Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa
File: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (raw, json)
Hash identifier: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=
Subject key identifier: 4A:FB:3C:59:A6:0C:68:16:28:A0:02:B9:2E:56:DD:AF:45:F0:7F:4A
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019F18DD4B5B9BFCE68C59A0DCF3A3170551
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa
Signing time: Tue 30 Jun 2026 14:09:43 +0000
ROA not before: Tue 30 Jun 2026 14:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24595
IP address blocks: 85.159.96.0/21 maxlen: 24
185.94.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:dd:4b:5b:9b:fc:e6:8c:59:a0:dc:f3:a3:17:05:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jun 30 14:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4afb3c59a60c681628a002b92e56ddaf45f07f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:5a:b4:d7:4b:f4:61:6e:ed:df:ca:76:bc:
d0:3a:a8:fa:6e:fa:a8:61:62:af:48:af:cc:b7:f7:
23:25:61:95:89:0d:3a:cc:3f:bf:79:e8:b8:4a:c5:
64:69:94:a3:1c:f5:23:4f:b8:a0:be:f7:6a:0c:66:
16:86:86:00:bc:ee:ce:85:1a:fb:90:93:2d:3d:95:
18:f3:70:f1:6e:a9:68:74:6b:66:1d:01:d4:ef:34:
4f:b0:3f:31:34:d4:fb:3a:87:8a:f0:65:1f:64:fe:
4c:c4:54:5f:32:b5:bc:8a:a5:7b:b4:4e:09:cb:de:
61:f6:99:c1:be:91:fa:41:1c:9b:df:86:7c:18:ca:
58:b8:c5:25:4a:82:95:d9:4a:80:79:03:7b:52:00:
4d:d8:6d:c4:1e:c9:8d:07:e9:9e:e1:7c:48:91:bd:
67:e4:59:a6:0d:99:06:88:df:37:51:2b:03:f4:2f:
28:c6:17:33:8a:48:b3:a2:97:4c:90:a8:35:ed:84:
4e:c7:f0:08:10:19:25:42:42:f2:3d:89:b1:4d:92:
71:fe:44:af:77:b1:e8:85:56:c9:cb:e4:12:32:4f:
a9:97:d8:8f:c6:b6:08:7d:3c:09:ee:c6:3c:04:77:
6e:28:57:f1:af:73:ee:9c:53:e1:b9:ac:6c:51:75:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:3C:59:A6:0C:68:16:28:A0:02:B9:2E:56:DD:AF:45:F0:7F:4A
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.96.0/21
185.94.120.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:2a:92:bb:a5:44:b1:67:13:34:04:6a:fa:f9:7b:1e:63:8d:
f1:45:37:0c:ed:eb:a3:11:3d:9c:34:eb:3b:8e:f5:75:0f:4f:
cb:d9:ec:e3:0a:42:de:51:c5:d0:ed:2c:00:c1:54:ec:11:06:
81:ad:6a:5e:29:e8:ea:d7:32:8d:ab:f3:88:48:db:51:01:10:
39:21:fe:39:bf:aa:aa:05:b3:7e:74:bb:ff:8c:fe:41:ea:81:
a5:ef:c9:5c:52:b4:c7:db:6f:16:f0:ac:90:46:1c:cc:61:2a:
7a:0b:30:64:a7:1a:8f:75:76:b3:01:b6:2f:31:41:13:d5:01:
bf:e5:c1:71:a9:d8:be:ba:cc:e4:08:2f:fd:e1:7f:79:1d:d1:
82:91:6f:bb:5a:4a:b5:16:c8:de:5b:1d:96:28:71:0a:03:ca:
c3:b8:b6:dc:dc:b0:92:54:99:0b:09:07:3a:e5:2c:78:a0:37:
c6:34:db:11:a9:e1:3d:c9:ab:ea:67:14:cf:6b:80:e7:a0:6d:
f5:2e:c4:3c:5f:cb:8a:57:e0:29:eb:e3:e4:c7:4b:a7:cf:28:
9b:26:2b:45:39:b7:90:6c:cf:8b:90:6d:a2:13:ae:46:b4:67:
62:48:04:74:d4:c9:7c:ff:99:22:b0:4a:a4:2b:f9:d1:0c:62:
76:d0:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:00 2026 by rpki-client