Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/SdlkOvmWxZsG3lrNdu-_BWScGdw.roa
File: SdlkOvmWxZsG3lrNdu-_BWScGdw.roa (raw, json)
Hash identifier: BWpyRh5LY7eOyaK5XRYDUHQC4WOnoi30+STAR7V5gbM=
Subject key identifier: 49:D9:64:3A:F9:96:C5:9B:06:DE:5A:CD:76:EF:BF:05:64:9C:19:DC
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 01A0A494261AB03BBCF0B810EF5FA17D846E
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/SdlkOvmWxZsG3lrNdu-_BWScGdw.roa
Signing time: Tue 15 Sep 2026 10:19:27 +0000
ROA not before: Tue 15 Sep 2026 10:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218774
IP address blocks: 37.252.58.0/23 maxlen: 24
2a00:10ee::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:94:26:1a:b0:3b:bc:f0:b8:10:ef:5f:a1:7d:84:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Sep 15 10:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49d9643af996c59b06de5acd76efbf05649c19dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:8d:93:e5:25:be:87:9d:ae:7f:c4:97:f2:
ac:a0:18:d5:6f:b8:f1:96:14:15:dd:19:7f:81:67:
3f:bf:b0:36:86:e9:1d:c8:5d:95:5e:be:06:2c:d2:
23:34:37:66:1c:35:36:d6:00:50:96:ad:ad:a7:32:
04:76:e8:8d:44:e9:91:35:c0:2a:44:bc:d5:3b:03:
4b:5a:8b:d9:39:e3:81:78:0c:ec:37:b3:87:8c:dc:
5a:f2:02:1b:c4:bf:96:3d:32:71:ad:83:42:e1:11:
1c:10:45:ee:43:0c:68:28:64:78:87:c3:26:18:2e:
5d:6c:42:17:9d:ad:e1:85:f2:48:29:7d:15:b8:3a:
42:96:57:82:5d:2f:2a:71:68:69:1e:c4:12:36:40:
6a:fa:f5:b8:d4:99:43:9d:63:a6:f6:19:19:9e:c5:
94:4c:fc:f6:38:f3:6e:0c:70:53:86:59:04:65:9b:
eb:6e:71:b7:32:d3:84:77:1b:2f:68:0d:c1:4c:af:
7e:2e:49:82:00:78:f8:58:07:a3:4d:0b:67:28:64:
82:f4:60:8b:eb:02:5a:28:9a:a6:95:87:ee:47:75:
de:7f:75:ad:58:e6:90:82:34:e0:e7:46:6a:ec:da:
ce:bc:a5:bc:b0:11:fb:c1:5b:5b:3c:1e:03:5d:53:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:64:3A:F9:96:C5:9B:06:DE:5A:CD:76:EF:BF:05:64:9C:19:DC
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/SdlkOvmWxZsG3lrNdu-_BWScGdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.58.0/23
IPv6:
2a00:10ee::/32
Signature Algorithm: sha256WithRSAEncryption
7c:bb:93:90:a8:ac:01:0b:2d:65:ee:70:73:4f:3a:9e:18:b9:
96:32:4d:ec:3c:cc:38:cc:7c:98:47:76:83:d9:d6:3e:ef:4d:
02:8c:d1:7c:ef:4c:52:6c:ab:16:98:df:fc:da:77:34:2c:e8:
29:f9:4a:84:1a:31:df:fe:8c:07:82:cc:d1:3c:54:40:d7:03:
d8:26:7c:29:6c:ed:88:6b:ed:85:4a:b5:84:b4:18:1b:1d:3e:
fa:98:e3:7a:57:0b:04:89:1e:a3:b2:20:5d:a2:64:f3:86:63:
5e:80:28:4e:f9:15:94:65:84:96:f9:be:ce:2e:d8:11:01:9a:
43:e8:7e:66:08:82:44:ba:e1:3b:a5:49:0b:e7:5a:38:ca:31:
dc:c9:b0:38:f4:18:e2:77:4c:68:74:25:13:c2:a6:53:73:ea:
6c:65:63:e2:fc:08:02:aa:5f:5d:e7:1e:6d:a4:ee:73:b9:02:
f1:58:29:66:6c:da:c4:91:2a:b8:95:2a:66:da:be:df:95:09:
a4:91:09:86:a6:ef:7f:1d:e1:5b:37:a7:a0:db:cc:a6:85:41:
46:dd:ac:c9:a8:01:8a:ec:a6:4d:f2:c9:92:6e:55:fd:ab:c3:
80:6b:10:a9:35:f8:20:b0:5d:4c:96:68:2a:88:7f:8b:5b:80:
f6:ad:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:16:11 2026 by rpki-client