Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/SjRf8Xsl4sdFLcqJPbz2Pap3-vc.roa
File: SjRf8Xsl4sdFLcqJPbz2Pap3-vc.roa (raw, json)
Hash identifier: x2BiC1m4re7zXu1B5lAPa0uVVp+yoZEe6Ilh5DtaMvY=
Subject key identifier: 4A:34:5F:F1:7B:25:E2:C7:45:2D:CA:89:3D:BC:F6:3D:AA:77:FA:F7
Certificate issuer: /CN=876f88bb4cb36cf42d69d178d9c22db79a543416
Certificate serial: 01A0A5AF0B46D649E5440DE1DB0C9C847BE6
Authority key identifier: 87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/SjRf8Xsl4sdFLcqJPbz2Pap3-vc.roa
Signing time: Tue 15 Sep 2026 15:28:27 +0000
ROA not before: Tue 15 Sep 2026 15:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210967
IP address blocks: 193.0.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:af:0b:46:d6:49:e5:44:0d:e1:db:0c:9c:84:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876f88bb4cb36cf42d69d178d9c22db79a543416
Validity
Not Before: Sep 15 15:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a345ff17b25e2c7452dca893dbcf63daa77faf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:ca:8f:6c:19:98:66:8d:19:b5:ed:7b:85:
54:1a:8e:d4:af:f5:90:07:64:41:2d:1b:ab:60:38:
ea:80:a4:fc:8a:0c:fb:26:de:78:8c:5e:80:c7:eb:
97:9a:6a:ba:3d:46:6f:87:c0:b9:f6:c9:73:a3:a3:
01:4b:e1:13:98:86:d2:b2:e2:78:cf:4b:f6:03:ba:
0d:21:24:88:3b:88:76:20:ac:95:f4:38:ba:d8:9e:
fd:ba:8a:5a:dc:e9:fc:9c:f8:0e:11:0c:73:07:d5:
b7:e1:64:63:57:c5:69:af:70:e6:e0:9f:ec:51:c2:
77:5d:cc:c2:89:42:b5:ec:64:a4:6f:b4:cd:94:55:
d0:80:d3:97:4b:74:76:5a:41:a8:e4:f7:2f:77:47:
3e:4a:57:6c:5d:89:fd:32:8c:fd:9f:9a:9b:7e:10:
51:e3:8f:cd:c5:92:0c:95:37:43:ff:9c:ae:53:6b:
d9:a8:78:0a:cf:df:1d:51:f5:ef:16:3c:94:af:e6:
9b:e3:65:25:6c:f9:bb:78:4b:3c:28:05:5a:0e:7f:
70:b4:b9:15:dc:03:39:9a:26:4f:d1:9c:9b:12:f1:
ec:28:55:16:76:12:da:a3:10:cd:a6:7c:13:a0:91:
4d:ac:1c:29:c7:28:cb:4e:d0:b0:d2:b4:1a:59:1c:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:5F:F1:7B:25:E2:C7:45:2D:CA:89:3D:BC:F6:3D:AA:77:FA:F7
X509v3 Authority Key Identifier:
keyid:87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/SjRf8Xsl4sdFLcqJPbz2Pap3-vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.199.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4d:26:21:ba:26:56:03:85:bd:4b:bf:28:56:fc:1d:e7:70:
fa:d7:6f:32:b3:74:00:34:2e:ce:dd:fa:3f:63:5e:29:ca:7e:
a1:92:05:80:fd:a1:8f:2f:b3:61:c4:b3:43:cc:97:f2:e3:6b:
61:e5:f5:34:33:1a:46:ac:0b:85:94:8b:4b:13:7a:eb:e2:22:
1a:a8:05:36:61:d0:01:ae:4e:b8:7d:64:2f:1c:8f:76:d3:a2:
65:da:33:7f:5d:3e:79:04:11:7b:fa:e9:de:e8:1d:a4:a9:6a:
ee:fa:e9:a7:ec:d8:40:94:d6:39:b3:f4:f5:33:62:66:c5:6c:
11:6d:c4:66:5b:fd:27:96:84:7a:4c:61:d2:38:54:72:05:2d:
1e:77:7c:81:7d:2d:81:44:ce:86:73:14:ae:df:b1:20:3d:12:
88:66:c5:26:a9:3d:32:d8:93:df:a9:0e:79:43:de:2e:6d:1e:
53:ed:0b:2d:b0:66:2a:ef:7f:5a:48:2f:63:f5:4c:69:59:83:
4e:03:cb:a9:f7:f1:4f:0c:25:60:5a:c8:b2:12:4a:cb:bb:2d:
30:ed:9a:2d:9f:cc:ac:24:6b:38:68:8b:40:b9:2c:bf:44:01:
e4:17:78:63:5a:ee:59:99:1b:2c:82:d9:ef:30:73:6a:84:70:
68:c7:58:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaClrwtG1knlRA3h2wychHvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NmY4OGJiNGNiMzZjZjQyZDY5ZDE3OGQ5YzIyZGI3OWE1
NDM0MTYwHhcNMjYwOTE1MTUyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTM0NWZmMTdiMjVlMmM3NDUyZGNhODkzZGJjZjYzZGFhNzdmYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJPKj2wZmGaNGbXte4VUGo7Ur/WQ
B2RBLRurYDjqgKT8igz7Jt54jF6Ax+uXmmq6PUZvh8C59slzo6MBS+ETmIbSsuJ4
z0v2A7oNISSIO4h2IKyV9Di62J79uopa3On8nPgOEQxzB9W34WRjV8Vpr3Dm4J/s
UcJ3XczCiUK17GSkb7TNlFXQgNOXS3R2WkGo5Pcvd0c+SldsXYn9Moz9n5qbfhBR
44/NxZIMlTdD/5yuU2vZqHgKz98dUfXvFjyUr+ab42UlbPm7eEs8KAVaDn9wtLkV
3AM5miZP0ZybEvHsKFUWdhLaoxDNpnwToJFNrBwpxyjLTtCw0rQaWRwHVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEo0X/F7JeLHRS3KiT289j2qd/r3MB8GA1UdIwQY
MBaAFIdviLtMs2z0LWnReNnCLbeaVDQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDItSXUweXpiUFF0YWRGNDJjSXR0NXBVTkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yY2VmYTQtN2ZkZi00MTA4LThhMjct
YWQ1Y2Y4NDA1NzRkLzEvU2pSZjhYc2w0c2RGTGNxSlBiejJQYXAzLXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yY2VmYTQtN2ZkZi00MTA4LThhMjctYWQ1Y2Y4NDA1NzRk
LzEvaDItSXUweXpiUFF0YWRGNDJjSXR0NXBVTkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQDHMA0G
CSqGSIb3DQEBCwUAA4IBAQB4TSYhuiZWA4W9S78oVvwd53D6128ys3QANC7O3fo/
Y14pyn6hkgWA/aGPL7NhxLNDzJfy42th5fU0MxpGrAuFlItLE3rr4iIaqAU2YdAB
rk64fWQvHI9206Jl2jN/XT55BBF7+une6B2kqWru+umn7NhAlNY5s/T1M2JmxWwR
bcRmW/0nloR6TGHSOFRyBS0ed3yBfS2BRM6GcxSu37EgPRKIZsUmqT0y2JPfqQ55
Q94ubR5T7QstsGYq739aSC9j9UxpWYNOA8up9/FPDCVgWsiyEkrLuy0w7Zotn8ys
JGs4aItAuSy/RAHkF3hjWu5ZmRssgtnvMHNqhHBox1ho
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:30:44 2026 by rpki-client