Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/SKMTpDTs-7W1IfKgrVSczpPe7Ro.roa
File: SKMTpDTs-7W1IfKgrVSczpPe7Ro.roa (raw, json)
Hash identifier: 7HIKEr6ciachQ4AIa6q8fnCWBYbi7WLje3/zszJmxks=
Subject key identifier: 48:A3:13:A4:34:EC:FB:B5:B5:21:F2:A0:AD:54:9C:CE:93:DE:ED:1A
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019F5B7D9298C8FE229DEDE2B02188F7694A
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/SKMTpDTs-7W1IfKgrVSczpPe7Ro.roa
Signing time: Mon 13 Jul 2026 12:39:43 +0000
ROA not before: Mon 13 Jul 2026 12:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 5.160.77.0/24 maxlen: 24
5.160.131.0/24 maxlen: 24
5.160.252.0/24 maxlen: 24
77.104.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:7d:92:98:c8:fe:22:9d:ed:e2:b0:21:88:f7:69:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jul 13 12:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48a313a434ecfbb5b521f2a0ad549cce93deed1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:0c:0b:0a:3f:8e:12:47:d2:65:2b:8e:01:
1d:7b:ae:03:37:14:d3:b9:e1:51:9b:2b:8c:87:5e:
1b:4d:69:43:f3:a8:a0:cd:ca:03:c1:26:91:74:72:
d6:44:c9:dd:19:f9:a6:bb:48:fd:63:f4:6f:8d:3b:
cd:9f:49:9c:3b:4f:f1:c3:7f:cc:72:c1:1d:68:49:
5a:5e:7d:02:5c:b4:a9:83:71:86:00:31:d0:b5:db:
56:79:7d:95:e7:87:34:07:0a:97:cc:a2:33:f2:e8:
39:15:0a:0b:de:92:83:53:0d:3c:61:ca:38:10:58:
b2:20:00:3f:e1:e3:94:ea:4c:f8:c2:9b:d1:0c:4a:
d7:98:9b:37:fc:f5:0d:95:e5:d6:33:63:e9:47:ba:
d8:24:42:bd:ec:d1:28:c3:fb:ae:0d:ce:51:0c:2f:
49:71:7b:a0:c2:b1:70:f2:6f:19:ef:b0:96:5a:db:
7c:2d:89:98:b0:4e:16:f0:5c:5e:72:9e:ff:7c:e2:
91:ff:4c:c5:4c:fa:89:40:ad:2d:e6:01:f1:e1:e6:
6c:c0:1e:e4:17:9c:d5:df:da:5c:d8:27:51:c9:17:
d6:bd:51:fb:6d:09:2f:32:d8:3d:e6:e0:3c:53:0e:
d4:f0:c9:fa:63:88:7c:1e:3e:2e:bf:92:fd:70:56:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:13:A4:34:EC:FB:B5:B5:21:F2:A0:AD:54:9C:CE:93:DE:ED:1A
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/SKMTpDTs-7W1IfKgrVSczpPe7Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.77.0/24
5.160.131.0/24
5.160.252.0/24
77.104.95.0/24
Signature Algorithm: sha256WithRSAEncryption
05:74:b8:e6:2f:c0:af:0f:b3:2b:c5:2e:62:54:e3:c6:3c:90:
d4:f1:0f:b8:8d:82:07:27:3a:16:eb:52:50:06:7e:f9:c9:f3:
13:34:bb:4c:dd:38:6d:5f:c1:3f:d6:f8:71:51:a3:24:7b:6d:
01:c8:b6:44:50:90:ec:13:be:da:43:54:21:5b:a0:95:60:ad:
bf:7d:5e:09:0e:8d:2e:22:be:95:e3:e3:1d:d8:cc:e2:34:4e:
35:e6:fc:e1:c4:7d:78:19:45:37:7b:09:ba:8a:59:7c:79:55:
e8:47:4d:29:fd:76:10:99:bc:fb:1f:20:b3:4a:14:4f:05:9a:
84:2d:15:dc:50:7f:52:2c:43:78:bb:8a:68:fd:ff:d8:94:40:
c3:12:6f:21:87:07:bb:58:6d:88:9e:2b:ce:f0:1d:c5:e2:fa:
05:64:2f:9e:a8:b8:21:28:f5:04:2e:82:6e:9d:22:af:a3:5c:
f9:b2:ca:e9:ad:db:c4:01:cf:cc:eb:77:15:a7:08:d5:b1:28:
d5:d1:15:18:74:c8:d8:af:3c:b8:7c:d7:c4:4d:d0:63:65:09:
83:b4:14:72:9d:11:67:c1:ea:7c:fb:6f:e2:01:c1:83:90:30:
6b:92:a7:55:67:11:9e:34:7c:2d:a8:63:ea:5f:ed:9f:cb:f1:
35:b7:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:12 2026 by rpki-client