Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/SZuulJfBXrOx7TVvq98RfpuWX20.roa
File: SZuulJfBXrOx7TVvq98RfpuWX20.roa (raw, json)
Hash identifier: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=
Subject key identifier: 49:9B:AE:94:97:C1:5E:B3:B1:ED:35:6F:AB:DF:11:7E:9B:96:5F:6D
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 019C9ED42236C1C56222CE39271DD2BB086E
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/SZuulJfBXrOx7TVvq98RfpuWX20.roa
Signing time: Fri 27 Feb 2026 11:20:28 +0000
ROA not before: Fri 27 Feb 2026 11:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202389
IP address blocks: 46.18.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:d4:22:36:c1:c5:62:22:ce:39:27:1d:d2:bb:08:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Feb 27 11:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=499bae9497c15eb3b1ed356fabdf117e9b965f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:d7:94:ac:23:b5:18:83:b4:bc:a0:23:aa:
3c:0c:d5:75:4e:39:07:5b:b3:41:94:33:8d:41:6c:
ac:e4:52:69:1d:16:75:a7:2d:b6:40:f8:5f:ce:95:
ca:c2:da:de:f9:ee:60:0d:59:1d:3e:eb:1b:2b:70:
2f:6f:f1:60:1c:81:66:12:97:77:b2:e8:87:6b:4c:
59:b8:ee:ea:61:4c:93:91:5b:ea:2f:f7:b2:2d:83:
f5:60:b7:b2:6b:b1:d0:78:8f:cd:a1:30:8d:ac:f1:
e7:d1:c3:c1:37:ff:d8:06:83:22:00:7e:28:e1:d8:
ad:a0:d6:40:25:e6:80:ce:62:c6:04:97:36:57:3f:
d1:67:80:4f:48:c4:67:9d:88:3d:dd:b9:f0:0f:78:
4a:7b:ee:17:02:a4:5c:b0:dc:75:db:94:48:7f:d6:
4e:08:f3:bc:4f:40:84:4e:0e:f5:89:4a:f8:09:0f:
de:2a:44:5d:48:54:84:b5:d0:c7:cd:c0:e7:bd:36:
30:bc:d1:d8:3f:60:ac:1f:1c:78:88:e3:e4:f4:a3:
13:b4:af:3b:94:95:0f:cc:4f:1d:c7:9c:75:b7:0b:
d1:af:db:ff:32:63:ef:f5:ec:6f:ef:47:4b:ab:7a:
a0:2e:5d:d0:44:23:9e:c1:ce:29:a7:39:6f:1f:c0:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9B:AE:94:97:C1:5E:B3:B1:ED:35:6F:AB:DF:11:7E:9B:96:5F:6D
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/SZuulJfBXrOx7TVvq98RfpuWX20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fc:06:e7:f1:3f:40:27:7b:4a:e0:ba:8b:11:6b:7b:c7:70:
18:d6:65:4a:ca:59:b7:87:9d:ab:95:d0:b0:5a:d7:d3:87:06:
ff:42:fb:26:83:8e:4e:0b:c6:04:79:98:db:06:14:84:53:ee:
88:5b:ca:6f:79:25:c9:d8:69:0e:d8:f7:44:61:4e:17:de:91:
0b:2f:35:3c:7c:e1:8b:ed:1d:4f:6d:9d:f4:79:d0:06:f6:43:
54:56:58:74:a6:98:3a:0b:2a:2b:17:e3:58:70:93:85:c6:5b:
1a:87:f8:7d:e1:a9:99:5b:37:62:86:31:34:7c:8b:e1:c3:81:
a4:6f:c0:a8:5e:62:d8:59:de:70:85:6a:73:11:62:8f:51:5b:
4e:08:71:1e:c2:0a:0d:3a:34:ff:83:95:a6:97:36:64:44:df:
f0:78:a3:cf:d2:8d:17:b2:d0:76:44:a8:f0:35:04:ee:66:34:
b7:47:5d:74:a4:7d:a1:ea:8f:8a:23:44:72:bc:18:38:60:08:
c2:b8:66:22:50:31:11:9b:e9:c3:29:8e:ca:3b:50:f5:0a:23:
75:30:d6:25:3e:30:50:61:bb:38:28:4c:1a:90:e9:b0:ef:a3:
ea:ba:14:73:d2:8e:cc:4f:3f:66:6f:ce:5d:03:6b:80:1e:55:
f0:36:00:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZye1CI2wcViIs45Jx3SuwhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx
NWQwNzMwHhcNMjYwMjI3MTEyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTliYWU5NDk3YzE1ZWIzYjFlZDM1NmZhYmRmMTE3ZTliOTY1ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ3XlKwjtRiDtLygI6o8DNV1TjkH
W7NBlDONQWys5FJpHRZ1py22QPhfzpXKwtre+e5gDVkdPusbK3Avb/FgHIFmEpd3
suiHa0xZuO7qYUyTkVvqL/eyLYP1YLeya7HQeI/NoTCNrPHn0cPBN//YBoMiAH4o
4ditoNZAJeaAzmLGBJc2Vz/RZ4BPSMRnnYg93bnwD3hKe+4XAqRcsNx125RIf9ZO
CPO8T0CETg71iUr4CQ/eKkRdSFSEtdDHzcDnvTYwvNHYP2CsHxx4iOPk9KMTtK87
lJUPzE8dx5x1twvRr9v/MmPv9exv70dLq3qgLl3QRCOewc4ppzlvH8BmLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmbrpSXwV6zse01b6vfEX6bll9tMB8GA1UdIwQY
MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt
ZWQxZjMwY2MxYzU3LzEvU1p1dWxKZkJYck94N1RWdnE5OFJmcHVXWDIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3
LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhIjMA0G
CSqGSIb3DQEBCwUAA4IBAQCl/Abn8T9AJ3tK4LqLEWt7x3AY1mVKylm3h52rldCw
WtfThwb/Qvsmg45OC8YEeZjbBhSEU+6IW8pveSXJ2GkO2PdEYU4X3pELLzU8fOGL
7R1PbZ30edAG9kNUVlh0ppg6CyorF+NYcJOFxlsah/h94amZWzdihjE0fIvhw4Gk
b8CoXmLYWd5whWpzEWKPUVtOCHEewgoNOjT/g5WmlzZkRN/weKPP0o0XstB2RKjw
NQTuZjS3R110pH2h6o+KI0RyvBg4YAjCuGYiUDERm+nDKY7KO1D1CiN1MNYlPjBQ
Ybs4KEwakOmw76PquhRz0o7MTz9mb85dA2uAHlXwNgBE
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:09 2026 by rpki-client