Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/SxGsz39JK4elqIESwZ8Cfqg5W6w.roa
File: SxGsz39JK4elqIESwZ8Cfqg5W6w.roa (raw, json)
Hash identifier: 12+/ABqOQXT9ibPvlhUH6RlbzbI9x38jh4FCtzMqGuY=
Subject key identifier: 4B:11:AC:CF:7F:49:2B:87:A5:A8:81:12:C1:9F:02:7E:A8:39:5B:AC
Certificate issuer: /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial: 019B78A21DBAD114E89421DAE397B974121A
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/SxGsz39JK4elqIESwZ8Cfqg5W6w.roa
Signing time: Thu 01 Jan 2026 08:17:28 +0000
ROA not before: Thu 01 Jan 2026 08:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211032
IP address blocks: 185.222.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:1d:ba:d1:14:e8:94:21:da:e3:97:b9:74:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Validity
Not Before: Jan 1 08:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b11accf7f492b87a5a88112c19f027ea8395bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:87:2d:5d:68:7b:73:eb:ca:2d:07:a3:f8:
8b:57:2a:ab:ac:cd:5a:5a:c3:b9:ce:61:2d:83:43:
12:98:42:e6:1b:6d:c9:c8:cc:34:0e:41:6b:7c:03:
18:49:12:19:71:27:8c:4b:f8:3f:dd:7c:40:70:ca:
9c:02:e0:ff:c2:cc:b0:32:81:2d:7a:67:0e:09:7b:
ce:16:8c:6c:e9:a4:ec:15:29:42:52:4c:f5:1a:66:
ee:98:4d:d5:ab:8d:6f:fe:63:0c:d7:84:ca:25:e5:
d5:5e:8b:14:0c:41:70:b1:56:f5:49:44:60:e2:96:
ce:00:42:82:7a:cc:36:22:e9:0e:ef:88:06:6a:b5:
a6:b4:38:d8:ae:15:b7:8d:78:5f:2a:c0:3b:35:3a:
42:87:9f:bc:6c:7a:02:cc:7d:fd:08:b7:2b:a7:0d:
ab:dd:a5:a9:e1:a2:f2:c3:e6:54:9e:16:68:aa:8e:
e0:58:f7:5a:a3:f9:b5:e3:27:c2:f2:ac:af:3d:6d:
9b:ee:fb:0e:e7:19:d7:53:ad:dd:69:fb:78:94:cf:
94:5c:62:b1:44:9c:2d:b1:05:12:4a:78:fc:27:63:
59:61:21:3e:ed:31:bb:8d:e1:5c:f5:69:90:f9:f5:
1f:99:c5:29:f4:f0:99:f7:6a:12:14:e0:b1:a2:6b:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:11:AC:CF:7F:49:2B:87:A5:A8:81:12:C1:9F:02:7E:A8:39:5B:AC
X509v3 Authority Key Identifier:
keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/SxGsz39JK4elqIESwZ8Cfqg5W6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.42.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e4:e5:b6:95:71:d5:7c:3a:ff:a0:13:c6:bb:8b:51:c7:31:
38:82:82:2b:52:05:be:a7:22:4e:5e:05:b5:b2:f4:23:94:d8:
54:0f:09:ac:6a:a5:86:d7:3f:10:bc:e2:b2:04:b9:c2:29:cf:
d5:cf:43:03:0c:a5:40:7d:79:be:02:86:94:25:7e:48:f0:29:
1c:09:e4:c5:c1:0c:62:e1:ed:ae:8c:ad:34:bd:76:6c:93:51:
1b:ef:86:9f:25:c9:e1:17:70:c1:fd:b9:70:a9:29:cb:22:71:
ce:cb:5a:52:59:d7:8f:63:17:4e:f2:ff:c5:d5:ea:31:84:c9:
a5:52:34:39:dd:4c:54:4f:28:61:8d:dc:21:05:f8:54:d8:59:
57:65:a4:ef:b1:ab:77:67:96:36:4d:e5:00:6b:2b:dd:20:77:
69:bd:74:4a:28:8c:91:fb:60:13:3b:f8:4f:79:64:62:f0:85:
ba:07:ff:67:17:9c:94:67:38:bb:f9:d6:26:2b:4c:28:1d:e0:
5e:ea:dc:15:f3:5c:d9:c5:08:07:33:1e:7d:6e:e8:89:30:75:
76:5c:93:e0:1e:67:32:13:6f:58:31:67:e9:63:75:38:d6:a6:
34:45:cf:1a:a9:a3:87:7b:92:e1:89:ac:62:16:75:ed:d9:66:
46:80:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:07:28 2026 by rpki-client