Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ShSeCANkTHe7RfqqNC0cxUUZq4k.roa
File: ShSeCANkTHe7RfqqNC0cxUUZq4k.roa (raw, json)
Hash identifier: L7yVdSHXXtYp7vs7i1S0WzfgSs/SdR1cCwYinXC7wTA=
Subject key identifier: 4A:14:9E:08:03:64:4C:77:BB:45:FA:AA:34:2D:1C:C5:45:19:AB:89
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019EA7A7E3966E390BDFD2FC0DD41FB805A0
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ShSeCANkTHe7RfqqNC0cxUUZq4k.roa
Signing time: Mon 08 Jun 2026 14:34:18 +0000
ROA not before: Mon 08 Jun 2026 14:34:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 201.51.10.0/24 maxlen: 24
201.51.11.0/24 maxlen: 24
201.51.12.0/24 maxlen: 24
201.51.13.0/24 maxlen: 24
201.51.16.0/24 maxlen: 32
201.51.17.0/24 maxlen: 32
201.51.18.0/24 maxlen: 32
201.51.19.0/24 maxlen: 32
201.51.20.0/24 maxlen: 32
201.51.21.0/24 maxlen: 32
201.51.22.0/24 maxlen: 32
201.51.23.0/24 maxlen: 32
201.51.24.0/24 maxlen: 32
201.51.25.0/24 maxlen: 32
201.51.26.0/24 maxlen: 32
201.51.27.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:a7:e3:96:6e:39:0b:df:d2:fc:0d:d4:1f:b8:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: Jun 8 14:34:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a149e0803644c77bb45faaa342d1cc54519ab89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:d7:a8:99:d2:f2:23:ae:a0:02:e0:1f:ce:
fb:f4:ec:a9:49:22:d6:58:8e:47:8a:88:33:ae:8d:
7a:63:1e:5a:3f:a9:16:a8:a7:b5:86:a3:f4:73:94:
01:c2:0f:63:c6:e4:d6:e9:ff:b5:f0:70:64:ba:a9:
f9:8f:bd:08:29:64:43:7a:99:7a:0c:f1:f6:1d:84:
07:74:f9:e8:29:81:07:91:84:8a:b1:b4:81:d0:49:
a4:f5:fb:04:e9:d5:fe:fc:a4:ea:06:15:d2:64:9c:
81:d7:b2:3d:70:e3:b3:fd:56:20:f5:27:1f:df:61:
0a:3d:b9:7f:ef:33:45:f3:86:73:54:0d:74:36:c9:
05:20:41:d3:61:64:d0:c9:1d:28:06:53:87:e1:a3:
06:42:0b:89:f1:bf:d4:32:82:8f:11:f3:67:b4:15:
c4:63:84:e1:17:a5:b8:3e:7d:de:14:9a:48:b3:bc:
cf:bc:9e:77:e5:73:43:f7:60:a9:94:88:c8:33:9d:
08:51:64:fb:ee:21:52:0a:6d:ec:1d:7a:1f:b1:99:
5f:99:64:4a:f8:02:37:83:fe:01:bf:fe:61:9c:7c:
9a:e1:b0:25:59:1b:e1:85:7a:50:1b:c8:8c:ba:81:
8b:4f:9c:90:8a:55:4a:74:68:fd:fa:cf:10:86:aa:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:9E:08:03:64:4C:77:BB:45:FA:AA:34:2D:1C:C5:45:19:AB:89
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ShSeCANkTHe7RfqqNC0cxUUZq4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.51.10.0-201.51.13.255
201.51.16.0-201.51.27.255
Signature Algorithm: sha256WithRSAEncryption
6f:71:2a:b4:f0:64:4a:b5:7d:3d:e9:e1:c9:a1:99:95:6b:fe:
bd:7f:0f:8c:d2:b0:5f:59:38:4b:c2:5e:33:7b:ce:c8:ee:11:
10:55:50:08:83:2e:e1:48:2a:e4:12:75:4e:69:70:51:87:eb:
61:5d:24:1f:6e:ea:a5:64:36:33:55:a2:b6:69:c4:6b:d9:f5:
94:b3:b4:4a:07:b7:59:3b:1f:d9:72:a6:8b:09:eb:ed:88:5c:
2a:a6:46:e4:f7:d0:4a:d4:da:a8:fc:a7:4b:10:5a:1c:6e:c5:
0a:ab:a6:c1:2d:70:1a:64:78:9d:d2:78:51:a3:be:39:72:1f:
d7:cd:3c:ed:fd:1e:bd:0b:1f:28:a1:84:75:6d:1c:80:ae:0f:
40:c4:78:bf:03:1a:70:2d:bf:88:a9:08:bc:5a:55:ae:2b:b2:
e3:13:f1:a1:54:f9:f7:9d:8c:42:7b:a9:52:55:a2:c7:1c:29:
f5:1d:46:ca:3d:c1:74:9a:b6:e0:e2:20:70:94:2a:8a:88:a7:
f0:28:68:f1:af:dc:9a:84:9d:bb:e7:ee:93:9a:78:2a:ad:e6:
63:86:83:78:b8:1b:f4:c3:b4:bc:4a:86:97:de:a6:70:e5:99:
93:22:3c:d9:9a:c2:72:32:ad:c9:6d:b9:44:68:a4:7b:f8:0a:
39:12:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:00 2026 by rpki-client