Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sfz1sFsdSADRLdO8lJp3uRQ8pr8.roa
File: sfz1sFsdSADRLdO8lJp3uRQ8pr8.roa (raw, json)
Hash identifier: Z576HBBZXceA7mdSbpkm2qCktOv+L61ofuu6hdtyN5o=
Subject key identifier: B1:FC:F5:B0:5B:1D:48:00:D1:2D:D3:BC:94:9A:77:B9:14:3C:A6:BF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0D37F602E55345A08B8B939EB51A3AF52
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sfz1sFsdSADRLdO8lJp3uRQ8pr8.roa
Signing time: Thu 24 Sep 2026 12:58:55 +0000
ROA not before: Thu 24 Sep 2026 12:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146813
IP address blocks: 212.189.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:7f:60:2e:55:34:5a:08:b8:b9:39:eb:51:a3:af:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 24 12:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1fcf5b05b1d4800d12dd3bc949a77b9143ca6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:79:69:04:a2:7b:99:e8:1a:bf:74:79:0c:
88:e0:b0:95:d1:8c:65:e0:9e:43:19:ce:0c:83:5f:
64:73:27:95:46:3b:61:f5:39:c4:40:42:ed:fe:3b:
ac:35:e4:1e:d6:e5:60:35:60:6c:f6:f6:0e:49:cd:
84:de:42:ca:c7:3f:d8:16:4a:4e:79:9f:e8:2f:3b:
60:79:d8:8a:91:65:8c:05:21:7b:85:fc:e4:2d:fa:
b3:42:01:4b:da:52:c3:79:50:69:76:68:35:b0:d2:
69:56:95:ba:5d:1c:65:0c:00:e4:3b:08:92:cb:4b:
2c:94:6c:03:24:7b:3f:b1:e9:c4:c7:35:80:4b:5f:
3b:36:05:bd:5d:cb:76:d5:df:a7:62:6d:c3:e8:e3:
53:1a:1b:b2:d9:0e:01:11:a9:73:90:88:bb:59:f1:
2e:88:12:b6:3f:37:08:78:77:33:af:6c:47:cb:7e:
8a:08:68:cf:a3:06:11:90:8c:6f:1d:ec:3c:a7:3a:
cd:a5:e3:f4:42:f7:16:92:51:b4:d8:08:b4:ea:3c:
33:f1:eb:55:d1:53:4c:ee:12:20:ff:a3:ec:7b:2f:
6f:b3:9a:c1:16:99:97:ab:5c:22:3e:35:f5:19:c9:
ad:1f:7a:4a:0f:ff:63:6a:88:1b:fe:7f:73:f7:d2:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:F5:B0:5B:1D:48:00:D1:2D:D3:BC:94:9A:77:B9:14:3C:A6:BF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sfz1sFsdSADRLdO8lJp3uRQ8pr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:42:06:8c:d9:74:71:3f:bf:52:2a:75:d4:98:b0:b2:ce:b8:
6f:5d:07:94:91:15:34:50:99:1f:14:0e:e8:3f:1c:dc:c2:25:
40:52:cc:b1:56:de:a2:96:4c:d9:ed:f6:54:10:57:7a:2b:dc:
95:e5:5a:d4:85:e7:33:76:66:a1:aa:a9:64:d2:af:da:c6:b3:
28:cc:1c:3f:0b:09:c9:12:cb:bb:c0:8e:b5:3f:8a:4b:f1:44:
4f:72:44:1b:7c:15:ce:97:34:24:0d:27:4f:b1:c7:e8:a2:73:
49:25:08:c5:03:c0:2a:c6:1c:66:d2:d0:4d:86:79:28:82:47:
c0:b1:3a:79:92:3f:35:80:77:d7:19:a5:7d:e5:57:94:41:60:
9d:5c:eb:26:ac:99:de:5c:dd:af:b1:01:97:35:de:d7:e0:a5:
07:9f:1f:c5:9a:a9:26:22:f0:cc:fb:c6:fc:29:cd:77:e0:79:
9d:9a:d1:45:f5:b2:0e:7d:42:bf:91:9d:18:81:03:0d:62:04:
d0:dd:d9:22:5d:82:59:f9:e3:99:5b:66:fe:bc:8d:36:1f:3b:
ad:80:e1:e0:bb:b4:5d:f2:d0:78:0c:a3:71:d9:4b:16:dc:67:
69:62:4a:81:c1:ae:b6:96:93:95:a0:98:2b:05:b7:22:97:c9:
53:45:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:58 2026 by rpki-client