Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/sTs-6prOh5q4wA6a1OyyqtZ74q0.roa
File: sTs-6prOh5q4wA6a1OyyqtZ74q0.roa (raw, json)
Hash identifier: FFPnuFxlEdQJXEK42gi4uhiZA2nfgoW67T20PySbZn8=
Subject key identifier: B1:3B:3E:EA:9A:CE:87:9A:B8:C0:0E:9A:D4:EC:B2:AA:D6:7B:E2:AD
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 01A09084F3AB27138FBE047AA94DE34B4054
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/sTs-6prOh5q4wA6a1OyyqtZ74q0.roa
Signing time: Fri 11 Sep 2026 12:50:27 +0000
ROA not before: Fri 11 Sep 2026 12:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47692
IP address blocks: 195.2.220.0/23 maxlen: 23
195.2.220.0/24 maxlen: 24
195.2.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:84:f3:ab:27:13:8f:be:04:7a:a9:4d:e3:4b:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Sep 11 12:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13b3eea9ace879ab8c00e9ad4ecb2aad67be2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:95:1e:f8:fe:7d:95:b5:b4:78:b5:89:57:
d1:6c:77:6a:e1:89:fa:79:41:70:8a:15:85:a8:dc:
26:df:a3:70:da:ac:7c:77:6b:3b:27:d1:71:e5:75:
9a:1f:ba:9f:55:6c:d2:f3:62:c3:b0:44:11:70:9f:
24:b0:47:21:59:da:0b:b3:cc:97:31:f4:17:cb:7e:
1b:37:9f:a3:8b:44:e4:32:69:82:5b:f6:15:d8:c8:
1a:fa:f4:58:2e:c4:d8:43:4a:0f:67:2f:49:a6:7e:
da:63:f7:1f:74:9b:d6:75:46:6b:0a:3b:97:ca:2c:
67:4b:a3:2b:0b:f0:b4:9e:75:9a:49:72:82:8f:8f:
bd:84:f5:a3:8b:ee:c6:a8:17:37:b7:9b:29:dc:ca:
12:df:65:46:67:0b:3d:a8:3e:9c:63:17:5b:0c:27:
a6:d3:fe:73:82:61:8b:04:cc:01:f8:7f:4c:f2:6c:
ee:f2:93:17:22:09:d6:4c:38:6d:39:4d:d4:b6:72:
1f:0a:27:3d:7e:c5:f8:b6:4a:fe:70:39:6a:c2:f7:
65:06:f4:b5:05:8e:02:e2:80:e0:26:0b:be:2a:0d:
a0:11:6d:25:94:a3:44:77:23:de:cd:a1:d0:ac:e3:
f4:22:a5:dd:80:aa:08:26:bf:aa:c6:04:84:e9:db:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:3E:EA:9A:CE:87:9A:B8:C0:0E:9A:D4:EC:B2:AA:D6:7B:E2:AD
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/sTs-6prOh5q4wA6a1OyyqtZ74q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.220.0/23
Signature Algorithm: sha256WithRSAEncryption
36:fa:3d:7f:f6:07:cc:ea:2b:3e:e8:9b:8e:f0:45:a7:71:c0:
2f:e8:58:83:e2:6c:ee:95:8c:aa:bc:17:90:7c:79:d7:07:21:
86:f3:51:f1:b5:55:fd:dc:40:24:21:3b:96:3e:32:ce:6b:59:
5b:09:d0:1f:bd:f5:5f:bb:9c:47:d9:fd:e5:e4:5b:dd:e6:3b:
d5:6f:5f:c6:dd:39:79:ca:d7:40:61:4d:3f:b3:a4:71:fc:e5:
5d:db:94:a1:ce:72:44:f8:23:6f:05:0c:cf:04:e1:d3:eb:36:
f7:92:ea:c6:be:d2:7f:ee:33:5d:6e:42:9e:87:9b:51:d2:32:
90:41:a6:15:fd:a0:c3:8f:07:3a:81:e4:cf:b9:1d:af:81:1c:
89:78:28:9b:b2:f1:70:10:65:79:e2:63:15:1c:63:a9:76:ee:
6f:cf:fc:b0:08:da:26:a0:8b:54:c1:2f:30:75:dc:d7:02:08:
73:29:fe:1f:41:0f:dd:b8:d8:b5:76:6d:d6:ef:be:38:bd:76:
fe:52:da:94:08:c6:4d:d8:aa:60:24:4f:f0:8c:44:2b:12:c4:
21:68:f9:ae:61:76:c6:fe:10:f2:a2:5f:b8:45:08:d2:f4:d3:
3f:bf:64:98:2a:2f:97:1e:95:19:b0:cb:94:62:15:aa:17:8a:
70:49:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:13:40 2026 by rpki-client