Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/sptD_SP5mhKTKaXCvX_xij3mTc0.roa
File: sptD_SP5mhKTKaXCvX_xij3mTc0.roa (raw, json)
Hash identifier: 7umL9bhBhCGN0pKOVOKEoWxSfrKW+H7O6vZH9R2/gDc=
Subject key identifier: B2:9B:43:FD:23:F9:9A:12:93:29:A5:C2:BD:7F:F1:8A:3D:E6:4D:CD
Certificate issuer: /CN=ad25f893d36e0770e57b2d0cd7740a291b50555a
Certificate serial: 019CAF71A6E2E5D7AE5A9905B3F82CD66B55
Authority key identifier: AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/sptD_SP5mhKTKaXCvX_xij3mTc0.roa
Signing time: Mon 02 Mar 2026 16:46:26 +0000
ROA not before: Mon 02 Mar 2026 16:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213822
IP address blocks: 185.36.229.0/24 maxlen: 24
2a07:cd40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:71:a6:e2:e5:d7:ae:5a:99:05:b3:f8:2c:d6:6b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad25f893d36e0770e57b2d0cd7740a291b50555a
Validity
Not Before: Mar 2 16:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b29b43fd23f99a129329a5c2bd7ff18a3de64dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:64:91:5c:b2:de:8b:be:e9:8e:7e:b4:76:
9e:8a:38:13:9d:cc:b1:eb:d4:3a:3a:19:81:07:3b:
00:ba:a8:cf:e1:66:bd:e3:dd:bc:58:de:c7:84:57:
cf:f0:00:47:d8:7f:8e:24:eb:38:e8:bd:1c:4b:82:
c4:c2:fa:aa:fd:44:ca:61:7e:4d:a1:5c:37:e1:fa:
19:50:f5:10:a9:d4:b7:42:86:79:f3:3e:08:40:a6:
ee:a1:c8:a1:16:fd:24:5e:6e:25:45:6d:12:fa:42:
fb:4e:74:9b:79:54:c8:35:46:61:d6:55:7a:20:f3:
be:0a:00:95:d5:fc:c9:66:9a:02:87:e8:d1:fa:4b:
4f:62:4a:c6:a3:47:e4:f9:13:b8:17:26:07:0d:42:
60:1d:1c:61:ec:00:c2:62:e4:0e:71:fe:bc:a3:94:
ba:bb:c7:1a:4c:a0:44:33:f6:90:bf:ad:4d:c9:57:
b4:07:0a:d2:6b:c3:55:fc:dd:e8:ff:81:4c:57:e6:
4b:d9:78:cb:57:91:46:93:66:67:ff:bf:a0:07:bb:
e1:a9:37:d2:ab:c7:3b:c2:18:74:d6:ee:64:ed:f2:
b8:91:7b:f3:b3:22:d7:c0:76:67:c6:cd:c1:de:b6:
a9:45:17:32:82:f3:72:5c:be:e1:63:a4:b2:22:8b:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:43:FD:23:F9:9A:12:93:29:A5:C2:BD:7F:F1:8A:3D:E6:4D:CD
X509v3 Authority Key Identifier:
keyid:AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/sptD_SP5mhKTKaXCvX_xij3mTc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.229.0/24
IPv6:
2a07:cd40::/32
Signature Algorithm: sha256WithRSAEncryption
89:71:a7:42:4c:8e:13:c9:e6:4a:bc:1c:84:b2:ca:05:29:e8:
be:11:20:e0:0f:77:10:73:8f:52:86:f8:4e:5d:ce:e2:9b:3b:
3c:7d:1d:84:30:54:7c:eb:3f:4a:e8:ab:21:ce:3b:d0:86:f1:
31:9b:50:b1:db:70:c3:a7:e5:ce:68:57:69:43:bf:ae:48:4b:
3e:08:08:82:cc:76:07:4a:1c:56:12:83:e6:6f:9b:03:a0:1d:
5f:d4:c3:72:77:b0:8e:39:86:0b:19:80:a5:a2:64:e9:d1:9b:
22:2c:87:e4:50:80:c1:05:29:c7:2a:c4:1c:3e:b7:f3:1c:f6:
5b:ce:25:9e:9a:08:7d:5b:14:0c:f9:7e:37:f4:85:b9:e8:5a:
8e:fd:7c:38:25:a2:5f:4d:e4:d7:b5:b9:2c:7c:f6:2e:91:94:
98:58:b4:47:2d:65:f7:6c:72:54:37:ca:12:a3:87:ae:f4:59:
43:c6:6d:b0:01:45:31:9f:c2:af:ba:b4:0c:2b:d7:69:66:f0:
cf:cc:7f:f4:9d:8b:23:af:33:68:ea:d8:f7:37:62:9a:ac:c5:
e5:f9:70:fb:2b:47:b6:04:88:3e:8b:f7:6c:a2:1b:42:e6:ea:
dc:df:0e:86:29:1a:3a:12:01:61:69:ff:8b:e5:06:f3:c4:ea:
2a:05:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:46 2026 by rpki-client