Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/Sx0kUX0mdsJc6MeA8GnQWjLYsxw.roa
File: Sx0kUX0mdsJc6MeA8GnQWjLYsxw.roa (raw, json)
Hash identifier: xlzd7kA5axdXaevzTnhhKGqJUMIeInDgQhQvQ1A+qzM=
Subject key identifier: 4B:1D:24:51:7D:26:76:C2:5C:E8:C7:80:F0:69:D0:5A:32:D8:B3:1C
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01A15708861B028EC4645879D0AE695557D3
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/Sx0kUX0mdsJc6MeA8GnQWjLYsxw.roa
Signing time: Tue 20 Oct 2026 01:58:58 +0000
ROA not before: Tue 20 Oct 2026 01:58:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12796
IP address blocks: 46.55.138.0/23 maxlen: 24
46.55.152.0/22 maxlen: 24
94.190.128.0/20 maxlen: 24
94.190.160.0/19 maxlen: 24
94.190.192.0/23 maxlen: 24
94.190.194.0/24 maxlen: 24
94.190.252.0/22 maxlen: 24
185.89.124.0/22 maxlen: 24
185.240.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:08:86:1b:02:8e:c4:64:58:79:d0:ae:69:55:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Oct 20 01:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b1d24517d2676c25ce8c780f069d05a32d8b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:83:2d:83:cc:a7:b6:53:63:c7:fc:be:ed:
00:b5:70:dc:cc:b5:70:6a:e0:f9:be:cc:48:56:e1:
33:18:7a:2c:52:55:20:b4:fa:0a:34:0a:75:4f:dc:
e4:20:57:6e:bd:d6:92:76:35:d1:82:08:fb:6e:4b:
14:d8:57:d7:89:91:7a:6e:d0:ed:b5:10:1d:a3:7f:
64:b2:c1:8f:1b:ce:30:dc:c3:12:8d:ad:64:28:e9:
8e:2b:78:38:8d:d0:70:df:62:bf:a6:24:5e:3e:10:
e5:f6:e9:51:83:d8:af:f0:ee:c5:2e:28:9a:0e:56:
35:79:03:c3:21:e1:68:0d:83:8a:b3:9f:44:28:da:
5f:91:27:73:77:fc:23:07:48:f1:b6:7d:4e:03:72:
5d:c1:b6:cc:fa:2f:8d:61:d5:fc:04:28:b2:23:e0:
b5:54:e1:c1:a6:a5:12:d6:2d:8f:9d:bc:2b:b7:21:
dc:40:c0:a5:1f:21:78:e9:2f:26:af:b9:c5:1b:5b:
af:3c:bd:ec:4e:a4:9a:62:49:35:58:5c:b4:e7:8e:
3b:22:e8:8b:6e:12:67:96:9f:a3:c3:67:0a:0e:0d:
3a:5e:47:c6:ab:3d:05:ac:24:07:06:e7:b5:7a:40:
c9:72:86:5c:63:d3:38:59:3a:15:91:36:90:8b:41:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:24:51:7D:26:76:C2:5C:E8:C7:80:F0:69:D0:5A:32:D8:B3:1C
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/Sx0kUX0mdsJc6MeA8GnQWjLYsxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.138.0/23
46.55.152.0/22
94.190.128.0/20
94.190.160.0-94.190.194.255
94.190.252.0/22
185.89.124.0/22
185.240.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:55:fe:c7:cf:53:76:3e:64:42:27:11:a6:24:36:9b:61:5c:
fb:23:e9:12:a6:56:21:42:1e:65:f3:ef:e0:00:e0:ee:a3:0f:
cb:3a:4a:c9:a5:ad:ac:d9:ff:22:77:cb:22:ef:0f:c7:d8:a9:
0c:d4:16:99:62:c7:b6:cd:e9:2a:1d:dd:36:b0:6d:f9:d6:a8:
0a:51:57:5d:fd:f4:db:40:06:e6:d4:b9:3f:51:10:81:2e:62:
12:2b:86:41:ee:10:3b:dc:09:17:46:ce:26:8e:56:f4:c4:73:
09:76:14:d8:aa:72:e1:61:16:c5:09:10:e3:80:3a:ad:a5:da:
12:d8:9c:2c:cc:19:1d:e6:7c:34:78:a1:35:54:81:68:e6:1b:
86:f7:0b:a9:c5:35:64:f9:3b:7d:17:c7:e8:a0:8f:72:15:c7:
f6:e1:25:73:e5:d4:eb:71:c8:36:7a:1f:ee:ce:0f:f9:5b:4d:
8f:fa:3d:64:f0:1b:86:e4:2f:ff:8d:22:6c:ef:dd:b1:98:53:
6c:61:07:24:2f:b5:06:35:f2:b8:dd:92:61:9b:36:f2:d6:d5:
4d:5e:f7:bf:13:63:c1:21:00:df:9a:37:40:17:b4:ad:8e:6c:
8b:f8:e6:a7:b1:f0:b5:c5:32:e8:98:e0:9a:f5:3d:5d:7b:07:
80:49:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:23:00 2026 by rpki-client