Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa
File: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (raw, json)
Hash identifier: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=
Subject key identifier: 48:A8:C9:C3:7F:DD:A9:54:21:E6:DA:A7:F2:F9:C1:0B:52:73:25:22
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F854539872F45515E89CF745294271D50
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa
Signing time: Tue 21 Jul 2026 15:22:14 +0000
ROA not before: Tue 21 Jul 2026 15:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:45:39:87:2f:45:51:5e:89:cf:74:52:94:27:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 21 15:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48a8c9c37fdda95421e6daa7f2f9c10b52732522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:ba:27:96:86:be:9a:a4:e3:0c:c2:dd:71:
b2:5e:3e:16:00:4d:6b:e3:89:26:9d:f3:cf:5f:26:
a6:ff:de:86:d9:d1:37:f6:ec:34:50:bd:29:c2:ca:
7f:7e:15:fb:e3:2d:75:52:28:dd:3d:07:e1:8c:ce:
ad:32:9a:67:96:aa:d3:0c:02:cd:d3:c1:78:fa:56:
a6:13:1b:7d:50:08:bd:bd:af:1d:1c:b8:c1:49:14:
97:7f:97:26:57:3d:45:bf:db:52:10:66:2f:ee:6a:
86:e2:4c:5f:62:ba:49:c7:0a:ec:5e:c1:03:c2:db:
6b:c1:8b:a5:f5:0b:3c:e3:b3:4e:de:e1:e3:6d:5a:
5f:93:90:0b:03:b8:16:cf:77:22:54:98:a2:67:5d:
1c:33:cc:e3:90:48:01:99:74:e4:38:5c:60:fa:f4:
24:89:4a:4d:d5:32:2b:fa:06:7a:c4:94:ab:a1:72:
01:8e:39:36:72:f0:62:eb:86:c5:23:2a:43:e6:7c:
e0:54:eb:07:20:08:d9:33:12:da:71:eb:f7:5b:67:
43:22:a2:43:2a:3a:ff:a1:88:59:35:87:e6:c8:48:
eb:81:49:77:54:d6:b2:bc:d8:fb:3b:c8:1f:7b:c3:
6a:c5:09:d5:8d:4b:d2:4c:37:d5:d2:d9:45:85:a9:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A8:C9:C3:7F:DD:A9:54:21:E6:DA:A7:F2:F9:C1:0B:52:73:25:22
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:d6:98:8d:c2:06:86:91:ab:c7:fc:af:92:5e:27:24:7f:e5:
f2:8b:c5:37:2f:78:75:69:2f:d2:e5:12:59:28:14:88:38:21:
71:ad:00:42:e3:a4:15:37:bd:1d:02:a2:14:bc:c8:69:e6:54:
5c:7c:23:08:b5:0b:bf:e7:0c:26:22:8f:f8:d2:e7:22:75:b8:
be:98:88:92:be:18:24:82:98:d6:ef:14:86:6b:92:48:88:71:
3b:8c:42:d8:4d:c2:b6:98:38:03:ca:e9:5a:c9:b6:ca:9d:6f:
5e:0c:20:de:4c:a0:20:e6:65:c1:6d:52:dd:4b:f6:aa:6b:ed:
f3:f6:03:e6:2a:3b:77:e2:03:99:b9:e5:36:8c:54:5f:e6:dc:
91:d5:9c:5f:72:f9:97:bd:19:ef:60:e6:e2:42:d7:81:13:f4:
15:35:3e:7d:40:1d:44:fe:ab:4e:10:01:eb:45:86:b0:14:bc:
6b:2b:04:f9:5a:5e:3a:f6:ee:de:5d:6d:41:3a:49:92:b2:5a:
c5:69:9f:cb:80:0c:52:53:96:3a:4a:0e:01:d9:54:27:7c:d1:
0a:68:a6:cb:be:7f:96:02:38:69:a1:ef:99:95:34:56:42:51:
e6:f6:af:cb:e4:0d:3e:5a:a2:20:01:00:3e:6f:f0:03:0f:02:
6f:cd:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:32:40 2026 by rpki-client