Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/sjVRYtz4jH9eKfw8Efr3wGt_oeI.roa
File: sjVRYtz4jH9eKfw8Efr3wGt_oeI.roa (raw, json)
Hash identifier: P8Aovfss+2O/AKMSRS+SqD+lQMU75jfoO2E2lQksJcs=
Subject key identifier: B2:35:51:62:DC:F8:8C:7F:5E:29:FC:3C:11:FA:F7:C0:6B:7F:A1:E2
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019F88E7DA1EA442D9779C060C190F0665BC
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/sjVRYtz4jH9eKfw8Efr3wGt_oeI.roa
Signing time: Wed 22 Jul 2026 08:18:43 +0000
ROA not before: Wed 22 Jul 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42755
IP address blocks: 46.21.160.0/20 maxlen: 24
46.21.164.0/24 maxlen: 24
46.21.165.0/24 maxlen: 24
91.195.200.0/23 maxlen: 24
91.195.200.0/24 maxlen: 24
91.195.201.0/24 maxlen: 24
91.196.168.0/22 maxlen: 24
91.198.27.0/24 maxlen: 24
91.199.206.0/24 maxlen: 24
185.138.208.0/22 maxlen: 24
195.184.64.0/23 maxlen: 24
195.184.64.0/24 maxlen: 24
195.184.65.0/24 maxlen: 24
2a02:27f8::/32 maxlen: 32
2a02:27f9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:e7:da:1e:a4:42:d9:77:9c:06:0c:19:0f:06:65:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Jul 22 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2355162dcf88c7f5e29fc3c11faf7c06b7fa1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:1d:c7:52:81:7a:9f:c4:94:76:d9:d9:aa:
18:84:a2:8e:19:20:83:2c:8b:a6:31:9c:ef:85:50:
c0:92:b0:ca:df:03:27:ce:0c:a1:14:ec:ea:7c:05:
8e:c8:d1:31:80:7f:36:4e:4f:99:62:93:53:53:6b:
95:74:42:1f:d1:3b:19:2d:80:08:bb:2f:ec:15:f5:
bf:df:fd:7b:12:d6:a3:0b:e4:e6:2a:b0:8c:a3:1e:
cd:69:5c:fd:21:c3:69:a5:19:5c:ca:52:46:9b:80:
05:ce:84:13:af:38:e8:4c:d2:6c:fc:93:1d:e8:1b:
9f:40:d3:ed:77:2d:3e:09:92:71:ff:29:3c:9f:f0:
0f:dd:58:1a:c1:01:37:94:61:6f:76:20:97:f2:d1:
82:71:db:25:e6:fd:f7:56:65:a6:eb:ff:29:46:48:
b7:31:bc:55:2e:b5:a0:79:25:df:a7:3e:7d:75:9a:
94:49:df:61:2b:62:31:6c:a7:6e:21:34:1b:31:5c:
32:a8:11:96:fd:67:f6:25:6e:90:f3:af:dd:59:17:
b2:3e:57:9d:e3:ec:ce:ec:db:c8:ed:2e:42:f1:6c:
95:cd:b6:a0:7a:96:13:62:4b:af:5f:55:76:74:09:
f2:19:d1:e3:17:c1:07:4f:13:cd:8a:4a:22:41:3b:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:35:51:62:DC:F8:8C:7F:5E:29:FC:3C:11:FA:F7:C0:6B:7F:A1:E2
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/sjVRYtz4jH9eKfw8Efr3wGt_oeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.160.0/20
91.195.200.0/23
91.196.168.0/22
91.198.27.0/24
91.199.206.0/24
185.138.208.0/22
195.184.64.0/23
IPv6:
2a02:27f8::/31
Signature Algorithm: sha256WithRSAEncryption
81:a6:e2:81:46:38:07:dc:c2:ec:df:1b:7c:7b:f7:43:4c:07:
07:78:bd:ef:59:fc:2c:12:b2:08:d5:c9:f0:6f:0f:d4:be:53:
03:35:e9:9e:1d:a5:b3:1d:03:6f:07:45:e0:83:84:52:61:46:
be:5b:13:ae:3c:7f:f8:15:d2:a3:34:b0:14:8b:62:4e:41:af:
df:12:2e:13:20:43:e1:7b:04:68:db:cf:cc:ae:b3:27:66:f2:
dd:5a:07:56:b6:cd:4e:e7:74:dc:cb:00:d0:79:bc:e1:f1:79:
f6:35:2d:b4:ba:b4:7d:6a:a3:52:52:21:82:e0:18:d1:b9:54:
74:1b:40:81:d8:76:e7:d8:62:af:5e:d9:a0:f2:58:9e:44:fb:
aa:14:e0:8c:68:f2:d0:cc:e3:65:c3:f9:c4:84:30:ad:1c:a5:
cf:76:32:61:03:d8:28:6b:86:63:99:53:11:9a:37:70:8b:26:
ca:92:4a:63:8a:1d:ee:fd:67:91:5f:0e:01:21:a7:dd:ed:7d:
cc:fb:2a:77:62:ab:fc:e0:85:e1:9d:c0:55:28:40:49:2d:01:
71:85:90:79:00:48:8b:13:62:a9:ff:4b:9c:3d:51:d8:70:ef:
c0:b5:b9:cd:f9:55:2e:55:82:e8:c4:d8:d9:21:a4:1e:4b:42:
0f:0e:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:02 2026 by rpki-client