Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ss2eW0oIsZ9mG4DL89SOpbNUR-s.roa
File: ss2eW0oIsZ9mG4DL89SOpbNUR-s.roa (raw, json)
Hash identifier: +2/+dLfjwBrCRS0Gp0SkErhtMsMonFhNCp2z8eO7Sec=
Subject key identifier: B2:CD:9E:5B:4A:08:B1:9F:66:1B:80:CB:F3:D4:8E:A5:B3:54:47:EB
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F8F60826383610636DA24A77009DE20EE
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ss2eW0oIsZ9mG4DL89SOpbNUR-s.roa
Signing time: Thu 23 Jul 2026 14:28:14 +0000
ROA not before: Thu 23 Jul 2026 14:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198926
IP address blocks: 94.184.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:60:82:63:83:61:06:36:da:24:a7:70:09:de:20:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 23 14:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2cd9e5b4a08b19f661b80cbf3d48ea5b35447eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:e6:c0:d2:92:c8:39:fe:6a:f7:a1:42:b6:
1a:d2:ec:c0:39:f1:e3:3e:c3:35:9c:7d:80:ac:b6:
e3:2e:7a:18:7d:31:cd:45:0c:e4:45:b2:e9:fe:38:
fb:04:d9:9d:76:23:e4:ac:ed:9f:63:0d:c8:3b:d7:
d4:84:8a:aa:97:85:06:ee:91:af:3d:58:68:1d:59:
6b:e6:d7:0b:3c:c2:b0:a8:f4:5a:18:13:ac:db:c4:
d9:25:c1:38:36:45:e4:5b:06:47:9d:b6:84:09:d6:
78:f5:c5:c9:d5:5d:b7:1f:b9:a3:89:cd:82:52:31:
6e:d6:6f:02:94:93:64:b7:d7:d8:4b:a8:ca:9e:a1:
29:42:b8:f7:55:8c:16:bd:8b:bf:7e:10:13:8a:5b:
5d:45:79:40:4d:7f:24:fd:7e:0b:ab:3a:59:40:74:
b0:60:bc:88:8a:ab:27:9d:9d:ca:36:fb:34:ec:6d:
f6:be:e0:c8:cb:fe:b2:76:ba:03:23:b3:ef:d2:36:
a5:77:8d:17:ff:fa:fa:60:6c:74:0f:78:b0:ab:36:
1b:2e:51:4d:87:a1:89:dd:94:6e:0c:23:40:00:0c:
00:7b:7a:48:91:ea:5c:70:35:f9:c9:ca:7e:4b:45:
01:42:13:28:ca:01:74:42:09:cc:20:ab:63:f3:ee:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CD:9E:5B:4A:08:B1:9F:66:1B:80:CB:F3:D4:8E:A5:B3:54:47:EB
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ss2eW0oIsZ9mG4DL89SOpbNUR-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.32.0/24
Signature Algorithm: sha256WithRSAEncryption
01:62:7c:0c:c7:4e:22:aa:e2:25:ed:d8:82:2d:62:52:27:a3:
df:c2:3c:bc:62:b0:86:6f:0e:df:5e:44:93:53:30:2f:0a:2f:
dc:80:63:26:c8:29:a7:f8:86:12:a8:59:5b:d9:68:60:17:11:
79:25:d2:19:7c:88:d0:6a:c1:c4:ba:9d:11:78:fa:00:98:85:
9b:f1:22:85:fa:79:da:5d:b0:a1:e8:7c:9e:66:2b:83:23:ab:
df:aa:de:34:9c:ea:ac:a6:c3:79:96:7e:bc:b7:26:cf:71:7a:
0c:c6:d1:cc:7a:2e:42:9d:78:e3:50:e7:0f:09:14:7e:3a:b7:
84:74:64:ab:7e:04:70:cf:93:c3:02:2e:60:32:e0:69:fe:bf:
7d:b4:79:2c:f8:70:54:22:ca:c6:57:bd:54:44:aa:fd:c7:9e:
e1:14:6a:b4:6f:65:f4:ed:35:ed:f7:2c:6f:db:ea:bc:45:02:
dc:da:41:52:de:ba:18:f2:44:cf:09:22:cf:8b:cb:5f:44:39:
41:49:84:30:29:23:20:75:09:95:e8:2f:b4:37:c0:3f:b7:c9:
1a:40:46:7d:12:c2:e5:02:87:70:3a:fa:c6:48:87:f8:84:06:
08:98:71:b0:8a:4a:1e:c2:53:03:d3:97:ca:08:02:a3:c6:b1:
b6:be:13:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:51 2026 by rpki-client