Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/SAdG_ltq21So6we7PAnL5y8GnAE.roa
File: SAdG_ltq21So6we7PAnL5y8GnAE.roa (raw, json)
Hash identifier: vdA/VKJ3jIWlwu5h51e9/T2jAaSzyxtrlOoDwppTFZo=
Subject key identifier: 48:07:46:FE:5B:6A:DB:54:A8:EB:07:BB:3C:09:CB:E7:2F:06:9C:01
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019F226358161DCFEDA573B9A135B8478655
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/SAdG_ltq21So6we7PAnL5y8GnAE.roa
Signing time: Thu 02 Jul 2026 10:32:43 +0000
ROA not before: Thu 02 Jul 2026 10:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 2a14:a084:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:63:58:16:1d:cf:ed:a5:73:b9:a1:35:b8:47:86:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jul 2 10:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=480746fe5b6adb54a8eb07bb3c09cbe72f069c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:c5:82:01:35:e1:12:69:07:be:a8:c2:88:
82:ec:ca:67:61:39:f0:14:e5:63:14:88:43:0c:dc:
5e:ec:3d:96:76:b1:70:b9:dc:18:80:fb:29:52:df:
a4:2b:6a:1d:cb:f5:27:b0:fb:07:85:b3:08:19:41:
4a:db:1f:70:16:b3:7e:4e:2b:9b:7d:c3:fb:c0:67:
89:07:b4:ac:4e:8c:b6:86:b0:18:ba:9b:08:da:22:
a9:ce:21:dc:3d:74:a2:b7:a9:7a:e4:5f:85:d6:66:
16:bb:3a:48:3a:f1:3c:bd:3e:39:96:81:19:65:70:
ec:3f:b2:be:b3:30:0a:75:1b:9d:33:2d:92:7c:5a:
46:d7:91:3c:fe:95:dd:70:2f:53:fd:1f:85:92:41:
38:de:7c:43:ac:25:b1:4e:5f:7f:74:d3:75:a1:f0:
8f:cb:81:1b:98:57:e0:a7:f0:34:16:d1:84:ad:f1:
02:44:1d:ec:88:3e:7d:d5:b5:d7:35:2b:b4:bc:56:
cc:58:cc:e7:27:5c:21:01:49:af:a6:30:cb:ce:8d:
35:67:30:3e:31:31:33:75:97:94:3b:d5:40:30:44:
fb:a9:67:51:c0:f4:55:11:1a:c9:94:b1:1e:64:00:
e9:d1:fc:ff:9d:9e:12:77:25:42:14:50:76:5f:09:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:07:46:FE:5B:6A:DB:54:A8:EB:07:BB:3C:09:CB:E7:2F:06:9C:01
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/SAdG_ltq21So6we7PAnL5y8GnAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a084:f000::/36
Signature Algorithm: sha256WithRSAEncryption
49:6b:c5:2c:fa:19:6d:29:98:c7:e9:d2:57:33:51:65:c5:c8:
86:35:c2:fc:f1:cd:a0:9b:03:fe:1b:d0:03:b7:b0:c1:a5:b1:
b9:bf:f7:22:65:73:7b:d5:c0:60:08:38:d9:b4:3b:6c:f0:4b:
57:08:23:ec:a5:a1:da:dc:3a:59:5a:da:9b:9f:0d:30:9d:63:
fb:c5:b8:53:b1:17:d6:28:b1:b5:c7:76:cd:13:77:c1:70:ba:
5f:38:f4:be:a1:31:77:2e:54:40:a3:63:74:4f:03:e5:7b:8a:
58:f5:98:7d:a2:c6:c5:d5:b3:35:b1:2d:0e:bb:29:08:f8:1d:
b2:bc:c3:b5:ca:5a:a3:26:0b:de:4d:84:9d:26:70:a2:da:2e:
01:31:5b:0f:69:55:df:6b:56:3a:a3:91:29:1c:0d:e6:75:9b:
da:7a:f3:f2:2e:23:56:72:77:a2:1d:7e:f0:dc:06:f6:48:bd:
ac:5a:fb:5a:eb:53:99:e2:8c:02:d2:de:bc:1e:85:19:e4:b5:
8a:a7:7f:9e:d0:10:5d:d7:bc:c9:54:40:d9:18:6c:25:1c:0a:
76:29:3e:58:81:90:92:fa:14:ad:e3:1d:6c:c7:71:89:90:8f:
fa:05:26:0b:c6:75:b4:0f:06:14:01:81:c7:ce:31:7f:bd:80:
08:d5:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:31 2026 by rpki-client