Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/shMgILdrcRQ_LG-B1Njv0tFtwKY.roa
File: shMgILdrcRQ_LG-B1Njv0tFtwKY.roa (raw, json)
Hash identifier: VrnYEoqsCXqMeGOK7nN9tJcwMBHTSx98wiR1emp3pqQ=
Subject key identifier: B2:13:20:20:B7:6B:71:14:3F:2C:6F:81:D4:D8:EF:D2:D1:6D:C0:A6
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 019C75E95B8D3BFE4167A0799555666CBB0C
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/shMgILdrcRQ_LG-B1Njv0tFtwKY.roa
Signing time: Thu 19 Feb 2026 12:39:13 +0000
ROA not before: Thu 19 Feb 2026 12:39:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209194
IP address blocks: 45.94.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:e9:5b:8d:3b:fe:41:67:a0:79:95:55:66:6c:bb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Feb 19 12:39:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2132020b76b71143f2c6f81d4d8efd2d16dc0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:2b:f9:7e:2d:5e:2d:db:d9:6a:0b:8a:6f:
58:b6:8d:93:86:b9:cd:5b:01:e4:48:a1:26:44:2d:
e3:94:6f:65:0f:bf:58:18:b5:7c:b3:aa:ae:5c:07:
e0:43:de:d4:e8:76:0d:4b:0d:2e:1e:f9:46:a9:a4:
d9:08:89:80:b6:e0:c6:f6:89:3f:00:bb:55:5e:8b:
e2:6f:b2:2b:d8:db:e5:46:45:88:11:e6:1d:50:1f:
b9:c1:fd:36:8d:81:b3:3a:9f:50:fc:3f:6c:e1:7a:
92:67:83:6e:f8:12:ff:87:ea:84:b2:68:ef:5e:ec:
8e:53:d7:54:4a:07:2c:95:a0:ff:5d:11:54:18:86:
b6:31:23:01:05:4e:b9:1a:bd:a7:ab:48:79:d5:31:
c8:bd:32:60:1a:9e:0b:7a:c6:7d:08:f3:f6:9b:6b:
da:40:47:4f:6e:85:fb:b8:63:95:19:0c:d7:10:98:
f1:31:5f:0d:e0:46:e8:63:aa:67:58:9c:b0:85:bc:
48:99:90:7a:4a:05:fb:bb:e9:15:1f:2a:c8:db:89:
b4:68:81:f4:18:63:a8:7c:37:ac:fb:74:b3:17:d0:
f7:a5:79:3c:e8:f2:69:ca:87:46:d2:6b:fe:1f:3a:
5f:1a:b4:8f:28:6c:c6:d6:ae:95:df:bf:9b:56:49:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:13:20:20:B7:6B:71:14:3F:2C:6F:81:D4:D8:EF:D2:D1:6D:C0:A6
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/shMgILdrcRQ_LG-B1Njv0tFtwKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:97:9d:96:37:0b:6e:ce:99:3b:90:70:e7:01:9a:12:27:c7:
a1:3f:eb:8f:a3:1c:68:f0:5d:c3:29:b9:e2:41:40:b8:71:b1:
f9:f7:10:cd:4f:1c:88:2a:1a:b1:e7:69:17:1d:f0:9b:60:62:
83:88:e3:93:62:ab:4c:fe:1c:c6:58:ef:72:41:ae:c1:a5:7f:
23:e5:30:f9:10:ef:f2:77:0b:6e:0c:40:f9:80:14:82:d8:95:
0e:4e:94:73:f0:7a:91:41:7b:f5:c5:6c:ab:fd:29:94:83:55:
7e:e2:c5:cf:1e:28:42:1b:91:72:9c:d3:69:2a:05:28:2b:97:
43:d8:c1:6b:25:90:c2:83:90:a0:ba:f8:d9:69:76:fe:be:39:
39:ee:ad:81:66:b2:18:29:93:e6:25:63:a2:2a:10:81:b9:3d:
6b:c3:29:b8:a6:cb:f0:37:0f:b6:b4:e1:4a:d9:ae:59:c8:1f:
44:17:77:cb:60:37:a1:7e:cf:eb:c5:82:d5:50:ef:15:2a:dc:
b3:8c:28:60:ec:62:23:c5:0d:e5:6b:b8:91:c1:f7:4f:2a:e4:
fe:a0:55:ac:ff:28:d9:f1:b9:a1:b9:67:b6:21:46:b2:61:d6:
66:00:ab:3e:a3:cd:bd:db:4d:77:45:a9:4a:8e:42:6a:f3:a1:
ca:5a:2a:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZx16VuNO/5BZ6B5lVVmbLsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjYwMjE5MTIzOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjEzMjAyMGI3NmI3MTE0M2YyYzZmODFkNGQ4ZWZkMmQxNmRjMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQAr+X4tXi3b2WoLim9Yto2ThrnN
WwHkSKEmRC3jlG9lD79YGLV8s6quXAfgQ97U6HYNSw0uHvlGqaTZCImAtuDG9ok/
ALtVXovib7Ir2NvlRkWIEeYdUB+5wf02jYGzOp9Q/D9s4XqSZ4Nu+BL/h+qEsmjv
XuyOU9dUSgcslaD/XRFUGIa2MSMBBU65Gr2nq0h51THIvTJgGp4LesZ9CPP2m2va
QEdPboX7uGOVGQzXEJjxMV8N4EboY6pnWJywhbxImZB6SgX7u+kVHyrI24m0aIH0
GGOofDes+3SzF9D3pXk86PJpyodG0mv+HzpfGrSPKGzG1q6V37+bVknpbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLITICC3a3EUPyxvgdTY79LRbcCmMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvc2hNZ0lMZHJjUlFfTEctQjFOanYwdEZ0d0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV43MA0G
CSqGSIb3DQEBCwUAA4IBAQB8l52WNwtuzpk7kHDnAZoSJ8ehP+uPoxxo8F3DKbni
QUC4cbH59xDNTxyIKhqx52kXHfCbYGKDiOOTYqtM/hzGWO9yQa7BpX8j5TD5EO/y
dwtuDED5gBSC2JUOTpRz8HqRQXv1xWyr/SmUg1V+4sXPHihCG5FynNNpKgUoK5dD
2MFrJZDCg5CguvjZaXb+vjk57q2BZrIYKZPmJWOiKhCBuT1rwym4psvwNw+2tOFK
2a5ZyB9EF3fLYDehfs/rxYLVUO8VKtyzjChg7GIjxQ3la7iRwfdPKuT+oFWs/yjZ
8bmhuWe2IUayYdZmAKs+o8292013RalKjkJq86HKWip/
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:12:04 2026 by rpki-client