Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sPOjXLaPD_CzUVMyI7CbzPRdgs4.roa
File: sPOjXLaPD_CzUVMyI7CbzPRdgs4.roa (raw, json)
Hash identifier: v534ZmUiyMC3g86kZIIQd6M/zTgAnXWMncvVxZVTrBw=
Subject key identifier: B0:F3:A3:5C:B6:8F:0F:F0:B3:51:53:32:23:B0:9B:CC:F4:5D:82:CE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F906AEF654E538147648C53E8C28AB0E3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sPOjXLaPD_CzUVMyI7CbzPRdgs4.roa
Signing time: Thu 23 Jul 2026 19:19:14 +0000
ROA not before: Thu 23 Jul 2026 19:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 212.189.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:6a:ef:65:4e:53:81:47:64:8c:53:e8:c2:8a:b0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 19:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0f3a35cb68f0ff0b351533223b09bccf45d82ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:02:5d:6a:a2:57:40:4a:75:82:43:3b:94:
4d:d3:7c:95:d4:f3:16:be:db:b5:a9:bd:b7:c9:45:
98:9d:a8:6c:a7:81:dd:a5:6c:03:ce:f4:0a:cb:01:
90:e3:c1:f7:91:3e:df:5e:ee:05:24:1f:db:72:b4:
a5:f4:64:be:fd:39:40:20:a8:79:fc:ed:f4:71:bf:
e9:b8:e1:8c:6f:71:74:03:9c:7f:b7:c9:9e:dc:58:
f4:5f:31:66:b4:f7:e9:c5:c5:5e:b7:58:52:94:6d:
db:e9:53:4d:49:60:b1:ba:48:48:6d:5b:f1:6c:f0:
cb:f7:9d:e0:d6:cc:f2:c9:6e:7f:9e:bd:7f:22:4c:
b2:9d:8b:55:90:c3:01:74:dc:91:97:98:1f:4d:27:
69:5a:49:04:66:10:cb:04:a0:d7:9a:c7:a1:0d:cb:
90:5b:93:cf:ab:c0:5e:a6:dd:bb:72:d3:55:c3:8c:
86:b2:ab:f5:1d:d6:65:19:d4:bd:b8:0d:3d:be:06:
16:21:d3:ac:ab:f4:cb:79:b2:9a:08:05:7f:77:b7:
ca:8b:70:ea:11:b2:ca:ab:27:4a:29:18:d1:15:ec:
a4:bf:4b:a7:8e:d9:4c:5c:5f:b3:d7:1a:30:8b:06:
43:b5:0e:b3:ec:48:b2:df:3b:e5:8a:13:fd:b2:c3:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F3:A3:5C:B6:8F:0F:F0:B3:51:53:32:23:B0:9B:CC:F4:5D:82:CE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sPOjXLaPD_CzUVMyI7CbzPRdgs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.45.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c7:3b:fc:2c:25:a2:22:03:61:b6:24:2e:80:3c:36:94:03:
2c:58:76:51:db:5c:ba:a2:bc:ea:9c:a0:2f:48:4c:d7:48:8f:
78:0d:22:72:05:da:ec:f5:92:ab:aa:a0:ea:72:c3:7e:84:54:
8d:fe:75:77:50:3f:e4:47:28:cb:bb:b3:ee:a5:27:9b:c7:10:
95:34:7d:21:1c:a6:e3:4b:d1:c6:f5:6a:5c:ca:c8:62:94:ee:
ee:fc:23:06:ec:72:29:4b:c9:b5:54:57:4a:fc:9a:e4:b1:85:
75:c3:84:fd:cf:e9:e7:02:21:87:cb:01:2c:3f:00:fc:84:d0:
3e:24:2c:bf:97:59:25:80:39:0e:8c:14:35:94:97:50:57:64:
06:64:d8:00:f4:af:35:fa:e8:f1:af:a5:39:40:fe:3b:0d:02:
1d:62:66:86:a9:4e:58:e8:94:c9:cc:35:68:44:32:b5:57:d9:
2a:bd:8f:87:07:fc:ce:26:0d:52:d1:47:15:30:9d:a7:b3:4a:
aa:a1:9e:62:77:56:02:74:25:b9:bb:5c:80:f8:e5:a9:c9:ee:
df:6e:ed:6b:7c:29:d1:02:16:cc:59:3a:7b:03:78:c5:6d:4f:
4f:90:44:82:d4:df:44:a6:30:59:2f:25:3f:2d:5b:b4:08:bc:
19:06:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:33:03 2026 by rpki-client