Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/SELAkj7y_jr_HiZRyQnazDtoXIs.roa
File: SELAkj7y_jr_HiZRyQnazDtoXIs.roa (raw, json)
Hash identifier: YIble+z1sK0lKNMgOA3cU9xF8L12qHo0kNEA6b7HNQc=
Subject key identifier: 48:42:C0:92:3E:F2:FE:3A:FF:1E:26:51:C9:09:DA:CC:3B:68:5C:8B
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019D29F3D0E6B74E4519EF9ACD4512C575C6
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/SELAkj7y_jr_HiZRyQnazDtoXIs.roa
Signing time: Thu 26 Mar 2026 11:42:17 +0000
ROA not before: Thu 26 Mar 2026 11:42:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 188.246.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:f3:d0:e6:b7:4e:45:19:ef:9a:cd:45:12:c5:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Mar 26 11:42:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4842c0923ef2fe3aff1e2651c909dacc3b685c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:0f:95:0d:4d:b4:f8:ea:78:20:63:ea:f2:
c9:8c:d2:1e:b0:37:4f:ac:4e:37:bb:d4:74:5e:bb:
2e:61:e8:ec:93:2d:96:b5:eb:39:4a:6a:74:0b:ea:
a6:8a:a0:4d:76:f2:e4:6c:9e:e1:93:81:b6:23:cd:
92:2b:c3:dd:f0:d5:14:4f:a0:f1:73:f7:60:17:ee:
f4:2a:22:41:ba:61:6c:87:d5:f3:6e:96:b0:20:18:
31:97:13:5e:54:7b:c1:f2:4b:1d:ba:90:88:05:dc:
23:67:49:d8:59:60:c8:d0:de:79:3b:32:fd:6a:f0:
f5:82:56:ba:be:16:98:ce:48:8c:73:20:1f:22:39:
04:a3:ac:72:89:c7:24:fe:bc:14:a2:c8:fb:76:17:
4c:14:e3:5c:3c:51:d5:f6:19:c8:7a:6a:78:b7:c9:
13:c3:35:84:3a:aa:a8:33:47:ec:d9:36:12:95:07:
29:30:55:4a:61:e2:00:54:2c:23:16:14:79:52:d0:
c5:c0:43:9d:0b:ac:8a:93:14:92:1e:e3:85:5a:de:
11:8e:23:4f:48:af:41:6a:1e:9d:37:36:a4:9b:99:
02:ae:9e:bb:1f:63:5d:42:33:65:bd:8e:33:a8:55:
71:a5:be:c9:e8:19:03:65:50:21:94:7c:92:7e:1e:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:C0:92:3E:F2:FE:3A:FF:1E:26:51:C9:09:DA:CC:3B:68:5C:8B
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/SELAkj7y_jr_HiZRyQnazDtoXIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.209.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c7:b8:0d:de:c8:6f:3f:35:65:0f:1d:06:2f:01:ac:a1:8f:
3a:47:be:33:4b:ca:7a:ac:17:87:35:3a:9d:a1:58:4c:27:19:
bf:68:7c:2c:4a:3f:f7:a5:83:fb:e6:03:52:61:20:cd:4c:e6:
c7:a7:2f:ef:c8:87:8c:03:21:46:cb:8b:da:e4:9b:ca:d3:ad:
ec:b8:13:19:b9:10:c0:a1:90:44:7e:73:aa:6f:53:04:3d:28:
37:8c:0f:f1:09:bf:bd:ed:62:fe:1a:5f:11:68:b4:36:05:82:
6a:2a:66:d6:68:62:1b:50:91:a1:f3:26:43:7a:69:eb:28:bf:
44:09:3e:44:a0:a3:34:5e:f4:9f:91:00:2f:c9:29:08:14:4e:
ab:a3:44:24:ee:50:78:fa:30:a0:f7:81:9f:03:fb:cc:77:a3:
77:29:69:6a:6d:d8:32:8c:65:df:f7:75:a3:6e:16:07:fb:de:
b8:ca:ac:6a:49:fe:9a:75:e1:c4:df:78:35:21:0b:55:19:b2:
40:5f:30:48:ad:b8:d8:13:66:67:1d:be:d9:a4:46:b1:42:94:
75:dd:99:9d:82:2a:fb:aa:25:58:e8:5f:82:60:34:17:1b:93:
69:6e:70:42:b6:13:c6:12:e7:92:65:26:ef:f9:4a:9e:be:f1:
83:2d:0d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:04 2026 by rpki-client