Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/SjFNiCOW9pffQRYTMpXHrm7q16g.roa
File: SjFNiCOW9pffQRYTMpXHrm7q16g.roa (raw, json)
Hash identifier: sCyYv47zTnd77+VXWhZegzRk1ChPs3VRTcbNREbZLO8=
Subject key identifier: 4A:31:4D:88:23:96:F6:97:DF:41:16:13:32:95:C7:AE:6E:EA:D7:A8
Certificate issuer: /CN=c532dca4efb08c71a7af06bec021c887130d478f
Certificate serial: 019CF780A6D7ED44B427485FE69FFC38265C
Authority key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/SjFNiCOW9pffQRYTMpXHrm7q16g.roa
Signing time: Mon 16 Mar 2026 16:35:29 +0000
ROA not before: Mon 16 Mar 2026 16:35:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202089
IP address blocks: 89.127.252.0/24 maxlen: 24
89.127.253.0/24 maxlen: 24
95.141.112.0/20 maxlen: 20
95.141.112.0/24 maxlen: 24
95.141.113.0/24 maxlen: 24
95.141.114.0/24 maxlen: 24
95.141.115.0/24 maxlen: 24
95.141.116.0/24 maxlen: 24
95.141.117.0/24 maxlen: 24
95.141.118.0/24 maxlen: 24
95.141.119.0/24 maxlen: 24
95.141.120.0/24 maxlen: 24
95.141.121.0/24 maxlen: 24
95.141.122.0/24 maxlen: 24
95.141.123.0/24 maxlen: 24
95.141.124.0/24 maxlen: 24
95.141.125.0/24 maxlen: 24
95.141.126.0/24 maxlen: 24
95.141.127.0/24 maxlen: 24
185.105.136.0/22 maxlen: 22
185.105.136.0/24 maxlen: 24
185.105.137.0/24 maxlen: 24
185.105.138.0/24 maxlen: 24
185.105.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:80:a6:d7:ed:44:b4:27:48:5f:e6:9f:fc:38:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c532dca4efb08c71a7af06bec021c887130d478f
Validity
Not Before: Mar 16 16:35:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a314d882396f697df4116133295c7ae6eead7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:81:79:f1:4c:05:25:3d:dd:14:de:6f:9a:
fa:2d:36:de:c7:7f:17:66:54:43:b4:55:9c:cf:d7:
3a:6b:b0:23:c1:c7:3e:1a:bd:94:12:dd:4b:51:fa:
85:5e:33:b1:d5:24:7b:7e:02:61:f1:d5:7b:d3:09:
86:3d:d6:58:8f:55:08:3a:5f:a6:73:de:b6:fc:88:
fa:f7:7f:fd:6c:e1:75:31:68:89:1d:66:28:ee:86:
24:7e:83:87:01:62:07:87:f1:61:e3:31:47:79:9f:
44:19:88:2c:b3:c2:88:3c:32:11:86:10:0c:32:ea:
82:9c:49:ca:56:e9:5c:c2:ef:44:5f:59:b0:4f:d7:
c0:3f:d1:cb:2b:3c:da:05:5d:9e:2a:e1:4c:ca:f0:
3f:4e:a8:cb:4c:24:05:84:a5:78:eb:ad:ae:28:7b:
d0:e0:2e:ef:96:5b:99:05:55:1b:b5:0a:8e:35:14:
bb:65:9d:af:49:f1:15:2e:dd:95:36:f9:87:ee:78:
35:5b:c5:a9:3e:39:8e:3e:98:10:25:37:9d:cd:7f:
98:63:f2:d0:95:fc:a5:6d:04:4e:24:73:88:aa:2b:
52:13:2b:e4:44:6c:23:32:66:cf:de:92:62:55:34:
4e:81:d3:8c:fb:3f:75:61:1e:b0:b4:23:46:05:6d:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:4D:88:23:96:F6:97:DF:41:16:13:32:95:C7:AE:6E:EA:D7:A8
X509v3 Authority Key Identifier:
keyid:C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/SjFNiCOW9pffQRYTMpXHrm7q16g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.127.252.0/23
95.141.112.0/20
185.105.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:fc:e5:7b:61:d9:9f:b3:e0:2b:8e:cf:c4:95:fd:e2:69:fd:
03:57:fa:9f:22:05:35:94:cd:2f:40:93:a3:86:5c:59:0a:f7:
b1:15:bf:eb:c0:03:fd:12:e8:5d:7a:7b:2d:f8:00:54:01:e7:
6b:f4:4d:59:c4:2d:31:da:94:a5:29:29:e4:24:89:9c:b7:e1:
31:1b:08:82:6c:ce:90:97:4d:43:50:41:67:4c:b7:86:55:47:
41:be:3d:0a:11:41:e4:e2:b9:f0:6b:7b:23:8d:cc:66:54:12:
6a:03:33:bc:4f:80:7c:77:f6:03:c8:26:1a:89:11:c4:d7:ec:
61:4e:2f:52:87:51:2e:a2:cb:65:71:a6:cd:17:8a:d4:41:ac:
6c:1b:64:7f:d2:dc:25:66:c7:39:d7:d8:52:fa:60:ac:0c:7c:
38:9f:89:0c:72:92:ea:8d:e8:65:1b:4b:4f:c4:18:c4:3f:fb:
7e:03:a7:bc:a5:21:1c:48:df:60:99:68:f3:ab:7f:9b:30:ca:
de:51:15:57:68:de:9f:c0:62:69:b7:05:28:a7:d4:46:4e:c0:
68:d3:13:e4:ce:03:73:1d:31:6b:1b:62:bd:2d:78:4f:8a:92:
5f:ac:1b:49:28:41:60:c4:87:9d:72:8b:a3:0e:a0:be:dc:45:
01:cd:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:28 2026 by rpki-client