6:6A:97:B9:15:93:AC:B3:5B:36:81:BA:64:CF:35
Certificate issuer: /CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Certificate serial: 019F23685BC7B715B8A471A20D429C82B35D
Authority key identifier: 2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/sXYBYOzWape5FZOss1s2gbpkzzU.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50245
IP address blocks: 91.216.220.0/24 maxlen: 24
2a13:f980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5b:c7:b7:15:b8:a4:71:a2:0d:42:9c:82:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1760160ecd66a97b91593acb35b3681ba64cf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:21:34:c1:5b:ed:1a:51:f8:c7:20:16:e2:
38:b0:d6:7c:f4:ae:a9:d7:40:49:42:48:4a:cb:32:
52:f4:5b:23:f5:66:84:a0:12:16:bc:63:14:ae:cd:
17:c2:45:d7:d4:4c:1e:5a:2e:af:3f:d9:a7:da:46:
2e:3a:eb:71:43:19:8d:87:dc:bb:82:44:6e:8d:4d:
f3:0d:dc:9a:7c:b5:ec:dd:58:fe:3c:69:7c:68:84:
4a:68:68:b7:3a:62:31:74:80:e1:2e:70:4f:fb:2e:
a3:a9:4b:0f:20:c4:ea:53:bf:b9:eb:2e:e0:0c:74:
dc:a5:1a:c6:88:a4:fe:12:52:a1:65:5a:52:25:ac:
88:af:b4:85:01:8c:cd:46:e4:67:ee:38:ad:28:a0:
b1:fd:25:58:60:53:e6:56:3b:64:33:8f:3f:67:f8:
51:37:e2:9a:73:29:7e:76:00:31:5a:7e:85:7a:34:
cc:fe:75:79:c4:23:42:27:72:07:3f:fc:41:ea:af:
e7:02:c5:61:b0:19:9c:56:38:8e:2f:5b:5c:69:b3:
61:7a:de:42:c6:b3:01:26:1e:6e:52:9d:57:dd:32:
66:1f:be:af:54:ec:66:f9:37:e3:22:40:5f:0e:7d:
85:c0:25:11:a9:83:03:d4:15:20:ce:88:fb:93:7e:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:01:60:EC:D6:6A:97:B9:15:93:AC:B3:5B:36:81:BA:64:CF:35
X509v3 Authority Key Identifier:
keyid:2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/sXYBYOzWape5FZOss1s2gbpkzzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.220.0/24
IPv6:
2a13:f980::/29
Signature Algorithm: sha256WithRSAEncryption
a0:5d:c4:fd:88:58:2e:85:59:60:f4:b7:59:77:66:04:5a:b6:
5c:ca:55:88:d4:b1:24:ec:c5:de:56:3d:50:56:e0:b8:81:e8:
d8:97:0f:2d:5a:c5:69:3d:e3:f5:44:7c:f7:b5:88:8c:37:04:
1e:2d:85:c5:bb:83:97:85:ea:32:dc:ef:e0:ac:06:80:c3:39:
91:b2:7f:f3:a7:73:d5:ad:29:70:40:8c:09:8b:0e:53:f4:37:
30:9d:ac:01:71:c3:c1:37:4d:84:4c:1b:ce:fd:92:9f:ac:be:
95:ff:6d:d5:10:28:e0:fc:7c:28:ee:97:c5:5a:68:2f:d5:c2:
0f:d3:29:e1:8c:83:ce:d7:16:01:c8:13:b1:71:94:34:b6:7a:
c4:da:0e:85:7a:04:9c:b1:13:5f:9c:c3:21:4f:37:83:4d:dc:
4c:67:e2:4e:6b:14:92:3d:66:68:c0:7d:ab:2b:65:9e:56:64:
c6:9b:9e:61:8a:5b:2c:19:ab:43:50:d3:c7:83:91:79:d7:bc:
f8:82:e9:dd:06:6f:d6:2f:61:61:fe:a3:61:22:e3:a6:05:ab:
b6:9b:68:3f:48:37:07:06:3f:e6:d7:bd:99:70:9c:c2:d5:5a:
57:e1:a9:98:1f:9b:79:92:9d:46:26:57:fa:ad:98:4d:ea:64:
97:92:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:06:35 2026 by rpki-client