Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/sPmbni1thag-ZD5GoxURFag1BBI.roa
File: sPmbni1thag-ZD5GoxURFag1BBI.roa (raw, json)
Hash identifier: Dq8w0CYzzjZDzQmeXPiHvVGWoSFBohmUWKdrqWUCd28=
Subject key identifier: B0:F9:9B:9E:2D:6D:85:A8:3E:64:3E:46:A3:15:11:15:A8:35:04:12
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 01A0D521C1B7551C282F58B96D456EECD6BB
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/sPmbni1thag-ZD5GoxURFag1BBI.roa
Signing time: Thu 24 Sep 2026 20:35:54 +0000
ROA not before: Thu 24 Sep 2026 20:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 217.65.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:21:c1:b7:55:1c:28:2f:58:b9:6d:45:6e:ec:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Sep 24 20:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0f99b9e2d6d85a83e643e46a3151115a8350412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:fd:17:26:14:7b:07:18:46:90:2d:3a:ea:
b9:20:86:f1:10:e5:17:61:16:f0:5e:e6:4b:db:30:
e2:42:81:c9:7b:b4:74:61:b8:35:bf:41:92:f1:72:
d8:b0:a9:9c:9b:0e:ff:8a:c0:c0:74:25:ce:70:c1:
16:57:cd:2a:fb:ab:ce:23:2b:36:21:8c:1e:27:5a:
da:d5:1b:a6:a2:a3:de:49:d6:2e:1d:c5:32:0b:8d:
7c:9c:6c:d4:6b:22:6a:91:31:9e:f6:7c:97:b3:ef:
8e:79:2a:ad:a9:30:01:40:c1:70:0c:fe:ab:fb:43:
d5:e6:2e:d4:c5:fb:f9:9c:a9:f7:fe:e0:6d:96:2f:
bc:dd:19:89:23:d1:34:65:36:d3:05:13:22:98:54:
49:b2:16:3b:78:56:17:12:bb:bf:11:0e:b6:d0:47:
aa:fa:f4:3f:94:71:b0:0c:3a:0f:25:01:23:72:0a:
b5:9e:6b:24:f6:c7:77:6e:37:c5:de:14:bc:59:d8:
33:29:e2:81:4a:9e:31:4c:2b:b2:55:36:e1:b9:75:
3b:00:dd:ac:d2:b3:08:a6:c4:c3:b2:ff:d7:fd:58:
37:25:df:87:b1:f6:01:98:c1:29:3d:69:18:61:53:
a1:f6:0a:80:cb:c6:33:6a:6c:f2:ad:94:3d:9b:6b:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:9B:9E:2D:6D:85:A8:3E:64:3E:46:A3:15:11:15:A8:35:04:12
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/sPmbni1thag-ZD5GoxURFag1BBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.72.0/24
Signature Algorithm: sha256WithRSAEncryption
62:01:8f:4d:7c:0d:6f:66:af:66:e7:58:f7:11:fe:23:38:b4:
fa:9f:1b:16:b1:3c:a4:0f:71:6b:33:e7:49:2d:5e:4f:05:76:
5a:e5:64:78:30:84:af:51:46:62:ad:78:4e:0f:04:07:34:39:
f2:41:81:3d:09:4f:04:61:33:66:a6:8b:ac:49:88:46:43:fc:
37:08:f0:e7:2a:4b:1b:56:cb:80:a4:42:1f:37:d9:41:29:93:
57:73:05:20:0c:bf:2a:26:19:1f:44:6a:44:eb:03:15:fb:42:
93:8b:68:e3:b5:1c:02:4b:56:2f:c6:98:72:b2:de:84:72:7b:
ec:78:79:c7:59:29:a7:25:1c:47:7d:67:5d:e6:e5:59:01:22:
52:af:d4:66:16:ab:e5:50:46:9c:52:1d:9b:16:ce:04:20:e8:
2e:fc:78:a7:a3:2a:99:69:d4:0a:09:f8:fd:63:bf:6c:f5:d7:
03:00:08:a2:4d:30:97:31:65:43:e2:7f:ed:cd:13:5a:8b:d4:
de:92:63:a7:bd:b7:93:5b:d6:b6:ba:ce:9b:f9:d5:48:c1:54:
35:f5:d9:6b:e2:88:86:08:d6:d4:9f:fe:d9:dd:94:bb:37:9d:
69:2f:c3:f2:cc:90:7b:1e:f7:7e:63:b3:d0:6c:45:e0:c5:b9:
7d:d5:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:41:49 2026 by rpki-client