Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/skWcqredBZgrMKomHmeg94TeVks.roa
File: skWcqredBZgrMKomHmeg94TeVks.roa (raw, json)
Hash identifier: qn0q4F+w0NghTvIReDGiviVv3QOe+6Epu6I5UvU2ldk=
Subject key identifier: B2:45:9C:AA:B7:9D:05:98:2B:30:AA:26:1E:67:A0:F7:84:DE:56:4B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A10AEAB9E5DD1E6151F11E784B896F6DDD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/skWcqredBZgrMKomHmeg94TeVks.roa
Signing time: Mon 05 Oct 2026 07:15:17 +0000
ROA not before: Mon 05 Oct 2026 07:15:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51956
IP address blocks: 192.36.36.0/24 maxlen: 24
192.36.214.0/24 maxlen: 24
192.36.215.0/24 maxlen: 24
192.71.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:ea:b9:e5:dd:1e:61:51:f1:1e:78:4b:89:6f:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 5 07:15:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2459caab79d05982b30aa261e67a0f784de564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:80:06:50:f2:a6:a6:e3:09:98:85:b7:37:
44:ba:fb:10:8a:b3:c6:2e:d2:ac:56:31:bd:b2:4a:
6b:12:dc:66:a0:1b:c4:0e:06:5d:05:64:59:9c:5f:
91:3d:b2:a1:56:04:a7:54:0a:df:ee:0b:4a:0c:4f:
3e:0f:4e:10:20:dd:c9:55:75:e7:70:47:26:ba:42:
ba:81:68:89:af:4c:61:2c:34:5e:1e:86:80:e9:dd:
e0:68:a5:ad:5e:c3:3b:cf:7f:02:cd:12:ae:e9:c6:
7f:23:07:ee:d5:9a:69:dd:4c:eb:4e:26:54:ff:f2:
7a:6b:df:96:99:fa:7f:04:e4:93:c9:5b:0d:e2:28:
c0:90:e2:37:b7:d6:3a:0c:d7:a4:fa:8c:31:95:b8:
32:6e:f2:33:80:62:38:94:a8:4e:75:97:61:44:e8:
68:0d:60:42:44:97:ab:dd:43:33:53:45:7a:91:da:
03:8b:9d:e4:4b:c5:27:2b:e8:ad:f1:a8:bb:b1:29:
6d:fb:da:a3:d9:f9:ad:15:e2:e8:c6:22:23:57:5b:
13:06:5e:14:dc:a5:15:17:74:5a:12:7a:fb:bd:f0:
01:8c:a0:21:d3:35:40:17:c2:27:69:5a:57:16:00:
52:7e:b7:64:19:d7:37:67:c2:e4:df:23:ed:9b:a3:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:45:9C:AA:B7:9D:05:98:2B:30:AA:26:1E:67:A0:F7:84:DE:56:4B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/skWcqredBZgrMKomHmeg94TeVks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.36.0/24
192.36.214.0/23
192.71.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:52:dc:36:79:55:be:58:0f:d9:66:99:aa:a4:d0:3d:a0:c7:
d9:1a:a8:97:4e:9c:42:fa:03:01:18:22:2e:0b:4b:f2:c2:02:
d7:21:00:3e:f5:ca:d7:13:03:d2:8e:f6:8e:f8:4e:47:e7:a9:
b0:c8:93:a3:5a:6f:30:84:a7:fd:ba:3a:b7:a8:f5:f6:12:70:
5b:8b:dd:2c:dc:f4:57:97:af:f4:be:4b:7a:d3:2f:a9:46:1c:
b3:71:78:fb:6c:6a:b3:9b:64:dc:33:a9:c4:50:2a:b4:a8:ed:
8b:3a:5b:c2:8c:d8:97:10:63:4c:a0:7f:46:b8:a2:af:17:2e:
c6:32:80:90:38:ed:c2:da:1d:ee:de:2f:05:dc:40:fc:65:b7:
9e:7c:a7:d9:9c:f0:a1:29:80:2f:4c:e2:d8:27:57:00:14:8e:
25:bd:51:6b:b8:d2:43:0a:d9:ed:65:28:1c:98:79:f4:b7:39:
ec:ed:51:79:20:9b:01:68:8b:46:c8:77:9f:2f:06:a5:85:6f:
8d:47:bb:d9:10:ba:02:a6:e2:38:31:96:8d:66:ab:12:42:41:
03:e8:d3:57:4e:3d:04:54:fb:3a:29:7d:34:1f:59:d3:fc:89:
d1:77:47:f8:7d:23:d2:67:29:3c:70:e9:49:0f:9c:a0:e0:4d:
5f:22:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:49:06 2026 by rpki-client