Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/svI4W200p6lOt2_X5eNMMTPRoIs.roa
File: svI4W200p6lOt2_X5eNMMTPRoIs.roa (raw, json)
Hash identifier: fXspWoi8ZbZskrlMICYK9xnFuuoS/zFzSrhsQf64mik=
Subject key identifier: B2:F2:38:5B:6D:34:A7:A9:4E:B7:6F:D7:E5:E3:4C:31:33:D1:A0:8B
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019E25D108F8ADFA1BE5975EFABFC7D2CA8C
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/svI4W200p6lOt2_X5eNMMTPRoIs.roa
Signing time: Thu 14 May 2026 09:28:36 +0000
ROA not before: Thu 14 May 2026 09:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 159.194.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:d1:08:f8:ad:fa:1b:e5:97:5e:fa:bf:c7:d2:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: May 14 09:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2f2385b6d34a7a94eb76fd7e5e34c3133d1a08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:b2:ef:73:97:c7:90:c3:ca:8f:f6:96:72:
27:9f:9c:70:f1:c0:40:7a:6a:21:ef:6d:8d:fe:34:
e0:52:1c:d3:0d:e4:89:bc:e4:13:81:b3:55:4b:dd:
b0:ed:85:af:0f:e7:5c:8a:31:d9:85:82:a9:a8:12:
b6:f3:77:d6:d7:85:71:1d:c0:82:0e:a6:e3:c0:c5:
83:95:b5:42:30:69:f4:d7:bd:4e:70:55:48:ec:a1:
31:4f:b9:64:2c:f3:89:a8:94:9f:84:ed:25:ad:ab:
16:04:a5:89:7d:68:54:ba:e0:4c:b6:cd:7b:40:29:
bd:cb:31:b5:36:5a:f7:70:13:a8:83:60:b5:ad:84:
b9:2b:77:b5:9e:81:d5:e5:88:26:0d:0b:57:ae:6e:
ef:69:1b:b2:45:75:1c:1b:b7:b8:65:05:27:f7:ca:
40:bf:23:e3:0d:39:a3:5a:70:f0:f1:e0:bb:40:35:
95:11:6f:21:55:db:ae:92:b7:65:9e:c1:c1:21:b3:
2d:a8:e9:71:56:a5:a0:7c:13:be:c9:31:4e:3c:a4:
37:6d:95:eb:f9:61:85:73:82:0c:49:b2:78:ad:51:
60:85:18:38:6b:6f:63:e8:b9:ae:f9:ae:3b:7e:d2:
cb:5d:88:cf:ea:78:6a:98:b8:ba:ec:7a:e2:23:84:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:38:5B:6D:34:A7:A9:4E:B7:6F:D7:E5:E3:4C:31:33:D1:A0:8B
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/svI4W200p6lOt2_X5eNMMTPRoIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.194.176.0/20
Signature Algorithm: sha256WithRSAEncryption
30:fb:83:73:5f:03:41:f9:f7:53:22:a1:56:61:74:c0:dd:ec:
5d:bd:70:aa:82:17:b8:75:4a:27:3f:5f:d9:6f:84:ea:7e:c8:
61:87:f2:a7:0b:80:b9:b4:05:bb:2b:04:24:88:25:a0:76:07:
53:86:57:02:f1:0d:f6:0b:dc:52:1c:29:6e:2a:3c:3b:67:63:
1e:1e:0e:0e:ab:d1:39:a5:37:40:ae:e2:4a:a7:70:f4:36:28:
00:71:82:7a:b0:80:f6:3b:1a:b7:40:2e:5e:b2:b2:db:ba:9b:
6e:1b:d7:eb:ac:66:50:e0:15:75:78:b7:9e:40:2e:3c:d9:9a:
78:e3:62:f0:39:ef:0f:f7:c1:e9:46:d5:58:e1:ac:65:07:fb:
6e:5b:1e:65:a0:50:4b:08:6c:ab:e9:8d:35:f2:a4:52:a9:5c:
7c:34:be:24:4c:ba:90:1d:6f:b1:59:45:4a:0a:cc:80:f6:5e:
e2:36:38:fa:16:d1:86:08:31:85:31:ea:58:94:fb:4b:d6:44:
30:fc:a2:04:bc:8b:04:c1:8b:8b:fa:38:2e:04:1f:8a:61:40:
e3:27:c9:8e:89:ad:1c:e2:15:06:fc:b4:d8:12:58:5f:e3:b4:
40:87:b2:b7:78:de:18:6b:e2:db:46:fe:3f:ff:9c:84:19:b6:
d9:46:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:13 2026 by rpki-client