Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/sdBZayaxVINy-N5ZHCo3jdmR_W8.roa
File: sdBZayaxVINy-N5ZHCo3jdmR_W8.roa (raw, json)
Hash identifier: OVX/eFftHE/48lLpbpAYVzfdqH+tgwmsrTs5PCo8xzo=
Subject key identifier: B1:D0:59:6B:26:B1:54:83:72:F8:DE:59:1C:2A:37:8D:D9:91:FD:6F
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019E1789563865ABB277805EE2D90FC8AAB3
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/sdBZayaxVINy-N5ZHCo3jdmR_W8.roa
Signing time: Mon 11 May 2026 14:55:36 +0000
ROA not before: Mon 11 May 2026 14:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 109.122.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:89:56:38:65:ab:b2:77:80:5e:e2:d9:0f:c8:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: May 11 14:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1d0596b26b1548372f8de591c2a378dd991fd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:50:59:0d:ef:c0:e4:0f:92:8c:a4:01:90:
42:96:f3:5f:66:f5:2c:93:42:60:c0:0c:e4:4e:a6:
bb:e7:fd:6a:c7:22:61:e0:45:40:3a:85:2f:52:1d:
d2:e8:ef:b0:49:8c:e4:ec:51:e7:e5:bb:46:1e:b7:
d5:3c:42:d2:2b:aa:4b:8c:8a:fc:0c:db:ff:d9:c2:
28:a9:96:e4:3d:b4:85:a9:9c:2e:c0:c7:23:78:b9:
f7:0a:96:cb:81:8c:1c:b7:74:ce:fe:6a:2b:b7:6e:
57:e3:9e:7b:34:f7:47:31:05:90:d1:d1:6a:20:ee:
e5:81:1b:9c:5e:96:bc:99:08:d2:a2:fb:3b:c2:4a:
fe:e2:0d:23:4d:53:ba:7a:59:4f:0d:59:6d:ba:c7:
6b:c1:22:86:73:4a:40:fe:0d:0b:20:96:fc:d1:ee:
35:6b:d2:62:fa:eb:b1:53:64:fb:80:49:c5:a2:84:
cc:a2:ea:93:5c:27:1b:67:ec:14:5d:fb:44:b6:c3:
5b:dd:3b:e5:7a:b7:09:72:30:ed:dd:46:7a:21:e7:
49:9f:84:37:b3:83:dd:8d:54:8a:8d:d5:b4:3a:e3:
f2:6a:12:f3:cb:4b:a4:b8:e0:d0:da:7c:9f:f6:cd:
d5:0a:2f:21:b8:9b:b6:9c:e0:25:bc:62:b7:43:78:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:59:6B:26:B1:54:83:72:F8:DE:59:1C:2A:37:8D:D9:91:FD:6F
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/sdBZayaxVINy-N5ZHCo3jdmR_W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f3:44:88:bb:93:95:6e:c7:8e:e1:1f:54:85:28:6c:8f:fb:
4b:08:92:e7:3d:1a:a2:0f:37:d1:8a:af:da:ee:92:80:78:11:
7c:c9:a5:d3:6a:0c:c1:6a:e8:8b:63:28:0d:37:f6:c5:02:bc:
93:d7:dc:ee:24:58:ad:a2:a7:a7:79:53:14:56:8c:6e:26:46:
52:6c:f3:66:30:26:e1:0a:19:55:ea:23:32:46:e2:7d:63:35:
4c:a1:f6:c8:ac:37:3d:04:b6:d2:79:32:b8:d1:32:1f:46:54:
d4:b6:b6:e5:53:c7:35:48:dd:a1:19:ae:99:0d:45:43:7b:39:
24:2a:a2:ec:63:75:06:91:03:55:e1:aa:42:2d:14:69:92:44:
9c:9f:15:23:16:57:09:2c:68:ea:de:69:87:0c:1d:99:a1:fc:
7d:4c:6a:7a:45:b4:fe:c6:c0:23:99:9e:6e:78:4d:d1:35:be:
91:b6:47:7a:d4:5f:ea:12:8d:ea:1e:30:04:78:04:7b:17:fc:
d4:da:d9:2e:a2:c0:d4:ff:8b:91:f7:3a:ff:f6:bc:92:3a:99:
56:f4:18:68:5e:ff:b4:f8:49:f0:72:4a:75:f7:5e:7c:1c:b4:
fd:3b:9d:76:23:4a:ba:32:b2:ff:e6:c4:c2:8d:3b:62:22:6f:
54:c3:cb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:51 2026 by rpki-client