Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/su82rcXot9m4Oy9K0FlOPXjQokA.roa
File: su82rcXot9m4Oy9K0FlOPXjQokA.roa (raw, json)
Hash identifier: NI3FeLiF5hrONml+ClMirVnRKzwaGy4tC2KGOZ7IoK8=
Subject key identifier: B2:EF:36:AD:C5:E8:B7:D9:B8:3B:2F:4A:D0:59:4E:3D:78:D0:A2:40
Certificate issuer: /CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Certificate serial: 019F2369051F2EB43637AB1A51EDFFF86242
Authority key identifier: 2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/su82rcXot9m4Oy9K0FlOPXjQokA.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 137.253.0.0/16 maxlen: 16
192.12.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:05:1f:2e:b4:36:37:ab:1a:51:ed:ff:f8:62:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d61dd95259c268cd6e36e55bcb2cbcc535b0a88
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2ef36adc5e8b7d9b83b2f4ad0594e3d78d0a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:b0:6a:1a:7c:e7:ef:ff:91:fc:e5:8e:4e:
9b:32:da:ce:2f:8b:d0:ac:1e:08:56:3a:f2:7e:7d:
37:6a:ae:b1:db:fa:74:2f:8d:dd:5e:99:9e:8b:7d:
5b:16:f0:71:ec:b0:d1:41:23:28:56:31:94:c9:8a:
9b:ed:53:04:68:a5:09:95:98:a1:eb:07:bb:54:55:
c0:7c:07:31:1a:2b:d4:a1:12:fc:8b:02:65:73:9b:
4d:c7:21:c8:fd:61:58:f5:5b:30:48:f4:05:79:f1:
d8:9d:bb:db:c8:dd:a9:9b:80:2d:05:6c:5f:75:61:
3f:50:cb:ca:2f:02:09:c5:5b:d3:f3:05:c8:9d:62:
be:49:78:cb:7d:8a:a7:cd:50:4b:6d:94:79:8a:5a:
67:43:f1:23:b5:03:d0:c3:3a:98:86:ed:a6:da:89:
23:66:42:83:d1:9c:6a:c4:2a:5e:e3:00:a6:75:18:
8c:9f:e1:fe:87:a5:1c:d0:cd:13:ca:f8:42:03:ba:
44:80:fb:d7:1d:7a:40:17:cc:ad:89:7d:f0:93:a9:
58:5e:99:63:94:88:a9:d7:ec:3c:20:64:6c:6e:5f:
5e:37:b7:95:e8:69:ee:b2:00:29:99:ce:be:83:26:
74:4d:c8:be:e8:23:3d:c5:a4:f9:b8:ec:89:86:fd:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:36:AD:C5:E8:B7:D9:B8:3B:2F:4A:D0:59:4E:3D:78:D0:A2:40
X509v3 Authority Key Identifier:
keyid:2D:61:DD:95:25:9C:26:8C:D6:E3:6E:55:BC:B2:CB:CC:53:5B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWHdlSWcJozW425VvLLLzFNbCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/su82rcXot9m4Oy9K0FlOPXjQokA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/80ae8c-5e17-42ff-aec5-f0931b0d4af8/1/LWHdlSWcJozW425VvLLLzFNbCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.253.0.0/16
192.12.72.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:69:44:30:b0:64:14:7a:6b:67:16:f5:d5:1c:bd:12:c3:
a0:cd:a9:b1:c2:c2:c4:9a:0e:01:b0:db:da:11:84:1a:86:11:
73:13:23:74:a1:27:82:14:af:19:c5:0a:33:e4:dc:14:2d:62:
ca:5d:8d:11:bc:5e:02:7d:f3:ed:c8:70:d5:4d:83:f5:ea:db:
63:6f:97:0c:bc:08:45:2e:0b:7d:82:76:fe:1d:4f:d2:ae:2f:
d2:07:df:a9:1d:79:e6:aa:87:80:72:55:e6:3d:e8:35:f5:ec:
db:76:8e:7d:c4:3d:0c:25:6e:73:0a:5d:bd:bf:ca:3a:27:16:
f2:60:3f:7e:9a:9a:17:af:b8:89:28:51:64:d2:d1:6b:78:23:
48:33:bc:8a:bd:de:b7:9d:b8:bf:10:a5:37:0c:64:66:65:45:
97:58:af:88:c7:92:25:93:32:e9:6b:b4:96:ff:5e:0a:6e:5a:
64:e8:2e:ad:44:06:d3:c6:9e:3f:6d:fc:90:3f:09:52:c4:e6:
66:c0:86:88:8d:f2:65:a9:cf:49:dd:42:55:c9:98:4f:05:3f:
bc:a0:8c:08:f9:3c:e3:a0:3b:b7:f4:7b:7a:0f:23:92:f8:02:
bb:92:d2:82:29:92:e0:fa:e2:b4:ac:67:8b:12:a2:97:c6:3d:
af:8b:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:05 2026 by rpki-client