Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa
File: SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa (raw, json)
Hash identifier: s6NzmaozxO+4w9NIyythzaRrJ0Zd5+4CkcBBGqgurQo=
Subject key identifier: 4B:21:35:20:09:57:3E:42:59:F7:F8:AA:5C:A4:08:A0:43:97:80:0B
Certificate issuer: /CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Certificate serial: 019F2368FBB920F19A135375C0E254ABF37A
Authority key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 134.151.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:b9:20:f1:9a:13:53:75:c0:e2:54:ab:f3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b21352009573e4259f7f8aa5ca408a04397800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:3d:37:fb:56:b5:42:8c:88:8b:3c:9e:c1:
02:12:05:d5:57:12:52:c2:ab:47:82:ee:eb:2f:2b:
e6:8d:a7:7a:00:ce:44:7f:7f:d9:8d:d1:7c:77:e3:
4e:1b:21:d7:93:d6:7b:18:ae:22:00:ed:82:de:f8:
5a:0f:fe:ed:28:4f:22:6e:81:0f:dd:76:f0:16:4c:
c5:1e:7f:51:59:af:8d:15:31:5b:97:3a:89:8c:27:
ed:37:75:21:7b:38:c8:65:ce:83:13:bf:5e:d8:91:
10:15:8c:8d:6e:0f:6b:bf:44:94:54:70:a9:2f:bb:
a9:bf:e5:f4:7d:6f:ae:15:df:b0:67:ae:4c:70:1f:
62:cb:90:79:c3:46:53:3a:7e:8e:7f:97:48:0f:77:
a3:9d:e5:2d:2e:0d:3c:70:72:0b:ad:c1:04:fc:e2:
e6:12:d3:43:9e:38:ab:d9:7a:a7:15:dc:18:e9:0c:
7c:fd:e8:72:7e:42:ab:8f:94:09:f1:a2:63:b9:cc:
e9:b6:a1:2f:d8:2b:2a:00:92:d2:88:4a:d9:87:ec:
93:1d:fe:cd:f4:26:ea:9f:12:f4:0b:7c:90:d0:b5:
99:16:99:f3:ad:11:75:dc:6e:05:cc:53:ff:68:70:
2a:a2:e1:24:a8:ac:c7:55:e5:23:d6:84:9a:94:6f:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:21:35:20:09:57:3E:42:59:F7:F8:AA:5C:A4:08:A0:43:97:80:0B
X509v3 Authority Key Identifier:
keyid:3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/SyE1IAlXPkJZ9_iqXKQIoEOXgAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:fb:e2:34:65:67:fc:72:65:7b:f2:1d:54:ef:bc:86:ea:31:
41:01:39:0c:d2:b7:02:1a:9b:10:df:59:2c:9a:4b:a8:1b:07:
b4:13:a2:85:71:69:95:80:69:95:a6:1d:87:8b:c4:f6:69:06:
55:b3:13:c3:40:77:7e:17:dc:5e:98:88:43:b7:8a:b4:97:04:
2d:b0:06:08:b8:fc:aa:4e:a8:68:37:7e:6c:fb:da:2e:a4:53:
7a:ef:89:51:a4:cd:68:d0:33:a5:8a:a3:c2:16:95:0e:b4:7a:
c6:ed:10:60:c2:87:9d:eb:69:bb:2d:d5:41:f2:8e:ef:f6:77:
8a:0c:9a:f6:a4:c2:b1:b8:ae:e7:54:c7:fa:00:61:23:2d:dc:
e3:c0:a0:d0:02:f1:30:dc:38:bc:32:d7:10:02:12:7b:7a:1e:
40:25:7f:92:24:c3:ad:39:8d:53:54:a9:bc:83:e2:ee:93:5c:
9e:66:a5:e4:19:5c:7a:c6:72:f7:67:de:fc:45:90:34:b0:d1:
8a:73:0e:46:fe:09:9a:74:87:d9:b5:f1:d1:69:f3:41:7b:84:
03:c6:75:18:7b:c0:b1:72:50:f9:71:be:f4:1f:1f:d6:11:c2:
0a:4d:ce:e0:ed:7d:f7:8f:ab:8b:34:6b:14:78:c8:6b:20:29:
1b:ee:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:02 2026 by rpki-client