Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/SydOZR_hUHXUbU5dpEAWRzOO5Fg.roa
File: SydOZR_hUHXUbU5dpEAWRzOO5Fg.roa (raw, json)
Hash identifier: yhkIP65AmE7hND02w81gIr30sWjkyRR90IBNtd02wYs=
Subject key identifier: 4B:27:4E:65:1F:E1:50:75:D4:6D:4E:5D:A4:40:16:47:33:8E:E4:58
Certificate issuer: /CN=b4dbc975bf279b4a8e1857dceba4dfa3ca185c42
Certificate serial: 01A0C4ABC7823E767F4F30FAB18B6FDC37AD
Authority key identifier: B4:DB:C9:75:BF:27:9B:4A:8E:18:57:DC:EB:A4:DF:A3:CA:18:5C:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNvJdb8nm0qOGFfc66Tfo8oYXEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/SydOZR_hUHXUbU5dpEAWRzOO5Fg.roa
Signing time: Mon 21 Sep 2026 15:53:07 +0000
ROA not before: Mon 21 Sep 2026 15:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24958
IP address blocks: 193.164.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNvJdb8nm0qOGFfc66Tfo8oYXEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ab:c7:82:3e:76:7f:4f:30:fa:b1:8b:6f:dc:37:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dbc975bf279b4a8e1857dceba4dfa3ca185c42
Validity
Not Before: Sep 21 15:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b274e651fe15075d46d4e5da4401647338ee458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:57:54:41:18:a0:8d:f0:5e:f9:45:92:f7:
03:53:62:cc:13:61:37:97:45:74:cc:36:d8:1c:fc:
e9:45:75:cf:be:27:f8:46:b5:f5:7b:65:44:c0:45:
33:a4:85:63:9a:fd:23:eb:84:66:b8:03:d6:6c:3e:
92:51:6d:c2:6b:49:07:26:09:f3:5a:97:95:60:b3:
51:e7:b4:da:e3:c0:ce:c7:6a:a0:da:82:7d:c4:15:
ef:e8:04:be:e0:8d:2a:98:e4:2f:02:d7:2d:92:f4:
b2:10:ac:76:fa:fe:af:bd:21:0c:61:bd:f6:d3:04:
2e:f5:20:05:b6:2b:6e:08:5d:93:16:e3:f8:e7:a4:
75:e1:02:74:44:8c:23:e9:3f:07:e3:f3:fc:19:16:
4b:0a:e6:f3:a7:f4:f1:30:63:23:1c:83:fb:de:4a:
b1:63:bf:46:d2:dd:4b:c8:6e:52:89:58:78:86:14:
46:63:4a:88:b7:af:72:0e:07:81:b2:de:91:cb:33:
b8:e0:77:ad:2e:f9:45:62:bb:78:ab:e7:50:a4:13:
dd:c6:98:21:24:91:06:29:90:e1:ca:35:98:a4:6d:
3e:9b:14:d9:69:f2:13:17:3e:65:00:c7:ea:8c:86:
59:06:32:67:28:d3:b6:c6:50:5d:62:c7:87:25:b8:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:4E:65:1F:E1:50:75:D4:6D:4E:5D:A4:40:16:47:33:8E:E4:58
X509v3 Authority Key Identifier:
keyid:B4:DB:C9:75:BF:27:9B:4A:8E:18:57:DC:EB:A4:DF:A3:CA:18:5C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNvJdb8nm0qOGFfc66Tfo8oYXEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/SydOZR_hUHXUbU5dpEAWRzOO5Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/35126d-7fcb-44a7-a029-a2da267a3881/1/tNvJdb8nm0qOGFfc66Tfo8oYXEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:13:f9:ff:99:3f:7b:8d:ff:a1:ed:e5:eb:c0:3c:b7:c7:16:
a9:56:d4:6d:db:8c:af:15:c2:8a:e8:11:34:b8:13:a6:c2:02:
35:16:12:e3:b6:71:c5:87:d9:91:a8:0c:2b:70:86:1c:41:11:
66:2a:8d:4a:47:e3:19:b8:6f:45:ad:1d:d3:a0:d8:e6:d5:39:
09:67:b9:35:c2:b7:a5:cf:56:7b:d1:04:5c:8f:f6:cc:c4:31:
69:12:fe:07:53:d5:05:83:97:65:69:c8:3f:85:4e:11:7c:60:
fc:2c:0d:ce:0e:ca:3f:5b:5f:ba:e0:eb:bb:00:cf:69:b0:fa:
4e:33:12:65:d7:50:47:9c:bf:d5:c1:b3:a2:f6:8b:ef:7f:83:
3d:f1:f2:50:ec:af:c7:e6:98:82:5d:d3:4a:20:41:db:2b:d3:
08:35:1a:68:1f:1f:75:96:19:7f:45:5e:7a:17:ec:db:a5:c6:
8b:8d:b5:60:f8:2d:52:c8:af:5d:0f:93:fe:e9:10:96:53:ba:
01:46:2a:3f:da:06:d9:e6:64:35:a7:0d:c6:3b:9b:57:7d:bc:
29:33:a2:09:ba:6c:63:41:42:72:73:39:7b:ae:12:b7:e7:b0:
31:5e:8b:06:78:19:a9:cd:63:a9:c6:80:92:1a:99:14:03:04:
bb:75:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:07:24 2026 by rpki-client