Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/dSJYyBacKNyFWQortG0dtGxEvkA.roa
File: dSJYyBacKNyFWQortG0dtGxEvkA.roa (raw, json)
Hash identifier: 1+0WqiWKHLJ0X3R8fzF8nekZfCXXuZVvJ/QruxfaCQY=
Subject key identifier: 75:22:58:C8:16:9C:28:DC:85:59:0A:2B:B4:6D:1D:B4:6C:44:BE:40
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 01A0C4227306799DB885CAB9BF58F93E7D73
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/dSJYyBacKNyFWQortG0dtGxEvkA.roa
Signing time: Mon 21 Sep 2026 13:23:07 +0000
ROA not before: Mon 21 Sep 2026 13:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214369
IP address blocks: 36.255.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:22:73:06:79:9d:b8:85:ca:b9:bf:58:f9:3e:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Sep 21 13:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=752258c8169c28dc85590a2bb46d1db46c44be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:83:cb:da:12:61:eb:26:a1:0f:03:46:b4:
67:3b:bb:46:25:16:2f:7a:44:09:9e:56:f7:f8:29:
de:ad:99:01:a3:e5:c8:4b:91:c8:d7:82:f3:e3:94:
41:b7:0c:6f:00:c1:61:8d:a6:47:a9:a8:55:fe:57:
9d:33:2f:a8:21:3b:cd:86:99:82:d9:3c:ae:fc:e4:
4c:8c:8e:a3:ed:5b:08:d4:ab:1b:d3:bf:00:c3:9b:
22:24:2f:49:95:fd:4a:06:37:a6:00:6a:80:53:ca:
c7:5f:83:22:e8:c5:c4:6b:3d:28:96:9b:e3:41:16:
a2:02:27:50:ea:ec:e9:d1:01:d9:ad:13:9d:06:1d:
40:6e:ac:fc:cd:64:22:9c:1c:aa:02:ef:b0:11:19:
06:5b:34:96:1f:9a:38:2c:87:a5:d3:ca:e2:62:45:
20:5f:0c:bf:3f:0a:63:ec:7b:df:97:94:42:c1:a4:
3a:59:e1:46:9b:52:10:57:29:fc:7d:5d:f0:af:86:
6f:9e:43:43:ea:8e:c3:7a:6d:be:59:c6:6b:20:ef:
d5:d8:8c:11:82:e9:66:28:71:b9:05:93:12:d3:5a:
97:20:1c:e4:a4:f7:aa:28:28:02:f2:43:3b:31:70:
e6:06:5c:da:97:a9:cc:56:b5:42:92:be:3c:c2:6f:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:58:C8:16:9C:28:DC:85:59:0A:2B:B4:6D:1D:B4:6C:44:BE:40
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/dSJYyBacKNyFWQortG0dtGxEvkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.241.0/24
Signature Algorithm: sha256WithRSAEncryption
42:68:58:f2:80:68:6d:fe:34:bb:ae:e6:9a:73:a3:8a:ec:7f:
2a:e2:bc:21:e4:d1:d8:0e:37:c9:b8:a1:57:d7:e2:91:84:12:
cd:53:27:5d:28:46:d5:22:85:42:35:9c:6a:ef:57:5c:0c:ca:
dd:f7:14:6d:c9:b6:7b:6f:2b:9c:3f:7b:62:cf:f5:c3:59:c2:
72:25:ef:52:38:1d:b6:cf:70:ae:02:bb:1a:82:03:83:be:69:
39:4a:9f:25:7d:81:c9:e2:2c:f5:26:7f:c2:08:02:6e:ff:0f:
2f:77:8f:d0:d1:20:e1:80:89:55:f6:58:34:a1:eb:13:66:d0:
c7:0d:cc:73:2a:63:79:a6:90:a5:14:1e:6b:7f:f4:b5:2a:f5:
9e:38:e5:b1:fd:1e:dc:cd:bb:54:c8:a0:48:d2:96:39:c6:38:
75:91:e8:1b:9e:0f:47:de:2e:7b:05:ec:0e:50:ec:70:c8:71:
05:53:ef:38:a3:e6:a6:80:d4:e7:cd:57:24:8e:1f:37:43:cf:
bc:68:c3:ab:de:41:47:78:fc:93:51:1c:00:1c:d0:e2:e9:38:
80:72:46:33:11:45:a4:be:5b:4f:e0:1d:b1:24:19:f0:42:b7:
09:64:65:97:27:38:97:17:85:31:07:1a:14:84:7a:ce:3c:91:
30:d7:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:55 2026 by rpki-client