Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SDSXodgEpy3sT9QG11ill2-rJrQ.roa
File: SDSXodgEpy3sT9QG11ill2-rJrQ.roa (raw, json)
Hash identifier: 4aOwXPo+yY66jKQdXRo9AHFCLz4Nqpjdshvs7pg7XPg=
Subject key identifier: 48:34:97:A1:D8:04:A7:2D:EC:4F:D4:06:D7:58:A5:97:6F:AB:26:B4
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019CE1AA2821A26E1E927F392E9A21410954
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SDSXodgEpy3sT9QG11ill2-rJrQ.roa
Signing time: Thu 12 Mar 2026 10:49:10 +0000
ROA not before: Thu 12 Mar 2026 10:49:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 212.16.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:aa:28:21:a2:6e:1e:92:7f:39:2e:9a:21:41:09:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 12 10:49:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=483497a1d804a72dec4fd406d758a5976fab26b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:25:d0:74:6c:ac:1e:30:1c:5f:46:ca:7d:
ee:04:40:49:a9:4a:ca:ae:b7:2d:85:f0:6f:0f:d1:
67:7d:d3:3f:47:0c:7a:ba:af:6d:49:2c:87:95:d2:
41:de:1f:24:14:45:01:ac:12:d1:e4:d6:c0:ff:fe:
fe:0b:fc:2e:88:84:60:a6:0e:b1:b6:d9:42:fb:01:
30:e1:58:a6:10:60:14:94:9d:8b:cd:67:5a:ec:d5:
4e:ae:d7:f5:99:cd:b0:b0:77:23:5d:69:6a:cf:cb:
0f:22:50:c3:de:94:f5:cd:5c:2a:2c:1d:46:06:07:
f7:d4:ee:e4:62:d4:c2:6c:d1:52:86:f4:73:48:fa:
03:81:6e:ef:3c:d4:c9:9b:37:1a:ab:11:eb:c0:f4:
2f:2f:1a:8a:49:0f:8a:81:67:5a:2d:fb:bf:c5:73:
40:b1:e5:16:ab:16:2f:2e:8c:47:3c:63:a4:3a:0e:
be:1d:5f:b3:c6:85:ca:36:37:e3:25:e3:d6:b4:91:
e3:2a:20:c6:88:f3:d3:4b:22:34:48:26:6a:60:ce:
ee:68:17:5b:07:f1:42:bc:dc:01:61:68:f8:09:9e:
08:4f:00:50:6d:3f:12:1b:e0:2e:5b:a6:36:46:13:
7c:3c:8e:76:60:59:e1:ab:8a:79:a3:7a:49:a2:f8:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:34:97:A1:D8:04:A7:2D:EC:4F:D4:06:D7:58:A5:97:6F:AB:26:B4
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SDSXodgEpy3sT9QG11ill2-rJrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e8:70:a4:2b:76:8e:aa:34:c2:83:60:2e:e6:d0:10:19:27:
e5:88:a6:46:70:d1:69:96:4b:22:07:47:b2:cf:9a:95:4c:0f:
22:41:c5:40:19:75:5b:b6:12:57:32:8a:e9:77:58:44:71:c3:
5f:ea:d4:2f:7d:f5:1d:8c:76:03:6f:7c:22:9a:15:de:33:5a:
aa:11:91:0f:04:05:f9:31:72:c7:84:17:a2:85:ce:6c:d9:51:
7f:7d:4b:24:1d:f6:90:c8:94:ab:0a:65:dd:b3:b0:ce:a8:1d:
77:54:80:a2:45:0e:13:33:ee:f6:8a:f0:77:3f:aa:25:5b:d0:
96:a7:95:22:a9:f7:ea:06:4b:80:f0:64:46:68:20:80:3e:23:
07:ab:6c:cf:cc:ec:fb:b3:c3:fd:a8:5c:36:3c:8a:18:83:9b:
77:cf:6a:47:d1:b9:9a:06:de:c4:9b:f1:22:a7:e1:ff:f5:e9:
c2:91:1f:e4:14:1f:db:7d:c4:da:ff:1d:a1:30:6f:a6:7b:04:
d8:34:c7:cf:2e:e5:1f:0b:e0:e9:01:68:a2:c9:6e:92:3d:e6:
51:fe:97:0c:76:26:dd:d1:ea:d4:07:a3:20:ab:0b:6e:7c:a0:
07:d9:7b:74:bc:cf:74:c4:c8:76:d6:c6:4f:f0:bd:d0:0e:f8:
08:95:fa:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzhqighom4ekn85LpohQQlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwMzEyMTA0OTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODM0OTdhMWQ4MDRhNzJkZWM0ZmQ0MDZkNzU4YTU5NzZmYWIyNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWol0HRsrB4wHF9Gyn3uBEBJqUrK
rrcthfBvD9FnfdM/Rwx6uq9tSSyHldJB3h8kFEUBrBLR5NbA//7+C/wuiIRgpg6x
ttlC+wEw4VimEGAUlJ2LzWda7NVOrtf1mc2wsHcjXWlqz8sPIlDD3pT1zVwqLB1G
Bgf31O7kYtTCbNFShvRzSPoDgW7vPNTJmzcaqxHrwPQvLxqKSQ+KgWdaLfu/xXNA
seUWqxYvLoxHPGOkOg6+HV+zxoXKNjfjJePWtJHjKiDGiPPTSyI0SCZqYM7uaBdb
B/FCvNwBYWj4CZ4ITwBQbT8SG+AuW6Y2RhN8PI52YFnhq4p5o3pJovizzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEg0l6HYBKct7E/UBtdYpZdvqya0MB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvU0RTWG9kZ0VweTNzVDlRRzExaWxsMi1ySnJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BBPMA0G
CSqGSIb3DQEBCwUAA4IBAQCF6HCkK3aOqjTCg2Au5tAQGSfliKZGcNFplksiB0ey
z5qVTA8iQcVAGXVbthJXMorpd1hEccNf6tQvffUdjHYDb3wimhXeM1qqEZEPBAX5
MXLHhBeihc5s2VF/fUskHfaQyJSrCmXds7DOqB13VICiRQ4TM+72ivB3P6olW9CW
p5UiqffqBkuA8GRGaCCAPiMHq2zPzOz7s8P9qFw2PIoYg5t3z2pH0bmaBt7Em/Ei
p+H/9enCkR/kFB/bfcTa/x2hMG+mewTYNMfPLuUfC+DpAWiiyW6SPeZR/pcMdibd
0erUB6MgqwtufKAH2Xt0vM90xMh21sZP8L3QDvgIlfqI
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:04 2026 by rpki-client