Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/SHnHAD4XActufnWbDbBuCezR5sk.roa
File: SHnHAD4XActufnWbDbBuCezR5sk.roa (raw, json)
Hash identifier: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=
Subject key identifier: 48:79:C7:00:3E:17:01:CB:6E:7E:75:9B:0D:B0:6E:09:EC:D1:E6:C9
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019F099521E37437176A75534EDE7E6E120F
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/SHnHAD4XActufnWbDbBuCezR5sk.roa
Signing time: Sat 27 Jun 2026 14:56:36 +0000
ROA not before: Sat 27 Jun 2026 14:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198924
IP address blocks: 2a10:ab80:3fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:95:21:e3:74:37:17:6a:75:53:4e:de:7e:6e:12:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Jun 27 14:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4879c7003e1701cb6e7e759b0db06e09ecd1e6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:63:4b:88:2a:58:a5:c8:ae:3e:79:b8:df:
7f:e6:cd:c3:f1:d8:b5:90:72:52:54:19:48:b9:6b:
14:5e:e4:86:d8:75:23:e6:af:d6:14:0d:2f:27:db:
62:95:54:b2:e4:34:8b:c2:1e:dc:cd:38:63:7b:75:
a4:b5:e2:51:b8:61:51:1b:20:37:ba:1c:b5:8e:b6:
0e:f5:e9:4f:59:4a:4c:6c:8e:55:d9:1f:99:7b:d7:
6e:8f:67:21:28:64:80:e7:7d:94:d1:5d:44:ba:8b:
b5:df:bf:19:31:ce:64:9b:12:47:d8:e6:df:22:e2:
f0:0e:75:7e:98:23:fb:c5:af:01:1c:18:15:55:c0:
a5:ae:cf:e7:fc:17:b7:c5:1e:e8:75:0c:9e:25:99:
f8:f7:f9:55:71:fc:69:5e:a6:2f:11:41:7b:b9:1a:
8f:04:6e:48:90:d1:0d:ae:ba:4f:5a:80:55:76:5a:
55:e8:e5:80:57:c8:c9:eb:79:ca:d2:8b:c7:36:29:
cf:88:a5:3a:05:6a:ce:d7:1e:8d:fe:a9:02:a7:a1:
15:7c:64:10:62:a2:7f:55:79:ae:7c:06:05:8f:e8:
6a:2a:b8:7d:ba:00:fa:a4:33:1a:9d:3f:71:ce:2d:
05:23:62:63:cc:93:8e:74:e2:a7:ef:83:db:c7:1b:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:C7:00:3E:17:01:CB:6E:7E:75:9B:0D:B0:6E:09:EC:D1:E6:C9
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/SHnHAD4XActufnWbDbBuCezR5sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:3fe::/48
Signature Algorithm: sha256WithRSAEncryption
5d:bc:b7:3d:68:e6:59:93:37:97:b7:af:d2:93:60:0c:70:bd:
ab:e8:69:48:90:76:6f:17:03:ae:54:42:a8:70:0e:3c:a7:10:
20:f8:c0:33:1f:ba:29:74:ad:0a:0b:5f:45:f1:16:b6:1d:21:
63:97:31:38:a6:03:e1:b6:45:cd:8c:8d:73:2f:2f:cb:99:d5:
95:ff:8e:4b:84:52:8b:2c:7c:a1:35:4f:8c:23:6b:de:c8:3d:
8a:16:f6:ca:d1:e7:c0:3c:17:f9:61:c6:ee:a4:c5:19:69:79:
52:f4:5c:7b:12:a9:4b:e4:ef:e1:e2:68:35:ba:f4:3a:e6:6b:
6d:56:6b:d1:a9:56:5f:6d:c3:3e:7b:de:2e:a6:15:f0:85:ac:
6a:a5:d0:72:9c:48:37:ca:1a:bd:2c:41:19:3c:06:dc:13:48:
85:c9:59:bf:51:86:f7:d2:b3:0c:6c:46:9b:ba:17:02:f3:a0:
6d:de:98:d4:ba:73:42:4b:e4:7f:84:63:ae:33:00:1b:95:dc:
43:21:6b:4d:40:b1:f7:7f:5a:81:fb:56:4d:d7:ed:0b:c5:0b:
58:be:76:05:01:77:9f:44:98:19:4e:6f:a6:02:74:21:dd:ac:
b8:e9:a0:99:f0:22:04:5c:18:0a:e5:10:3d:c6:5b:60:af:95:
8f:de:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:59 2026 by rpki-client