Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Sdcf2dHZqQivboyuko2C7HiYjjk.roa
File: Sdcf2dHZqQivboyuko2C7HiYjjk.roa (raw, json)
Hash identifier: TB/q3GnkSetf9euk52uPTmgDhdeYTD4KIv37dJknSdw=
Subject key identifier: 49:D7:1F:D9:D1:D9:A9:08:AF:6E:8C:AE:92:8D:82:EC:78:98:8E:39
Certificate issuer: /CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Certificate serial: 019F2368BBBE5C4043EB06DB7C10F13C61A1
Authority key identifier: DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Sdcf2dHZqQivboyuko2C7HiYjjk.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50157
IP address blocks: 62.76.121.0/24 maxlen: 24
195.209.152.0/24 maxlen: 24
195.209.153.0/24 maxlen: 24
195.209.154.0/24 maxlen: 24
195.209.155.0/24 maxlen: 24
195.209.156.0/24 maxlen: 24
195.209.157.0/24 maxlen: 24
195.209.158.0/24 maxlen: 24
195.209.159.0/24 maxlen: 24
212.192.191.0/24 maxlen: 24
2001:67c:614::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bb:be:5c:40:43:eb:06:db:7c:10:f1:3c:61:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49d71fd9d1d9a908af6e8cae928d82ec78988e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:03:7d:31:57:47:7a:a6:88:45:c4:76:e0:
3a:76:51:25:4d:36:52:e6:98:75:99:3c:30:75:fb:
a6:4f:37:fa:5f:43:8e:4d:d8:94:9d:90:26:6a:f7:
c3:db:63:82:5b:57:45:c2:45:54:67:75:80:eb:e6:
c6:5c:fb:7f:d4:9a:6c:7f:4a:94:ee:66:f6:6c:49:
d2:23:df:f3:56:ad:db:c4:21:7a:aa:90:bd:e8:d8:
de:81:1c:5b:68:58:38:18:bf:93:4b:cb:55:ea:89:
87:f0:55:f0:83:3a:b8:01:ec:05:fb:65:6b:a5:52:
fa:23:39:49:bf:95:a8:ee:b0:e3:86:f5:ee:1a:a5:
7a:6e:a7:20:e0:45:46:14:9a:f1:0a:a0:af:68:a8:
c0:cf:78:b9:90:86:6b:11:1b:70:3c:45:38:01:42:
3e:5f:bd:fa:f4:c3:f4:0a:1c:11:56:f6:a1:dd:40:
08:34:b3:f3:4e:18:52:aa:e0:a3:a4:c2:ed:1d:b0:
6e:fd:46:f7:f7:ff:8f:18:ae:df:fa:c5:41:31:0c:
f6:ab:d7:a9:ec:66:78:7c:77:42:bb:99:e7:c7:29:
6d:f0:15:48:7c:cc:97:d6:7d:5a:2a:48:67:8e:e3:
f2:3b:e6:bb:7c:0a:6b:0e:9a:44:8c:55:f7:29:4c:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D7:1F:D9:D1:D9:A9:08:AF:6E:8C:AE:92:8D:82:EC:78:98:8E:39
X509v3 Authority Key Identifier:
keyid:DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Sdcf2dHZqQivboyuko2C7HiYjjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.121.0/24
195.209.152.0/21
212.192.191.0/24
IPv6:
2001:67c:614::/48
Signature Algorithm: sha256WithRSAEncryption
2d:c6:a0:91:e5:7b:68:a1:dc:a1:f6:3a:37:7d:51:4c:e2:37:
f4:e6:74:ff:89:9a:70:0d:88:1c:aa:7f:43:31:c1:93:f1:4f:
dc:e8:58:ca:3c:8c:dd:2c:80:6e:bf:a7:aa:ec:da:a8:42:18:
66:51:27:61:ab:42:ce:32:bd:64:53:08:b6:c0:b1:08:59:f6:
d9:19:ec:27:e1:0b:fa:f3:6f:6d:fe:65:67:49:fa:96:44:82:
20:89:81:7e:b4:15:4f:bb:62:3b:1e:0c:d8:6d:c5:b7:94:36:
fa:07:9a:c7:cf:1b:af:a0:fb:62:da:e3:f2:d1:75:7f:6a:30:
03:92:c7:06:6f:4e:3d:f3:fe:7d:31:d6:50:be:6e:a3:6e:4a:
ec:93:01:f5:f9:8f:50:21:18:c3:eb:aa:2f:10:fc:a8:ef:c8:
d2:18:d3:83:ba:7c:1f:0a:f3:ea:df:3d:c6:48:78:d5:9d:ef:
e4:e6:de:39:e9:6d:0a:23:fc:b2:37:38:95:07:48:88:85:44:
f5:59:0b:3a:76:24:96:a7:8e:8b:c8:06:45:c3:8a:d5:9d:0f:
91:81:3d:0a:61:a7:d7:2a:35:4c:85:0d:39:33:34:3b:b7:e9:
77:73:53:8d:f7:ca:25:63:24:0b:a3:42:8a:bf:23:b4:25:e6:
81:26:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:10 2026 by rpki-client