Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/SADJd2JA_tQsbw64GUYHWuhfxxw.roa
File: SADJd2JA_tQsbw64GUYHWuhfxxw.roa (raw, json)
Hash identifier: nwI2du0MV+HN3KQgiJm5pzzi5Ejcsfx06jbHriIz9Do=
Subject key identifier: 48:00:C9:77:62:40:FE:D4:2C:6F:0E:B8:19:46:07:5A:E8:5F:C7:1C
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019DFDC8B7117509405A17B14FDAD45372BC
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/SADJd2JA_tQsbw64GUYHWuhfxxw.roa
Signing time: Wed 06 May 2026 14:54:42 +0000
ROA not before: Wed 06 May 2026 14:54:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203963
IP address blocks: 31.133.80.0/22 maxlen: 24
176.103.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:c8:b7:11:75:09:40:5a:17:b1:4f:da:d4:53:72:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: May 6 14:54:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4800c9776240fed42c6f0eb81946075ae85fc71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:c8:dc:29:27:ea:f0:2e:cc:aa:27:c1:65:
85:6c:33:94:9c:59:cb:44:af:e7:d0:8c:84:5a:dd:
5c:89:04:13:f3:60:d3:71:c8:a6:17:89:49:b4:cf:
a9:3a:66:7a:ce:f4:a2:4e:85:82:e2:13:3e:c1:b9:
39:36:02:23:e6:bd:d4:95:cd:52:59:2e:d6:82:d8:
74:7c:c6:3f:48:1e:3c:67:57:95:ba:4d:9c:a6:c8:
dd:75:00:ab:31:25:4e:34:f9:81:86:21:ed:8b:4c:
9f:61:5b:26:c2:86:1d:e0:61:8c:8f:50:8a:5f:e0:
bf:b8:61:6b:33:7a:b7:3b:a4:08:7b:c3:5e:50:8c:
69:8f:f2:da:d6:1a:4d:a1:ce:57:af:65:5b:eb:0a:
5b:f5:b6:61:a5:1a:4b:c7:5a:be:89:62:77:85:19:
09:ab:f1:20:68:9a:52:17:6b:86:3c:32:38:80:03:
aa:14:38:7d:81:fb:f1:61:b1:3b:81:23:29:90:52:
86:a3:fe:7c:2a:0f:9a:61:ba:43:1f:d0:39:88:e1:
78:66:6c:0c:b7:7e:18:68:a6:2e:3b:a9:09:b8:3d:
51:aa:8a:30:df:59:f3:b7:40:5b:16:59:ba:21:cb:
3f:7a:86:19:82:fd:7d:b5:aa:a5:de:92:d2:ae:2a:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:C9:77:62:40:FE:D4:2C:6F:0E:B8:19:46:07:5A:E8:5F:C7:1C
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/SADJd2JA_tQsbw64GUYHWuhfxxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
176.103.224.0/22
Signature Algorithm: sha256WithRSAEncryption
55:57:de:fb:7a:15:08:76:02:73:77:a1:08:b9:50:0c:f0:60:
f6:6d:cd:d5:4f:df:41:95:5d:c1:97:37:31:4a:8f:13:fb:e9:
47:be:d5:35:12:2c:9d:39:b5:48:70:88:bf:75:59:46:33:37:
e1:80:bf:0a:b6:d0:93:58:37:68:d6:71:f2:ac:fb:64:9b:d9:
c8:71:75:3a:53:f8:c0:b9:3c:a5:a9:81:eb:90:43:e3:3f:bb:
00:eb:26:d1:e5:a3:3a:88:e8:0b:c4:33:e3:70:fa:13:d9:f8:
13:24:2a:8f:9d:51:11:6d:84:62:a7:de:15:16:4b:12:63:cd:
b6:07:45:7d:81:9e:55:69:75:77:19:04:13:b2:46:97:7d:37:
07:13:0a:a1:0a:81:0d:65:c1:36:d0:c7:aa:67:a2:1b:c5:40:
b2:50:2c:20:a6:fd:25:4f:7b:73:1d:d6:6b:bb:3d:6a:4b:e5:
01:af:e8:cb:a2:94:a1:c5:82:a8:54:05:32:9a:61:4d:07:9e:
4f:4c:a9:4c:a7:be:2c:af:20:65:4c:e8:38:b3:81:2c:77:0b:
96:a7:a3:e5:61:f9:db:c5:f6:af:cf:af:96:d6:9f:e2:77:93:
89:5e:9f:b4:be:72:bc:9c:8f:74:64:b5:f8:22:7f:68:15:ef:
55:3e:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:00 2026 by rpki-client