Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/sJdr2Fb_Swcmno7YhJernLivV-4.roa
File: sJdr2Fb_Swcmno7YhJernLivV-4.roa (raw, json)
Hash identifier: UR6r+/nWVWtQENnrssjpLZJ3r+hXsPHUdwQ2sgMSnus=
Subject key identifier: B0:97:6B:D8:56:FF:4B:07:26:9E:8E:D8:84:97:AB:9C:B8:AF:57:EE
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 019F23686FA0F1ECB5A010ADC78E26153625
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/sJdr2Fb_Swcmno7YhJernLivV-4.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208444
IP address blocks: 185.192.170.0/23 maxlen: 32
2a06:5d07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:a0:f1:ec:b5:a0:10:ad:c7:8e:26:15:36:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0976bd856ff4b07269e8ed88497ab9cb8af57ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:82:ed:75:48:7f:26:80:a8:a2:46:cf:73:
64:ab:41:3e:b9:74:11:de:96:f4:d3:7e:27:0f:79:
fe:2e:36:2a:78:1d:25:67:77:1a:1d:f0:76:40:70:
5c:88:21:ba:eb:2a:ae:72:c8:36:91:c8:ac:92:ec:
35:20:da:48:f9:97:94:6d:bb:d4:3f:61:31:2d:aa:
4b:5c:8f:b8:7c:91:9f:95:92:54:6c:05:2f:e2:d4:
8f:61:ce:53:93:86:e4:d4:6d:ae:b4:fe:54:a5:d9:
69:03:0b:1e:46:df:7e:28:5e:1c:dc:2d:7d:c1:e5:
43:43:30:7e:17:08:50:3a:ef:45:5e:f9:dd:78:0d:
7e:ff:b9:87:85:6f:2c:21:fe:9a:80:78:a9:b2:39:
2a:36:46:0a:21:7f:21:8e:e2:f0:9f:41:73:24:db:
a0:33:0e:dc:44:db:f6:f2:bc:14:ba:6b:90:e2:83:
01:c6:dc:20:a7:5f:e5:23:c6:09:a1:75:33:05:7b:
ad:71:09:7d:3b:97:e0:8e:0f:b3:04:eb:3e:67:7b:
fc:d5:cd:3d:13:65:9e:bb:f0:dd:47:16:66:de:e2:
5f:51:3c:80:5f:05:99:ff:be:40:82:3f:be:59:47:
cb:a4:4e:b2:2b:08:45:7b:f5:a7:db:6b:42:1f:f5:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:6B:D8:56:FF:4B:07:26:9E:8E:D8:84:97:AB:9C:B8:AF:57:EE
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/sJdr2Fb_Swcmno7YhJernLivV-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.170.0/23
IPv6:
2a06:5d07::/32
Signature Algorithm: sha256WithRSAEncryption
17:9a:79:fb:f6:97:67:15:a7:fe:f0:1c:8c:28:30:78:0f:98:
88:a0:df:05:73:a3:af:62:10:cc:d6:49:31:f4:7f:a4:0f:f2:
f7:73:1d:c2:8c:fd:f1:ff:83:18:03:8f:e7:4d:cf:4f:cd:ac:
79:97:20:d0:d9:b2:90:d1:b2:cc:1c:9e:8e:e2:64:f5:3d:19:
69:0f:5e:67:ca:cc:10:c3:d8:45:0d:06:32:98:cd:05:7e:9c:
62:0e:b9:3a:a6:ee:48:03:f1:7b:a6:17:ee:ad:45:ff:fb:62:
c1:58:b3:ba:a8:09:90:2e:e8:48:5d:5f:58:7f:36:5d:d5:df:
81:cb:0a:86:02:76:74:a4:78:d3:3f:26:7f:78:b6:72:be:fe:
99:84:56:0c:8d:70:80:7b:7e:0f:60:f6:f8:a6:4e:cf:fa:48:
ee:ff:b3:be:e7:db:15:91:e6:97:e5:8e:40:13:2d:be:1a:10:
a3:7a:1f:d3:9e:85:ae:7a:f7:ab:2a:2e:a0:59:7e:97:ef:fa:
84:7c:c7:bd:1b:20:b0:77:2e:a4:f6:7c:7f:8e:79:a4:f9:46:
ad:4b:70:61:94:45:af:c0:92:c2:61:fd:76:06:83:b4:06:3d:
3e:44:e5:b4:41:fc:ca:97:79:c9:a7:40:5e:1f:c7:4b:05:60:
2c:d8:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:57 2026 by rpki-client