Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SvEm-yXVhiOKZ90phjAW_AA8ALc.roa
File: SvEm-yXVhiOKZ90phjAW_AA8ALc.roa (raw, json)
Hash identifier: 7Oq7qPwBODUfGC8UgiLRJC3+bMOGG/2kfdhFT0x3Ngw=
Subject key identifier: 4A:F1:26:FB:25:D5:86:23:8A:67:DD:29:86:30:16:FC:00:3C:00:B7
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019F69FC3E4C32610E4E3234F2759E3682A4
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SvEm-yXVhiOKZ90phjAW_AA8ALc.roa
Signing time: Thu 16 Jul 2026 08:12:46 +0000
ROA not before: Thu 16 Jul 2026 08:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219197
IP address blocks: 80.95.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:fc:3e:4c:32:61:0e:4e:32:34:f2:75:9e:36:82:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jul 16 08:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4af126fb25d586238a67dd29863016fc003c00b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:2e:74:94:c9:2b:64:1c:7d:ec:e8:02:07:
d9:00:82:e8:a4:72:f5:63:c3:53:38:7c:62:ce:5e:
e1:80:cd:20:a7:10:dd:04:23:4e:14:36:34:aa:96:
7b:7c:f0:7a:6f:c0:1e:c7:7e:29:c7:71:76:25:a6:
c2:9a:c4:00:84:82:79:ff:85:b4:58:2f:ba:7a:06:
1f:bb:ce:66:d3:b8:c7:77:bc:68:76:18:ca:ec:c5:
1f:80:4e:70:fd:b6:86:40:eb:99:a6:f5:b8:f4:5e:
4b:a1:f4:37:b7:e6:7b:37:b2:d0:c8:8c:98:88:b0:
5a:d1:18:92:28:16:85:aa:18:bb:30:89:e3:51:98:
63:6b:95:f8:f3:48:86:21:e1:c3:c2:6b:71:d6:11:
8a:f6:49:b8:80:e2:23:a5:a9:54:10:e0:0e:0f:52:
84:10:a8:bc:b2:73:85:4a:c0:56:d0:9c:1b:1e:37:
d2:ca:76:1c:71:83:ec:1d:a7:ec:91:fb:16:80:86:
c3:7f:db:43:82:9b:13:16:4b:39:4c:3b:ae:73:b6:
e2:b9:93:5f:51:d5:9e:06:a2:d2:40:62:92:59:ea:
0d:3a:59:60:b7:48:fc:a5:5c:d7:bc:e2:d1:4a:8c:
5c:60:b9:9d:22:ce:47:c7:a4:90:bb:fa:f9:34:7d:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:26:FB:25:D5:86:23:8A:67:DD:29:86:30:16:FC:00:3C:00:B7
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/SvEm-yXVhiOKZ90phjAW_AA8ALc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:05:b6:68:1c:db:a3:54:1f:2a:da:e0:5e:de:8a:34:7b:75:
1a:c1:dc:25:20:db:60:7c:fa:7d:88:ba:99:b2:e3:3f:68:77:
c3:ea:7c:69:4b:d1:dd:33:7e:83:82:fb:e8:1e:e8:67:76:ee:
b8:14:0b:0c:2d:fa:53:40:b4:14:6b:84:95:20:45:62:3b:35:
c7:23:51:92:03:66:97:02:b7:22:32:bb:ca:ec:44:67:aa:4b:
e1:f1:7d:1b:dd:33:0b:60:96:2f:30:03:3b:7d:c9:9b:7d:7f:
3a:6b:bc:c9:a5:fd:37:81:68:aa:c7:12:95:9a:da:7f:92:43:
db:79:e4:03:3c:4f:1b:4e:f2:aa:6f:f5:45:b1:04:3b:25:be:
12:c1:9d:31:e9:2c:1f:2b:24:8d:ab:17:18:2a:d3:10:03:f0:
b4:b5:f2:ac:2c:1c:24:3f:4c:d7:8a:35:48:9e:48:ba:97:50:
8f:4d:be:ee:c1:77:a7:1c:de:ad:e0:c3:2a:38:f2:dc:a3:36:
77:7c:84:72:b4:72:c3:03:d6:9b:36:4f:9f:b0:eb:d2:27:53:
37:79:ca:43:19:8f:11:73:8e:40:67:53:f3:1d:99:aa:70:9a:
1b:26:40:04:b7:79:87:ee:51:2f:7f:e5:6d:87:a4:d0:1d:ef:
3f:5e:39:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9p/D5MMmEOTjI08nWeNoKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjYwNzE2MDgxMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWYxMjZmYjI1ZDU4NjIzOGE2N2RkMjk4NjMwMTZmYzAwM2MwMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIMudJTJK2QcfezoAgfZAILopHL1
Y8NTOHxizl7hgM0gpxDdBCNOFDY0qpZ7fPB6b8Aex34px3F2JabCmsQAhIJ5/4W0
WC+6egYfu85m07jHd7xodhjK7MUfgE5w/baGQOuZpvW49F5LofQ3t+Z7N7LQyIyY
iLBa0RiSKBaFqhi7MInjUZhja5X480iGIeHDwmtx1hGK9km4gOIjpalUEOAOD1KE
EKi8snOFSsBW0JwbHjfSynYccYPsHafskfsWgIbDf9tDgpsTFks5TDuuc7biuZNf
UdWeBqLSQGKSWeoNOllgt0j8pVzXvOLRSoxcYLmdIs5Hx6SQu/r5NH2aRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErxJvsl1YYjimfdKYYwFvwAPAC3MB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvU3ZFbS15WFZoaU9LWjkwcGhqQVdfQUE4QUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF8UMA0G
CSqGSIb3DQEBCwUAA4IBAQCxBbZoHNujVB8q2uBe3oo0e3UawdwlINtgfPp9iLqZ
suM/aHfD6nxpS9HdM36DgvvoHuhndu64FAsMLfpTQLQUa4SVIEViOzXHI1GSA2aX
ArciMrvK7ERnqkvh8X0b3TMLYJYvMAM7fcmbfX86a7zJpf03gWiqxxKVmtp/kkPb
eeQDPE8bTvKqb/VFsQQ7Jb4SwZ0x6SwfKySNqxcYKtMQA/C0tfKsLBwkP0zXijVI
nki6l1CPTb7uwXenHN6t4MMqOPLcozZ3fIRytHLDA9abNk+fsOvSJ1M3ecpDGY8R
c45AZ1PzHZmqcJobJkAEt3mH7lEvf+Vth6TQHe8/Xjmn
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:03 2026 by rpki-client