Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/sJWB4eLfvhtxsV8PR6OyIiR-JHg.roa
File: sJWB4eLfvhtxsV8PR6OyIiR-JHg.roa (raw, json)
Hash identifier: y7Y2h28IypOc/psnRYa9dsMhvRkfHrLtiwgzkDptvV4=
Subject key identifier: B0:95:81:E1:E2:DF:BE:1B:71:B1:5F:0F:47:A3:B2:22:24:7E:24:78
Certificate issuer: /CN=33b0128c68116c003d106bfeca8ee812a728f7e7
Certificate serial: 01A187E003616DFE94034C7247F75C85D5DC
Authority key identifier: 33:B0:12:8C:68:11:6C:00:3D:10:6B:FE:CA:8E:E8:12:A7:28:F7:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7ASjGgRbAA9EGv-yo7oEqco9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/sJWB4eLfvhtxsV8PR6OyIiR-JHg.roa
Signing time: Thu 29 Oct 2026 13:36:07 +0000
ROA not before: Thu 29 Oct 2026 13:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218564
IP address blocks: 2001:678:13b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/M7ASjGgRbAA9EGv-yo7oEqco9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/M7ASjGgRbAA9EGv-yo7oEqco9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7ASjGgRbAA9EGv-yo7oEqco9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:e0:03:61:6d:fe:94:03:4c:72:47:f7:5c:85:d5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b0128c68116c003d106bfeca8ee812a728f7e7
Validity
Not Before: Oct 29 13:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b09581e1e2dfbe1b71b15f0f47a3b222247e2478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:c6:60:24:e2:1c:0a:58:32:bb:1e:43:58:
2f:ff:19:d5:7f:74:e1:2e:bd:85:64:b6:13:4f:e0:
a6:8b:b9:00:c7:1f:a7:ed:d3:71:2a:93:18:2c:b2:
54:d7:76:dd:24:82:35:99:30:6b:38:5d:b5:5a:7a:
c6:24:73:bf:09:34:f2:8d:2d:dd:5b:c2:5f:10:aa:
b7:79:46:4f:36:34:88:15:8b:3b:95:97:76:9a:16:
0c:61:55:ee:33:59:bf:28:a5:78:d7:85:ed:52:2d:
2d:af:d9:ec:f9:f4:b3:f1:8b:4a:c1:06:8b:36:d0:
7f:e6:51:47:96:73:56:b7:7a:3e:8d:af:5b:25:97:
49:b4:a9:c6:e9:7b:a2:df:4f:ba:f8:ac:79:5a:15:
15:88:bb:a4:ce:3a:ce:2e:ea:86:cf:52:3a:43:5b:
32:46:cc:03:ea:80:00:ab:f2:b6:65:1e:4f:a2:df:
cd:92:07:69:61:a3:fe:93:c4:62:1f:a9:f0:88:06:
51:0b:12:87:cd:9c:04:37:2a:06:ab:4c:ec:3e:42:
c6:e9:64:3a:2c:a8:69:a6:d2:61:bf:d7:f5:2e:12:
b2:c9:44:3d:06:d4:66:72:a5:10:71:2c:e3:69:dd:
76:e8:58:0c:97:d1:3b:5f:64:a4:b9:dd:5f:43:f2:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:81:E1:E2:DF:BE:1B:71:B1:5F:0F:47:A3:B2:22:24:7E:24:78
X509v3 Authority Key Identifier:
keyid:33:B0:12:8C:68:11:6C:00:3D:10:6B:FE:CA:8E:E8:12:A7:28:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7ASjGgRbAA9EGv-yo7oEqco9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/sJWB4eLfvhtxsV8PR6OyIiR-JHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/M7ASjGgRbAA9EGv-yo7oEqco9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13b0::/48
Signature Algorithm: sha256WithRSAEncryption
37:15:58:84:c6:a2:62:ad:71:8c:98:12:60:84:32:04:0a:7a:
e5:01:6e:31:f7:89:ad:4f:d5:b7:d3:e7:0c:99:5b:c9:2c:45:
2a:12:cc:e0:cb:90:79:a5:4f:d0:d5:76:c4:65:8c:84:8c:6b:
68:29:9a:36:2b:75:04:a9:09:78:93:e9:90:2f:24:13:1f:d4:
21:81:a8:1d:6c:b8:29:70:97:62:e7:d7:b7:70:79:db:71:8e:
5d:1e:92:96:7c:16:10:b5:5a:15:33:80:b4:75:fe:01:ef:12:
01:2d:cc:17:13:5e:49:ed:1e:b1:a9:b3:16:82:a2:94:60:57:
1b:ad:1c:0e:f8:43:c8:d8:92:a3:76:d7:c9:10:cd:2e:d9:36:
7e:26:b4:ff:ca:42:9e:13:43:3b:9d:e4:97:eb:99:99:38:79:
db:21:ce:1f:f3:bf:f0:8e:37:79:6e:11:0e:16:87:b6:58:57:
15:89:0c:16:5a:cd:83:af:7a:cb:26:db:85:2f:7a:47:f8:c1:
3c:bb:e8:cc:7d:da:8c:66:30:9f:64:84:3b:93:64:92:c6:e6:
17:83:3f:80:47:9c:b1:56:a7:ee:63:a3:11:0b:e7:e8:32:56:
9b:1f:69:c5:59:06:6b:6d:52:0a:20:e0:8d:9e:31:6f:03:fb:
52:85:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:34:41 2026 by rpki-client