Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/SzfEY1Nq1aMd-z8NdZsJh4rkHLE.roa
File: SzfEY1Nq1aMd-z8NdZsJh4rkHLE.roa (raw, json)
Hash identifier: +j3Mg1YpvNctOKMzdM7wBvBFuUBEVAhKLDjbpjHSOx8=
Subject key identifier: 4B:37:C4:63:53:6A:D5:A3:1D:FB:3F:0D:75:9B:09:87:8A:E4:1C:B1
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019EEA6B7F1600DB6CB58D77CDDA85459973
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/SzfEY1Nq1aMd-z8NdZsJh4rkHLE.roa
Signing time: Sun 21 Jun 2026 13:42:53 +0000
ROA not before: Sun 21 Jun 2026 13:42:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 45.143.96.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:6b:7f:16:00:db:6c:b5:8d:77:cd:da:85:45:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jun 21 13:42:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b37c463536ad5a31dfb3f0d759b09878ae41cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:eb:73:cf:97:bc:40:06:10:d2:1f:17:c1:
86:bd:0c:18:bf:43:f5:85:b8:57:f4:25:91:3f:fe:
f3:9b:93:3a:41:df:82:ec:8e:fb:d9:59:c3:81:4f:
30:cc:c6:10:f1:2b:1b:9d:fa:d3:80:03:32:e0:6c:
db:0b:de:41:4b:fd:ba:d1:e5:2a:b8:1f:1a:56:b9:
63:30:35:e2:0e:0f:1c:da:39:3b:86:d9:75:e6:a2:
e0:4a:a9:6b:0d:1f:7e:a2:13:53:4d:f8:86:f4:99:
74:51:48:eb:4a:6f:59:16:70:24:d7:df:7e:13:17:
a6:65:aa:ce:60:4d:ab:67:4d:5b:86:3c:0a:d4:ba:
bd:6e:9a:f1:c5:79:8c:f2:40:18:21:71:a1:29:86:
0a:8e:5b:30:24:02:0c:6d:5e:75:9b:5d:6c:82:dd:
4d:af:97:1a:ca:a9:c7:39:75:33:47:b7:f8:6f:e3:
fd:88:2d:f9:79:f0:bb:ff:ad:7e:1f:d4:22:d0:27:
15:86:9d:8b:31:2e:6d:96:89:a9:b7:5c:c2:0a:08:
7a:11:27:3b:df:e5:66:81:93:27:0e:a1:a8:5f:94:
1b:91:db:5a:8e:2f:64:fd:91:ca:d1:33:f7:cb:42:
2b:2b:66:47:3f:9f:aa:47:fb:9e:ca:19:5e:f0:ea:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:C4:63:53:6A:D5:A3:1D:FB:3F:0D:75:9B:09:87:8A:E4:1C:B1
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/SzfEY1Nq1aMd-z8NdZsJh4rkHLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.96.0/24
185.148.241.0/24
185.148.243.0/24
185.169.183.0/24
185.174.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c6:82:4e:81:b6:67:9f:b2:2f:aa:35:15:57:00:92:a6:76:
48:a7:be:a5:df:ce:ac:3d:99:34:18:9e:34:b8:fa:12:c0:84:
89:1b:7f:5f:a3:14:23:35:cd:29:5c:f2:b7:ac:52:b4:5f:2a:
ac:41:c6:4b:f7:e4:a1:81:26:15:17:cf:7d:88:e1:13:c8:47:
5b:2d:20:4f:ae:a9:ed:56:c8:46:77:6b:d8:9b:8b:5e:04:29:
e7:a3:13:1f:12:c8:4e:c6:59:05:61:ac:f0:80:57:13:d6:2b:
cf:3f:cc:a9:ae:be:cd:6e:bc:82:40:3c:17:4f:9a:7a:67:14:
4d:97:e2:e0:b5:7f:6d:84:18:7c:e4:d8:c7:a4:88:51:88:8c:
e0:cc:98:48:37:60:10:2e:07:79:d2:a5:b5:03:20:78:ab:50:
fd:cf:3b:b0:94:51:d2:3f:07:5d:26:b9:03:e4:2b:27:ec:12:
48:2a:74:0c:49:18:6e:f5:c5:3b:ba:ee:37:24:40:c0:3e:d1:
f9:32:55:c2:a9:bc:77:8d:da:d3:31:6e:a6:8a:e0:85:11:f5:
91:88:1f:25:26:bd:43:be:fa:88:d7:a7:48:a1:cf:e4:2d:1d:
cd:a6:11:a8:f7:a6:9a:78:5e:94:f4:3f:25:17:dc:e7:39:6a:
ed:a5:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:19 2026 by rpki-client