Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/SX2yfivC2Mb3ex4bB6P0yhlsJEo.roa
File: SX2yfivC2Mb3ex4bB6P0yhlsJEo.roa (raw, json)
Hash identifier: C6JVJhycJzCawG6LBIDQyT/VYXWc1YKRdSeg1TGaCT0=
Subject key identifier: 49:7D:B2:7E:2B:C2:D8:C6:F7:7B:1E:1B:07:A3:F4:CA:19:6C:24:4A
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019D20F017C16FCFC5F76E82DA927A1197F8
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/SX2yfivC2Mb3ex4bB6P0yhlsJEo.roa
Signing time: Tue 24 Mar 2026 17:41:38 +0000
ROA not before: Tue 24 Mar 2026 17:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 45.11.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:f0:17:c1:6f:cf:c5:f7:6e:82:da:92:7a:11:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 24 17:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=497db27e2bc2d8c6f77b1e1b07a3f4ca196c244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:67:4e:f1:f8:be:4b:57:94:c2:54:99:d0:
67:f5:05:3c:32:99:af:cd:4a:4d:2f:e6:9d:50:e0:
ea:87:58:ef:97:69:d2:ce:c5:27:35:a3:9d:89:dc:
11:cf:0c:4c:f6:93:e8:4d:bb:25:07:12:cc:2f:31:
9c:5f:4c:93:04:29:ea:e5:09:d9:ad:9f:11:4d:64:
5f:1e:9f:41:9a:23:6f:88:df:80:f3:ab:4e:02:63:
59:fa:cb:21:22:24:1a:95:9e:ed:6b:50:30:b2:62:
c3:3a:56:f9:de:2b:f8:67:e9:7a:7a:ce:6c:52:3e:
a1:f3:04:d7:b3:a5:07:73:5b:9e:32:f6:1a:43:ed:
6c:2f:1b:23:38:e7:60:7b:16:fe:a0:b7:87:b4:6b:
cb:55:4c:86:48:d1:67:b7:78:78:ec:6d:86:2a:a6:
eb:5e:27:cc:98:1d:77:6c:35:f9:23:fe:96:9a:79:
bb:83:f2:3f:73:92:43:ee:ff:ab:11:e2:71:2b:bc:
ca:27:eb:c1:5f:8a:94:7b:9f:18:9d:70:8b:5a:51:
b8:b2:bb:f0:79:2f:10:9c:fd:69:a5:45:5f:c7:31:
33:ef:5b:e9:a4:f6:0c:9b:13:6a:91:67:7a:5f:22:
a3:cc:15:1f:82:30:4c:08:02:3e:0f:06:73:2b:1c:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:B2:7E:2B:C2:D8:C6:F7:7B:1E:1B:07:A3:F4:CA:19:6C:24:4A
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/SX2yfivC2Mb3ex4bB6P0yhlsJEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a2:69:29:4d:4e:84:cf:a6:ec:8a:be:db:af:c7:d4:d6:93:
a3:f9:7d:a2:af:78:3a:7c:dc:c1:68:57:3a:0d:98:0b:17:77:
13:25:ba:cc:2c:08:4c:33:55:69:8c:ea:85:f0:28:2d:f4:8d:
2f:a4:42:89:07:bb:aa:a7:b3:f1:da:3a:04:16:dd:36:db:00:
77:c1:28:24:85:5b:e3:d3:c3:09:26:16:c3:4a:61:1d:dd:66:
a2:ea:e0:7e:4f:71:36:d7:a1:c9:5d:cd:3e:fa:a6:8c:3b:46:
e8:87:ac:ce:89:57:42:7f:8b:2c:30:d7:27:0d:33:e3:fb:00:
6e:c0:fb:4f:8b:cb:48:33:76:12:45:fd:92:68:d6:a7:e8:14:
73:e9:3e:b0:3b:28:53:27:ae:de:ed:15:5d:e0:b9:00:dd:1e:
62:db:e3:a4:15:0f:2d:db:88:fe:1e:46:77:55:a7:2a:f5:2c:
9f:32:6b:df:70:b8:1a:62:08:6d:c7:f3:06:c5:eb:3e:70:a6:
45:e8:98:db:cb:03:54:e6:46:3f:e8:9c:8b:44:56:94:bd:36:
1d:dd:0b:6a:86:a6:73:13:dc:eb:0c:77:1c:90:d7:48:d9:d0:
0c:18:11:31:d4:55:1e:c1:1b:35:97:a3:06:4d:2d:5e:f2:e0:
40:f0:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:01:37 2026 by rpki-client