Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/si7LSWMuuhPUeaWDlYag_JlVhKs.roa
File: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (raw, json)
Hash identifier: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=
Subject key identifier: B2:2E:CB:49:63:2E:BA:13:D4:79:A5:83:95:86:A0:FC:99:55:84:AB
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FA0B2870C54E02EE51A3FAFA4710
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/si7LSWMuuhPUeaWDlYag_JlVhKs.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200679
IP address blocks: 92.255.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fa:0b:28:70:c5:4e:02:ee:51:a3:fa:fa:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b22ecb49632eba13d479a5839586a0fc995584ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:e6:e0:c7:61:7a:41:a8:58:bf:e9:28:00:
80:d7:45:2f:83:26:d1:52:a0:bd:bd:1b:5c:09:5d:
d2:23:d5:08:58:9a:07:c2:b6:17:bc:1a:b4:b9:e7:
ca:5b:90:69:f6:2b:9a:d0:88:de:b1:65:70:07:c2:
b2:0b:29:04:0c:bc:50:8e:d1:e3:38:ef:ac:46:ff:
37:d0:d0:3b:de:61:46:19:0f:e4:67:bd:b6:40:ae:
3b:d1:58:28:93:7a:a8:ab:66:44:85:eb:4d:83:d9:
f1:7e:67:f7:39:08:cd:99:37:75:ed:ed:ae:6e:9d:
23:47:c4:4d:10:de:95:1c:9b:79:b0:16:26:4f:fc:
38:52:9f:82:3b:c5:b3:01:15:9c:e3:0a:79:16:10:
9a:fa:18:42:4e:a3:97:f4:7c:e6:5c:39:b9:e3:39:
c7:14:92:fd:9a:e9:ad:ee:4f:a3:71:a6:71:0d:f1:
1d:81:5a:84:47:92:88:b6:b0:fb:ca:74:7d:8e:ed:
7a:b5:80:f2:22:b5:97:25:2f:a8:51:b3:1a:ba:97:
23:9c:b7:d5:d9:62:09:f6:9d:f9:cc:68:d5:1b:e5:
ad:93:fb:09:05:ea:e2:7d:cb:87:5c:bc:eb:02:f4:
93:a3:35:30:3e:45:38:c9:8c:8c:0c:fb:42:7f:84:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:CB:49:63:2E:BA:13:D4:79:A5:83:95:86:A0:FC:99:55:84:AB
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/si7LSWMuuhPUeaWDlYag_JlVhKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7d:79:ac:49:0e:c1:31:51:0f:b9:10:40:b9:96:3c:56:52:
14:81:d0:69:ed:52:b0:d4:9a:5b:3a:08:1f:aa:28:5e:ab:a4:
e1:cf:23:7f:32:08:b5:9c:54:34:dc:33:47:bd:80:bc:77:a7:
fe:bc:09:7a:d8:dc:49:0b:70:a9:07:c0:f4:e8:57:d6:16:42:
f9:20:7c:c3:42:7c:13:28:b3:fb:81:4c:52:a3:bc:42:28:99:
be:55:ff:31:2b:c2:2d:8f:c7:51:25:86:7c:e0:ff:b1:fc:61:
5d:90:cf:ef:3d:73:f8:a6:9e:5c:e6:c0:0b:0c:d9:7e:75:50:
1f:2e:0b:08:1b:fa:3a:42:d4:29:55:7e:ea:b7:0d:3b:24:a9:
8b:d5:3c:01:ba:f6:31:2a:52:77:9d:2e:04:e5:b6:ca:ec:5e:
e0:83:c4:b0:68:b9:6e:46:d2:e6:ff:a8:8b:51:f0:a3:29:64:
a4:fc:8f:cd:47:53:56:1b:39:40:09:ec:1e:38:0c:95:0c:bb:
9b:9a:20:94:8b:22:e3:9d:c4:94:77:7d:85:76:3c:d3:d0:65:
d7:e0:e7:4c:d0:52:7d:3c:44:87:c5:6d:83:74:45:38:90:02:
bd:03:01:da:4e:7a:c5:04:e0:fc:4a:fc:89:02:dc:2b:47:0c:
66:86:a5:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPoLKHDFTgLuUaP6+kcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzAyMTUxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjJlY2I0OTYzMmViYTEzZDQ3OWE1ODM5NTg2YTBmYzk5NTU4NGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWjm4MdhekGoWL/pKACA10UvgybR
UqC9vRtcCV3SI9UIWJoHwrYXvBq0uefKW5Bp9iua0IjesWVwB8KyCykEDLxQjtHj
OO+sRv830NA73mFGGQ/kZ722QK470Vgok3qoq2ZEhetNg9nxfmf3OQjNmTd17e2u
bp0jR8RNEN6VHJt5sBYmT/w4Up+CO8WzARWc4wp5FhCa+hhCTqOX9HzmXDm54znH
FJL9mumt7k+jcaZxDfEdgVqER5KItrD7ynR9ju16tYDyIrWXJS+oUbMaupcjnLfV
2WIJ9p35zGjVG+Wtk/sJBerifcuHXLzrAvSTozUwPkU4yYyMDPtCf4T4mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIuy0ljLroT1Hmlg5WGoPyZVYSrMB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvc2k3TFNXTXV1aFBVZWFXRGxZYWdfSmxWaEtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP81MA0G
CSqGSIb3DQEBCwUAA4IBAQCKfXmsSQ7BMVEPuRBAuZY8VlIUgdBp7VKw1JpbOggf
qiheq6ThzyN/Mgi1nFQ03DNHvYC8d6f+vAl62NxJC3CpB8D06FfWFkL5IHzDQnwT
KLP7gUxSo7xCKJm+Vf8xK8Itj8dRJYZ84P+x/GFdkM/vPXP4pp5c5sALDNl+dVAf
LgsIG/o6QtQpVX7qtw07JKmL1TwBuvYxKlJ3nS4E5bbK7F7gg8SwaLluRtLm/6iL
UfCjKWSk/I/NR1NWGzlACeweOAyVDLubmiCUiyLjncSUd32FdjzT0GXX4OdM0FJ9
PESHxW2DdEU4kAK9AwHaTnrFBOD8SvyJAtwrRwxmhqUE
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:31 2026 by rpki-client