Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/SztDQUTdgK2SUjFi9wkDzBiBMLc.roa
File: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (raw, json)
Hash identifier: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=
Subject key identifier: 4B:3B:43:41:44:DD:80:AD:92:52:31:62:F7:09:03:CC:18:81:30:B7
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019C0DD15DEED670467B501E6B36AE81D452
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/SztDQUTdgK2SUjFi9wkDzBiBMLc.roa
Signing time: Fri 30 Jan 2026 07:32:30 +0000
ROA not before: Fri 30 Jan 2026 07:32:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 185.222.120.0/24 maxlen: 24
185.222.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0d:d1:5d:ee:d6:70:46:7b:50:1e:6b:36:ae:81:d4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jan 30 07:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b3b434144dd80ad92523162f70903cc188130b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:2e:f7:35:68:8c:02:47:13:08:4b:19:d9:
0a:21:1f:52:7b:f8:a2:65:2d:e3:b7:86:dd:7d:22:
18:3a:87:d1:d8:a3:43:cb:12:d6:05:1d:27:7f:5e:
b5:03:23:7a:3a:2c:35:ab:fa:fc:fc:8d:22:c0:ca:
99:d5:02:d0:e6:df:da:c2:e2:17:5d:94:21:f7:1f:
a6:b4:0d:b2:87:bb:cf:44:da:8e:87:e4:33:84:73:
d4:d9:7d:e4:86:bd:05:83:93:b6:6f:22:96:0b:e1:
a8:18:51:8f:7c:3d:cf:60:7b:b4:a6:aa:92:b6:3c:
02:62:54:b7:23:75:80:be:59:ac:d2:4b:da:f0:e6:
78:97:24:42:f5:8e:e4:8e:94:b2:d5:68:b0:99:57:
83:c3:d9:41:22:0f:bf:d2:ae:ad:1a:81:12:63:3d:
66:29:ab:06:5b:1d:fa:e4:d4:e2:62:1c:92:3e:23:
36:b4:d7:28:e5:ed:44:f9:3a:21:8e:e5:da:9b:ed:
4a:01:81:82:3c:b5:3b:bf:ed:49:11:57:79:d4:c8:
3c:5b:01:ca:04:a1:ba:53:77:4e:64:e2:70:3e:13:
e0:91:66:de:36:78:e5:fc:9b:d4:fb:a4:d3:15:3f:
9c:33:7d:c1:91:de:07:32:8e:9a:2b:d9:82:cf:6b:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3B:43:41:44:DD:80:AD:92:52:31:62:F7:09:03:CC:18:81:30:B7
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/SztDQUTdgK2SUjFi9wkDzBiBMLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.120.0/23
Signature Algorithm: sha256WithRSAEncryption
91:bb:83:e8:11:82:26:1f:d3:7d:6e:bd:67:b3:78:83:3a:93:
b2:80:f6:25:7c:5c:f7:c7:fc:a8:88:e6:5d:e6:dd:48:f5:86:
b0:77:59:d7:4a:8b:85:43:fd:55:0a:2f:e5:7d:bc:1f:9b:c6:
84:f8:33:d6:9b:db:53:ea:54:8e:28:7c:39:b1:5c:1d:ec:a9:
1a:61:45:d5:8e:aa:4a:e5:f0:de:60:60:d4:e5:ce:37:73:ac:
48:32:b4:0c:fe:e2:b9:7f:69:74:34:47:b7:5b:e9:5b:c8:a7:
7d:3b:1e:d3:3a:46:71:fc:68:be:1d:31:86:3c:36:12:f2:3f:
2b:e0:73:26:0e:bb:71:af:d5:92:ec:a7:db:38:3a:41:32:42:
f4:84:b7:cd:f8:f2:c2:49:85:e0:82:1a:d1:75:72:60:56:f1:
44:1f:dd:1b:c5:22:b5:54:b6:0e:2b:ee:de:3c:3b:23:52:3a:
66:d2:e7:51:da:98:ae:5f:26:05:e7:f9:1f:e8:0b:ca:2f:75:
f7:15:70:76:1a:ec:2a:0d:9d:cd:3c:8b:69:66:7b:46:4c:14:
de:cf:5a:7b:d9:21:21:70:77:d7:72:32:c9:de:80:ef:1c:f2:
1c:2e:4d:d4:9a:ad:93:04:aa:e3:9c:b6:da:73:cc:cb:2b:30:
93:53:e2:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwN0V3u1nBGe1AeazaugdRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj
Y2Y5ZjkwHhcNMjYwMTMwMDczMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjNiNDM0MTQ0ZGQ4MGFkOTI1MjMxNjJmNzA5MDNjYzE4ODEzMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPUu9zVojAJHEwhLGdkKIR9Se/ii
ZS3jt4bdfSIYOofR2KNDyxLWBR0nf161AyN6Oiw1q/r8/I0iwMqZ1QLQ5t/awuIX
XZQh9x+mtA2yh7vPRNqOh+QzhHPU2X3khr0Fg5O2byKWC+GoGFGPfD3PYHu0pqqS
tjwCYlS3I3WAvlms0kva8OZ4lyRC9Y7kjpSy1WiwmVeDw9lBIg+/0q6tGoESYz1m
KasGWx365NTiYhySPiM2tNco5e1E+TohjuXam+1KAYGCPLU7v+1JEVd51Mg8WwHK
BKG6U3dOZOJwPhPgkWbeNnjl/JvU+6TTFT+cM33Bkd4HMo6aK9mCz2tq+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEs7Q0FE3YCtklIxYvcJA8wYgTC3MB8GA1UdIwQY
MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt
NGY0ZmU4MDNiMDE1LzEvU3p0RFFVVGRnSzJTVWpGaTl3a0R6QmlCTUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1
LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBud54MA0G
CSqGSIb3DQEBCwUAA4IBAQCRu4PoEYImH9N9br1ns3iDOpOygPYlfFz3x/yoiOZd
5t1I9Yawd1nXSouFQ/1VCi/lfbwfm8aE+DPWm9tT6lSOKHw5sVwd7KkaYUXVjqpK
5fDeYGDU5c43c6xIMrQM/uK5f2l0NEe3W+lbyKd9Ox7TOkZx/Gi+HTGGPDYS8j8r
4HMmDrtxr9WS7KfbODpBMkL0hLfN+PLCSYXgghrRdXJgVvFEH90bxSK1VLYOK+7e
PDsjUjpm0udR2piuXyYF5/kf6AvKL3X3FXB2GuwqDZ3NPItpZntGTBTez1p72SEh
cHfXcjLJ3oDvHPIcLk3Umq2TBKrjnLbac8zLKzCTU+Jc
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:54 2026 by rpki-client