Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/SzV7YXB0I-v32buFZVhcBfuK4b8.roa
File: SzV7YXB0I-v32buFZVhcBfuK4b8.roa (raw, json)
Hash identifier: 9Bg/sMGFQWNrP6cNVtWMxuP3OzfvHUrPEKBcUfgdp5M=
Subject key identifier: 4B:35:7B:61:70:74:23:EB:F7:D9:BB:85:65:58:5C:05:FB:8A:E1:BF
Certificate issuer: /CN=816b169d19fa3950d145d584afa61701fcdab5d1
Certificate serial: 019F23692AB5B583B511E3CBC7A7F36F56E8
Authority key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/SzV7YXB0I-v32buFZVhcBfuK4b8.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1213
IP address blocks: 147.252.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2a:b5:b5:83:b5:11:e3:cb:c7:a7:f3:6f:56:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b169d19fa3950d145d584afa61701fcdab5d1
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b357b61707423ebf7d9bb8565585c05fb8ae1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:2d:ac:1e:9d:94:77:a9:a7:ed:4b:a7:c1:
f2:d2:36:90:02:71:7e:79:d0:b5:a9:f3:77:ea:7f:
9a:5d:68:2b:4c:b7:9a:2a:18:53:ef:64:df:d0:2e:
fd:b0:98:a6:73:b7:c0:ed:ca:4e:1f:02:2b:1d:5a:
a7:f5:c1:97:d1:af:6d:fa:69:c3:2d:25:58:3d:83:
a0:dd:42:dd:b2:b9:b0:36:b4:12:94:b0:c9:18:84:
ca:85:03:ad:27:62:91:4f:bb:22:2e:54:83:2f:f9:
28:bc:c6:e9:77:dd:b9:20:d2:01:e1:5f:86:4c:2b:
10:76:6a:be:58:9d:6a:b0:7e:92:d2:0a:fc:d2:98:
3b:98:c5:40:e5:66:ed:c9:80:68:43:d9:db:df:ef:
d8:f1:91:f8:5a:31:0f:63:e6:2a:69:a3:a6:43:97:
a9:da:a5:23:66:a5:04:55:d1:7e:1e:ef:c1:e4:67:
a9:6b:5f:bf:80:df:4d:04:40:79:d1:b9:8e:c6:1c:
8c:30:10:f8:57:4b:30:91:14:b9:8a:0b:bd:dd:d8:
a9:5d:ff:e5:79:ae:84:9e:0c:16:f9:58:71:6e:63:
fe:98:4f:d0:9e:11:9a:54:29:34:f5:a0:f6:64:69:
ce:36:bc:6a:63:42:f4:dc:fa:97:e8:e0:bf:c3:ce:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:7B:61:70:74:23:EB:F7:D9:BB:85:65:58:5C:05:FB:8A:E1:BF
X509v3 Authority Key Identifier:
keyid:81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/SzV7YXB0I-v32buFZVhcBfuK4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:79:3d:c1:93:90:89:c2:f6:a1:f2:81:9b:46:76:6f:b0:09:
9a:40:b1:98:01:88:7c:38:45:c5:d8:6f:9c:27:e8:ca:aa:b3:
15:12:c2:31:6c:ef:26:68:be:59:8d:cc:1e:ff:78:83:b8:bd:
1b:4c:94:78:86:b1:0a:e1:66:20:1e:0f:ad:5b:51:77:86:f7:
14:97:bc:64:63:f5:6a:2e:18:52:ce:fc:5a:33:79:63:14:4d:
98:95:17:85:5f:b1:a0:f7:3b:70:e7:64:72:e4:d7:01:a3:98:
e5:66:14:fc:f3:d0:3c:32:34:e1:ca:66:13:41:08:36:a0:05:
73:c6:f5:0a:cf:08:32:85:6c:d4:3e:1f:26:86:fb:26:2b:7e:
e1:1d:af:55:f6:09:3a:5c:7f:12:2c:96:05:c9:84:b6:ad:fc:
15:02:92:e5:6f:1a:08:a1:98:0d:09:e0:0a:97:26:43:21:90:
37:d8:5c:a7:e3:52:3c:a1:a8:46:fe:65:80:75:8e:dd:72:49:
0f:22:d2:35:f9:7e:4a:28:11:f6:ac:68:1d:56:24:d2:30:e9:
7b:65:ab:34:49:80:99:f5:4e:6a:c7:e1:8e:c7:cc:37:7c:c5:
67:ed:c1:fe:9b:0c:3f:3f:2b:09:81:68:44:fa:ca:cf:f0:7b:
9d:cf:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:31 2026 by rpki-client