Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/SpVJq_aWC8IH5JWeljASL-sUdR4.roa
File: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (raw, json)
Hash identifier: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=
Subject key identifier: 4A:95:49:AB:F6:96:0B:C2:07:E4:95:9E:96:30:12:2F:EB:14:75:1E
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019F1E659E263192E1A3486D62123BA9C324
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/SpVJq_aWC8IH5JWeljASL-sUdR4.roa
Signing time: Wed 01 Jul 2026 15:56:43 +0000
ROA not before: Wed 01 Jul 2026 15:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59954
IP address blocks: 185.54.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:65:9e:26:31:92:e1:a3:48:6d:62:12:3b:a9:c3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jul 1 15:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a9549abf6960bc207e4959e9630122feb14751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:f5:c2:05:a9:fc:8a:df:81:5f:7a:9f:96:
83:f0:fa:94:85:f9:d5:a4:d3:1e:b1:53:26:a4:0e:
b9:84:23:b6:4e:ed:fc:66:18:98:85:7a:2c:57:88:
ce:1e:ed:43:3c:f9:a6:0e:4f:01:19:22:92:43:8b:
37:c2:95:71:ae:a1:ad:d7:98:b0:af:fc:c0:b0:8d:
9e:e3:93:1a:59:f1:5d:f9:6c:2b:b9:50:8a:2c:76:
8a:e1:aa:96:cb:65:06:09:b9:ae:2b:2c:0a:a3:f4:
aa:e0:89:5c:8f:85:a5:77:2e:03:ea:9b:35:a5:45:
85:ab:0a:8e:76:81:c0:aa:00:ac:dc:bc:15:cb:b4:
80:fc:20:ff:bb:92:fa:d1:b5:8e:83:9c:2c:17:d4:
4e:ea:3c:40:44:dc:41:36:c1:e2:5a:5f:b6:cb:d0:
0a:b4:44:6a:e4:d0:9b:56:c4:cd:39:d5:10:35:c8:
78:b2:54:48:f6:08:f4:b3:6a:8c:50:2a:e8:0d:f2:
58:9e:9d:b7:70:5d:fb:57:c2:22:96:34:7a:8f:06:
cf:17:16:a9:ec:b2:69:9b:85:1a:9c:a6:85:88:4a:
3a:85:9c:f3:13:3c:04:15:6c:59:71:ce:c2:9e:f3:
ed:e0:3f:da:be:46:43:ad:39:78:2b:0f:b2:cb:74:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:49:AB:F6:96:0B:C2:07:E4:95:9E:96:30:12:2F:EB:14:75:1E
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/SpVJq_aWC8IH5JWeljASL-sUdR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d3:c4:31:ac:51:9f:85:6e:eb:b7:0c:b6:74:7d:dc:19:bb:
cb:ad:35:cb:59:78:d9:56:f8:00:88:f2:92:fd:00:d0:74:6f:
ae:fe:82:1a:dc:99:0a:14:2a:1f:a2:41:4a:90:de:fe:b7:e8:
a6:7a:af:7d:45:96:c3:bf:42:18:c0:54:ed:fd:fc:5d:5a:a3:
db:a9:4e:8c:20:d5:68:86:af:ec:ba:95:f0:30:f2:11:a2:b1:
c1:c1:c5:33:b3:65:cc:92:c8:66:5a:8f:07:ed:ee:38:ff:6c:
87:6f:6e:b4:15:02:37:9e:c8:bb:e9:b1:74:dd:36:d6:c4:6c:
13:df:03:e5:e4:35:9a:ec:a3:a8:aa:36:45:15:93:de:10:ff:
de:e3:0e:22:95:ae:2e:3a:65:ea:70:08:2c:5b:6d:c5:78:f3:
4a:21:ec:28:7c:5e:81:a1:d1:93:f5:ef:ab:f2:69:7f:25:6e:
8e:35:4f:e4:00:fc:13:33:5b:98:5a:29:9f:2d:78:70:47:9c:
1c:2c:33:70:e7:f0:0f:d0:77:b5:1b:f2:1d:a1:bd:99:57:4c:
b3:df:ea:a5:6f:55:22:fb:82:f2:0d:ed:1d:b4:a5:b6:18:1b:
c7:00:4f:63:1a:5d:5f:65:3b:4d:02:6e:a5:ca:44:c9:b3:3a:
12:3b:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:57 2026 by rpki-client