Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/spoeAXw8JKm6gnFMoIXwZK-Ed-A.roa
File: spoeAXw8JKm6gnFMoIXwZK-Ed-A.roa (raw, json)
Hash identifier: QAd5W6budJH/RayVbyuruOMxFeCVIb9okd3IhkPHvv8=
Subject key identifier: B2:9A:1E:01:7C:3C:24:A9:BA:82:71:4C:A0:85:F0:64:AF:84:77:E0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DA197EDF8A46158A775A3C206C79E18F1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/spoeAXw8JKm6gnFMoIXwZK-Ed-A.roa
Signing time: Sat 18 Apr 2026 17:16:21 +0000
ROA not before: Sat 18 Apr 2026 17:16:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214929
IP address blocks: 94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:97:ed:f8:a4:61:58:a7:75:a3:c2:06:c7:9e:18:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 18 17:16:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b29a1e017c3c24a9ba82714ca085f064af8477e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:52:ac:af:9a:01:82:62:2b:82:e4:08:14:
f1:a5:1c:ef:3f:1d:46:da:98:a0:11:c7:70:73:f4:
8c:52:dc:6c:5c:82:24:4b:86:2b:df:1b:1a:9a:fc:
cd:3f:21:a1:fa:90:9b:aa:7e:71:a6:f7:d6:8b:db:
1e:12:bd:8f:3f:d7:82:18:d9:d2:31:4e:45:ae:3a:
9b:b0:21:8a:24:77:7c:4a:d4:f4:b0:74:0b:10:6a:
6c:f4:61:d4:e5:79:2c:18:25:a8:84:b2:bf:f2:7b:
34:ec:a4:11:88:2f:b1:57:b9:78:ef:a4:ff:b5:40:
c9:55:e5:a5:29:71:4a:3a:d9:c4:d5:37:07:e1:43:
a8:4d:cd:8f:86:1a:7c:27:f9:21:16:6b:e0:5b:a2:
fc:de:a6:a8:5f:48:4c:50:33:5e:9c:dc:ea:23:79:
c0:53:26:2e:f0:34:e6:36:5d:da:02:b1:31:6a:28:
e5:7b:c2:51:cf:74:d7:b7:ba:84:1f:fc:26:78:6c:
4d:7c:97:b4:b4:cf:06:0e:f4:3b:16:9b:52:75:07:
65:9e:0b:3f:39:c6:a4:6e:e2:9d:e9:c5:38:b3:38:
b0:dc:84:81:66:9d:92:5d:98:93:d5:76:a9:28:18:
47:8e:20:4f:f5:b3:fc:05:d2:e2:db:b4:61:20:03:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:1E:01:7C:3C:24:A9:BA:82:71:4C:A0:85:F0:64:AF:84:77:E0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/spoeAXw8JKm6gnFMoIXwZK-Ed-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.227.0-94.249.228.255
Signature Algorithm: sha256WithRSAEncryption
bb:11:d9:76:33:32:f9:0a:d6:46:91:ed:92:31:3c:c7:37:11:
98:eb:7d:a3:9e:2d:9f:40:4b:a6:27:56:ef:7c:07:b9:d3:15:
d9:93:31:2b:08:af:0f:b0:3c:fe:aa:b7:e0:ad:e7:be:28:24:
f0:7b:3f:82:59:11:af:7d:c4:d3:77:fb:ef:c4:26:ee:98:93:
dd:38:8a:20:c8:33:b1:e1:47:49:11:96:7d:a9:65:92:43:e7:
a0:d6:fc:11:91:db:e1:87:5f:20:da:69:58:52:f2:ce:55:a8:
4a:91:93:f7:6e:af:28:70:50:7d:0e:ef:3e:55:43:89:4b:3e:
f9:74:07:66:7d:de:fb:51:f0:11:fa:e7:09:0d:2c:a6:2d:3d:
99:ff:13:70:45:47:e0:cb:13:3d:f3:c2:f8:cd:d1:72:b4:f9:
3d:77:dc:b5:75:cf:92:c7:7b:29:ab:27:d7:5f:1e:f2:0f:b0:
7c:d5:36:86:53:22:74:04:2a:c8:f9:26:91:e7:67:f4:d3:47:
b2:af:9f:f4:d2:92:3a:48:78:6e:b3:e3:d6:6f:2c:3e:38:25:
f2:43:e4:3c:5c:3d:0f:0d:e9:74:c6:4e:b7:29:d0:34:1c:7d:
65:fa:8a:83:bc:b8:2c:18:56:09:85:70:64:b0:b3:85:8d:07:
dd:13:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:27 2026 by rpki-client