Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/SKxfM8vS1jvBfGto0Ag-UhpANXY.roa
File: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (raw, json)
Hash identifier: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=
Subject key identifier: 48:AC:5F:33:CB:D2:D6:3B:C1:7C:6B:68:D0:08:3E:52:1A:40:35:76
Certificate issuer: /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial: 019D059910BFD23B28562CE61373F36AC877
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/SKxfM8vS1jvBfGto0Ag-UhpANXY.roa
Signing time: Thu 19 Mar 2026 10:16:50 +0000
ROA not before: Thu 19 Mar 2026 10:16:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 2001:67c:1544::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:99:10:bf:d2:3b:28:56:2c:e6:13:73:f3:6a:c8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Validity
Not Before: Mar 19 10:16:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48ac5f33cbd2d63bc17c6b68d0083e521a403576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:05:48:7f:00:e7:52:17:cf:d0:4b:43:c3:
55:e8:eb:6b:22:fa:58:d8:af:ee:5d:76:f4:86:6d:
c2:a3:cd:86:86:ea:cb:de:84:93:8a:90:32:b5:ff:
4e:9f:bb:42:4b:b1:66:91:0b:1f:8c:39:6a:a3:ab:
1c:ff:a9:b5:f1:85:b9:d7:cf:05:c1:b3:ef:cd:06:
9c:d9:0a:dd:69:c5:5a:02:2f:e6:2f:2c:d6:c3:63:
4a:1d:7a:ad:90:c5:48:20:e4:0a:6c:59:67:f2:a1:
82:a7:5c:6f:5f:97:8c:aa:82:26:e2:d4:21:ba:6f:
21:35:a2:29:19:d3:3d:41:d3:13:05:d5:80:83:9f:
37:33:48:b4:21:73:c0:6d:8e:92:cd:80:7b:2d:8a:
81:5d:e7:f8:a3:1c:0c:73:67:82:98:e4:d0:aa:d9:
47:1a:60:97:cd:a3:2d:ff:75:6f:a8:2a:56:bc:71:
3d:46:88:13:13:0d:bd:c4:c6:ab:97:87:ac:93:cd:
f8:4d:29:e7:d6:3d:b1:1a:92:ff:d0:0c:47:97:1d:
25:5e:dc:b1:76:f9:3a:70:ad:99:0f:69:ed:53:27:
6d:44:4d:c9:03:07:0b:e8:e2:c8:4b:44:9c:9d:e2:
f8:0f:7d:04:3e:1b:4e:f3:91:8e:a2:8b:b1:15:a4:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:5F:33:CB:D2:D6:3B:C1:7C:6B:68:D0:08:3E:52:1A:40:35:76
X509v3 Authority Key Identifier:
keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/SKxfM8vS1jvBfGto0Ag-UhpANXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1544::/48
Signature Algorithm: sha256WithRSAEncryption
a0:7d:bd:33:58:f9:05:c5:98:0f:fd:f5:ac:d3:17:3f:52:c6:
78:d8:03:47:b5:71:d8:83:b5:8d:16:a8:77:47:14:16:19:fe:
d0:d2:ac:d4:76:96:2b:92:37:29:55:c7:a2:c9:6f:56:a0:50:
cb:a8:69:5a:12:2b:9e:15:3c:04:ba:d8:b3:33:15:d1:89:ca:
4f:48:1f:26:a0:eb:b6:a6:e0:7a:01:d8:1b:96:78:57:e9:6b:
2c:43:ae:89:0d:63:c2:4c:b2:39:90:d1:76:92:03:b7:e5:6b:
b3:e1:ff:74:bb:6f:15:53:ee:3e:94:1d:ca:ae:9f:01:ab:6f:
7e:aa:ee:4b:20:2a:4e:e7:9c:ea:07:c6:b4:7f:57:db:fd:e9:
fb:fb:86:80:b2:33:51:37:af:7f:ea:f1:ff:59:64:83:cf:65:
e6:5d:12:b1:2f:d3:1d:c0:5a:18:ce:2d:44:e6:77:a2:98:c9:
10:f1:91:f7:99:4e:ff:50:c4:e4:bb:82:d8:84:95:d7:c1:a1:
0a:9f:d7:35:94:d1:cc:7b:26:58:ac:c9:95:9d:77:e7:8d:c2:
d0:7b:3d:ec:5e:14:5d:54:de:c3:18:87:fb:a9:60:94:0d:a9:
07:d3:e1:04:69:31:37:e9:7b:ee:0b:a3:67:eb:28:c1:32:69:
b0:af:28:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:48:56 2026 by rpki-client