Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ShZkdbcfCuq5QrnS0tkxoTrPpbs.roa
File: ShZkdbcfCuq5QrnS0tkxoTrPpbs.roa (raw, json)
Hash identifier: XHG7GZRjOjY4apawH2DswiCRZMlr/Nymy0R/11/lHDk=
Subject key identifier: 4A:16:64:75:B7:1F:0A:EA:B9:42:B9:D2:D2:D9:31:A1:3A:CF:A5:BB
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019D53851D15471440B73BDC9C602BA079EE
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ShZkdbcfCuq5QrnS0tkxoTrPpbs.roa
Signing time: Fri 03 Apr 2026 13:25:25 +0000
ROA not before: Fri 03 Apr 2026 13:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397044
IP address blocks: 94.131.48.0/22 maxlen: 24
94.131.52.0/22 maxlen: 24
94.131.56.0/22 maxlen: 24
94.131.56.0/23 maxlen: 24
94.131.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:53:85:1d:15:47:14:40:b7:3b:dc:9c:60:2b:a0:79:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Apr 3 13:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a166475b71f0aeab942b9d2d2d931a13acfa5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:29:3b:b9:5a:eb:73:33:c5:9a:ab:ad:e9:
31:f2:f0:29:8d:05:4c:14:a9:77:74:5e:e4:b0:0c:
5f:fc:b4:4d:91:84:fc:81:33:18:75:6a:e8:6c:72:
47:c7:62:68:60:53:92:d7:82:ad:23:cd:34:0e:e3:
61:d2:c3:ba:d8:d6:6a:91:4c:f3:0c:0f:93:a2:17:
78:92:62:65:fc:ff:f0:01:e3:92:52:5a:bf:88:06:
6b:01:6a:76:ec:24:ae:81:5b:9b:31:c0:dd:e9:a9:
f3:cc:f5:ae:47:63:0b:ba:48:65:47:f4:47:4a:c6:
9c:88:6b:73:73:38:1d:3d:88:41:d3:d6:f0:51:3b:
68:e1:a3:c0:de:92:f2:ee:6a:5e:1b:bc:43:b7:f2:
d7:99:e2:6a:29:e4:14:60:35:ba:f1:a1:5a:a6:59:
23:42:c2:55:e4:c8:7d:11:d7:9f:27:a4:ad:a4:7d:
1a:0d:be:ad:d3:3f:f4:73:fb:32:2d:06:ae:44:c0:
0b:f7:66:eb:b0:d2:be:4d:0f:89:be:b4:55:53:1e:
e7:09:3f:21:62:12:59:48:36:9c:8c:d1:81:63:93:
00:f2:7e:bd:26:ba:8a:ad:95:76:76:2f:d0:3e:eb:
3e:ae:38:25:1f:24:bf:75:b7:38:dc:b8:8e:4f:88:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:64:75:B7:1F:0A:EA:B9:42:B9:D2:D2:D9:31:A1:3A:CF:A5:BB
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ShZkdbcfCuq5QrnS0tkxoTrPpbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.48.0-94.131.59.255
Signature Algorithm: sha256WithRSAEncryption
23:a5:0a:96:01:ea:28:11:15:fa:d0:7b:82:3f:13:b6:78:11:
52:4c:78:f4:34:16:59:d5:f9:95:0b:53:e2:e8:5e:bc:8a:6e:
91:7c:0b:3d:f6:73:32:09:55:3c:63:5d:b4:8f:c9:49:06:8e:
64:bb:80:37:58:7c:31:bd:ae:d5:c5:b2:05:de:37:c4:5d:fd:
1b:fe:02:69:70:45:66:b3:48:52:51:ee:7b:77:b2:e6:2a:9c:
a3:89:24:92:a3:e0:1b:0e:e3:3d:09:3d:65:9a:22:3b:1e:88:
9e:51:bd:15:e7:7d:8a:53:ea:ba:c9:e1:5a:2f:cf:0f:e4:aa:
2a:78:37:03:e2:f2:ec:a6:2e:41:52:f3:c4:61:23:81:f2:40:
10:33:05:f5:43:9f:e7:e6:5c:20:0f:36:42:34:74:a2:d0:7a:
68:8f:a1:49:11:87:00:05:e0:40:0b:83:0a:cf:cf:96:cd:0e:
97:a3:42:c9:e3:b1:be:b5:1b:d2:8f:fa:74:67:3e:ed:38:7e:
3d:f1:ba:5d:34:ce:73:97:70:49:c7:3c:41:08:32:6d:de:5d:
3a:fd:d5:21:12:c6:63:47:bb:48:af:d8:44:f1:66:eb:86:8e:
75:57:05:62:a8:08:65:f6:cf:09:8a:24:d4:e7:62:bc:7b:0d:
ca:73:ce:04
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ1ThR0VRxRAtzvcnGAroHnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjYwNDAzMTMyNTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTE2NjQ3NWI3MWYwYWVhYjk0MmI5ZDJkMmQ5MzFhMTNhY2ZhNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy90pO7la63MzxZqrrekx8vApjQVM
FKl3dF7ksAxf/LRNkYT8gTMYdWrobHJHx2JoYFOS14KtI800DuNh0sO62NZqkUzz
DA+Tohd4kmJl/P/wAeOSUlq/iAZrAWp27CSugVubMcDd6anzzPWuR2MLukhlR/RH
SsaciGtzczgdPYhB09bwUTto4aPA3pLy7mpeG7xDt/LXmeJqKeQUYDW68aFaplkj
QsJV5Mh9EdefJ6StpH0aDb6t0z/0c/syLQauRMAL92brsNK+TQ+JvrRVUx7nCT8h
YhJZSDacjNGBY5MA8n69JrqKrZV2di/QPus+rjglHyS/dbc43LiOT4gm4wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEoWZHW3HwrquUK50tLZMaE6z6W7MB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvU2haa2RiY2ZDdXE1UXJuUzB0a3hvVHJQcGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARegzAD
BAJegzgwDQYJKoZIhvcNAQELBQADggEBACOlCpYB6igRFfrQe4I/E7Z4EVJMePQ0
FlnV+ZULU+LoXryKbpF8Cz32czIJVTxjXbSPyUkGjmS7gDdYfDG9rtXFsgXeN8Rd
/Rv+AmlwRWazSFJR7nt3suYqnKOJJJKj4BsO4z0JPWWaIjseiJ5RvRXnfYpT6rrJ
4Vovzw/kqip4NwPi8uymLkFS88RhI4HyQBAzBfVDn+fmXCAPNkI0dKLQemiPoUkR
hwAF4EALgwrPz5bNDpejQsnjsb61G9KP+nRnPu04fj3xul00znOXcEnHPEEIMm3e
XTr91SESxmNHu0iv2ETxZuuGjnVXBWKoCGX2zwmKJNTnYrx7DcpzzgQ=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:01:11 2026 by rpki-client