Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/s0K3J9Hfz8f1sftMuRidCQOAQhk.roa
File: s0K3J9Hfz8f1sftMuRidCQOAQhk.roa (raw, json)
Hash identifier: 1kkEqiEjaCO/BAeUP7qyZJOwB2fegbQON/HmveFaeBM=
Subject key identifier: B3:42:B7:27:D1:DF:CF:C7:F5:B1:FB:4C:B9:18:9D:09:03:80:42:19
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 019F6B93A84FD74613EBF636BD6251F92BC3
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/s0K3J9Hfz8f1sftMuRidCQOAQhk.roa
Signing time: Thu 16 Jul 2026 15:37:46 +0000
ROA not before: Thu 16 Jul 2026 15:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207966
IP address blocks: 2a00:5da1:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:93:a8:4f:d7:46:13:eb:f6:36:bd:62:51:f9:2b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jul 16 15:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b342b727d1dfcfc7f5b1fb4cb9189d0903804219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:e6:ec:c0:bb:c5:40:97:e2:c2:8c:6e:fc:
0b:f3:23:95:3c:7b:55:3e:b4:48:4e:54:3d:73:6d:
cf:29:4b:be:f9:1d:fe:41:f3:02:ae:7e:1b:23:76:
2c:b1:60:d0:95:92:3a:85:f9:70:5c:a1:2c:32:c1:
57:4c:2c:d4:64:8b:e4:12:db:3f:78:4d:44:8c:73:
e9:f7:eb:79:46:f2:8e:67:d9:42:82:09:4a:c6:4a:
ca:e3:0b:a5:34:13:00:eb:be:f9:9d:96:75:3b:7e:
46:44:e0:e0:f1:82:94:1a:aa:ef:a8:9b:bf:14:39:
d7:c0:b1:59:46:64:28:67:41:d8:2d:94:60:ee:10:
81:3d:4a:69:18:7d:30:96:b9:64:53:5c:55:42:b1:
7f:35:4c:ed:78:2c:84:d5:91:fc:49:3a:09:19:e4:
51:ee:90:27:7f:36:76:6c:9d:b9:be:df:0b:64:26:
20:ef:62:0a:e4:b2:be:59:3c:82:bb:6d:45:1b:49:
d8:9f:47:63:12:38:80:5a:cd:83:ec:d3:3a:f1:36:
e2:19:33:7e:32:62:6c:a1:5a:e4:66:6d:2f:c1:38:
00:60:42:18:8b:7e:18:68:e2:b8:ca:16:0d:fa:d2:
60:05:30:76:44:2a:c8:85:3d:5d:c4:2b:6f:a7:ea:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:B7:27:D1:DF:CF:C7:F5:B1:FB:4C:B9:18:9D:09:03:80:42:19
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/s0K3J9Hfz8f1sftMuRidCQOAQhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:5da1:100::/48
Signature Algorithm: sha256WithRSAEncryption
8c:42:ef:40:26:b8:b9:f0:41:fd:1d:68:51:40:92:14:e0:6c:
5d:4f:68:db:04:73:0d:9c:f7:16:56:16:94:12:54:a0:1a:5e:
66:11:04:bc:1d:1e:25:94:e7:c9:55:f4:ce:ef:da:38:f8:6f:
f4:e0:c5:7d:07:82:31:ef:a7:bf:15:08:c3:20:c8:a5:16:03:
7d:43:91:32:20:a8:cb:ae:03:75:47:9e:8b:66:a1:71:1a:73:
5f:d6:28:2a:bb:50:90:29:47:f0:e4:a4:cc:5b:45:20:f9:20:
e2:f7:1c:45:85:04:23:c5:9a:48:7d:12:1b:e4:40:06:2a:25:
71:2d:a1:8e:e8:c3:5a:35:6f:28:1a:ed:64:8c:f8:ef:ad:c3:
b0:08:86:b5:0a:fb:55:1f:16:f3:dc:cb:ca:33:8c:97:f0:dc:
fa:7f:cf:3b:34:0e:d8:37:4b:ad:00:ab:82:56:34:6b:d0:85:
35:f2:38:9f:8f:65:d2:a1:00:77:fa:f1:63:87:b9:a8:39:c1:
67:04:0b:2d:03:bb:52:ce:2c:9f:b6:d4:1e:54:de:c3:89:53:
af:f6:e7:7b:53:49:ea:a9:d5:3a:39:26:ae:a0:e0:e0:ff:e3:
e1:25:ba:01:6c:17:b3:5c:69:5e:9a:2c:fd:d1:4f:dc:8b:2b:
a7:90:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:39 2026 by rpki-client