Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/SRWh4DySnbPbtUqnKudLh37LWmk.roa
File: SRWh4DySnbPbtUqnKudLh37LWmk.roa (raw, json)
Hash identifier: 3VUWYpD5nskw9fhQcV0TB/lPM9InR0vwQ+h1mvelWpc=
Subject key identifier: 49:15:A1:E0:3C:92:9D:B3:DB:B5:4A:A7:2A:E7:4B:87:7E:CB:5A:69
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019F76DBA633ECF02F52E347FF37E8AB8574
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/SRWh4DySnbPbtUqnKudLh37LWmk.roa
Signing time: Sat 18 Jul 2026 20:12:14 +0000
ROA not before: Sat 18 Jul 2026 20:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 193.142.146.0/24 maxlen: 24
193.142.147.0/24 maxlen: 24
2a0f:ca80::/48 maxlen: 48
2a0f:ca80:1::/48 maxlen: 48
2a0f:ca80:616::/48 maxlen: 48
2a0f:ca80:619::/48 maxlen: 48
2a0f:ca80:1100::/40 maxlen: 40
2a0f:ca80:1337::/48 maxlen: 48
2a0f:ca80:1338::/48 maxlen: 48
2a0f:ca80:abcd::/48 maxlen: 48
2a0f:ca80:f000::/40 maxlen: 40
2a0f:ca83:1234::/48 maxlen: 48
2a0f:ca83:1337::/48 maxlen: 48
2a0f:ca84::/40 maxlen: 40
2a0f:ca86::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:db:a6:33:ec:f0:2f:52:e3:47:ff:37:e8:ab:85:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jul 18 20:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4915a1e03c929db3dbb54aa72ae74b877ecb5a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:2a:4e:94:d9:58:d9:f4:5d:63:db:2b:e6:
77:bb:c4:0c:c2:03:b6:e5:8a:99:8b:eb:32:09:1c:
47:11:28:a4:ee:28:42:e0:76:93:1c:85:0f:52:5a:
04:09:a0:c8:3a:d8:0e:8e:26:4e:89:5f:b4:e3:5a:
cc:bf:5d:ee:56:f8:9d:db:fa:0c:b3:90:de:dd:1e:
72:3f:22:f5:7f:67:da:34:d3:ed:1d:76:bf:a2:b7:
52:30:10:9c:bb:12:7b:af:6d:67:d0:9d:7c:4c:2f:
f5:be:2f:2e:03:e4:69:a5:6f:5f:a5:49:e7:6e:a9:
e8:55:ee:9c:6b:59:69:77:a1:a0:bf:6d:38:4c:95:
a2:a7:43:a5:cb:8d:96:ac:6d:f3:70:a9:09:a5:0b:
69:19:cb:ad:73:b9:1c:2c:0a:d0:4f:4c:bd:2d:c6:
06:af:f4:50:7f:0c:8d:2b:bc:bb:0d:5b:38:20:89:
e6:c2:21:f4:b4:f5:8e:29:17:06:ab:09:44:19:07:
a8:15:60:bb:c6:67:c4:30:80:0a:e5:7b:fa:39:7a:
5b:2e:33:fb:2c:d5:26:97:f6:b5:12:07:20:80:c4:
a4:9f:63:de:1c:87:23:61:ba:62:d7:4d:df:0b:82:
ed:e6:05:af:c2:02:b4:13:a9:e9:80:83:6e:12:35:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:A1:E0:3C:92:9D:B3:DB:B5:4A:A7:2A:E7:4B:87:7E:CB:5A:69
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/SRWh4DySnbPbtUqnKudLh37LWmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80::/47
2a0f:ca80:616::/48
2a0f:ca80:619::/48
2a0f:ca80:1100::/40
2a0f:ca80:1337::-2a0f:ca80:1338:ffff:ffff:ffff:ffff:ffff
2a0f:ca80:abcd::/48
2a0f:ca80:f000::/40
2a0f:ca83:1234::/48
2a0f:ca83:1337::/48
2a0f:ca84::/40
2a0f:ca86::/40
Signature Algorithm: sha256WithRSAEncryption
13:44:0b:0a:0c:4b:ed:1a:f8:63:a7:79:1f:c2:5e:47:3f:7d:
9f:dc:6a:a3:68:37:ac:45:ca:2b:88:6f:b2:12:f5:27:88:c9:
cb:14:1c:62:70:30:6d:ec:ca:ea:ef:dc:5f:03:8a:ab:70:fd:
a4:6f:da:94:2d:1c:40:8c:0f:c5:2a:e8:ea:2f:e6:b2:0f:26:
35:17:8c:73:6b:f6:c4:b6:88:b4:61:1f:01:32:39:0e:bc:1e:
73:b9:d7:01:b4:ac:58:a1:fa:29:47:82:da:eb:17:c5:2a:46:
f9:59:4c:fc:b7:46:bf:ac:c7:34:8c:8a:00:3b:99:9e:d3:11:
4c:5c:e5:48:16:38:11:a8:73:46:2c:6d:a8:90:f9:61:c8:0c:
85:1f:dc:30:12:ab:b4:b0:ae:7a:f7:1c:9e:44:30:02:19:d9:
b4:6b:63:fc:e9:64:df:a8:cc:80:bb:54:1b:84:10:55:1c:e0:
3e:88:a7:c9:7e:5b:fa:e0:8a:38:c3:8c:56:26:4f:ed:be:62:
03:fc:4f:c1:1a:91:6f:87:03:78:bd:a8:6a:8b:c4:cd:4a:93:
b7:fd:97:b7:ef:f2:cc:c4:9c:56:2a:a4:f4:cf:a4:be:fc:0f:
34:75:1d:84:13:95:ac:88:f3:6b:7b:ea:42:67:7c:2d:ac:27:
aa:28:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:42:52 2026 by rpki-client