Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/SFPLQXBEuitf9FRle3yJD2Tmikc.roa
File: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (raw, json)
Hash identifier: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=
Subject key identifier: 48:53:CB:41:70:44:BA:2B:5F:F4:54:65:7B:7C:89:0F:64:E6:8A:47
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 019F2369136610969779DFBDF3E8A3E86925
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/SFPLQXBEuitf9FRle3yJD2Tmikc.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44901
IP address blocks: 185.244.128.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:66:10:96:97:79:df:bd:f3:e8:a3:e8:69:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4853cb417044ba2b5ff454657b7c890f64e68a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:a8:b5:78:fc:80:14:21:32:42:9b:af:c1:
de:2b:90:13:44:5d:b1:96:b6:f9:de:68:e6:af:ad:
18:fd:77:bd:2e:7a:2a:d9:18:df:bd:11:ee:91:2e:
48:32:14:ba:b6:32:3b:8e:c4:67:1b:06:bd:f9:96:
8d:79:0e:86:e5:2e:0e:c6:6e:ba:ec:01:38:15:0f:
e9:e0:d7:f0:1e:12:e4:e0:ef:d6:64:ef:8a:3f:b4:
82:09:52:ac:72:05:6a:1b:d4:44:67:e6:65:ab:bd:
20:51:b1:41:1e:c5:9b:5a:35:28:e1:9b:b2:41:a0:
ea:93:54:62:5f:28:fc:30:84:d7:d7:0c:4c:d6:12:
3b:69:6c:bd:9b:0d:a2:3b:78:63:7a:bc:e2:df:12:
1d:15:d2:ff:82:f7:4d:ca:82:61:12:b5:0d:f7:a6:
44:19:bf:e1:2a:71:04:78:63:d9:d6:f8:db:03:91:
95:a8:6b:12:6e:a8:13:3a:bf:87:61:88:e2:01:9c:
f6:72:9b:bc:0e:60:96:b7:f3:2d:a4:69:ce:24:80:
1a:f5:69:fa:26:65:6e:c2:6a:5f:a5:97:68:94:3e:
1a:df:28:8e:36:bb:6f:24:81:10:cc:0c:8d:08:42:
64:00:89:94:af:47:9d:71:81:a7:9c:29:e0:3e:00:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:CB:41:70:44:BA:2B:5F:F4:54:65:7B:7C:89:0F:64:E6:8A:47
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/SFPLQXBEuitf9FRle3yJD2Tmikc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.128.0/24
Signature Algorithm: sha256WithRSAEncryption
81:53:a6:94:1a:fe:d0:4c:d0:23:45:fa:b0:b1:12:e1:26:d1:
90:34:93:80:8d:b8:24:a4:60:ba:71:4f:55:a7:6c:67:dd:d5:
02:db:39:00:7e:da:5e:24:b6:ab:ee:90:65:e3:a9:eb:20:c3:
59:b7:12:8b:7a:c6:e7:5f:cd:49:45:b2:5b:85:0b:46:7e:20:
4d:ab:4e:52:ff:4d:9c:49:36:70:ff:b7:69:e1:95:d1:30:f3:
05:27:40:1c:99:90:06:11:09:df:5e:59:a2:99:23:8d:2d:38:
5c:9f:c4:20:a4:4c:a3:74:24:fc:5f:c1:4e:c3:0a:e4:08:1d:
a5:db:09:ae:22:68:3a:75:f8:a9:dc:21:dd:7a:0f:b5:ff:8c:
c6:1e:1f:ff:23:31:f9:46:69:7b:5a:d5:83:33:36:45:29:b2:
86:96:9f:b9:2f:25:3b:ed:f3:56:74:5b:cf:73:0d:c4:f2:90:
84:ab:47:ae:39:1c:66:91:7d:df:e3:7c:12:c1:c0:b6:64:5d:
7e:03:41:43:5d:95:c1:1d:28:6a:d7:31:05:aa:86:b1:0a:88:
89:29:17:ef:54:f9:db:8b:5a:23:a4:13:51:f4:a8:84:be:df:
a5:70:74:c0:a9:6a:79:21:8d:f0:cc:35:f0:33:f6:e9:7f:73:
83:59:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:17 2026 by rpki-client