Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa
File: Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa (raw, json)
Hash identifier: CxwMb0XJuXM900emiizD6nilfu0y7bF1zGc6ZqIFhXo=
Subject key identifier: 4A:6E:1D:33:1C:67:3F:C8:8F:96:96:80:AC:D7:BF:96:B6:0E:A1:6B
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 019D43269E7430B310549DFB5951B6F0811F
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa
Signing time: Tue 31 Mar 2026 09:08:17 +0000
ROA not before: Tue 31 Mar 2026 09:08:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 45.11.95.0/24 maxlen: 24
94.199.4.0/24 maxlen: 24
194.61.25.0/24 maxlen: 24
2a13:3d80::/29 maxlen: 29
2a13:3d80::/48 maxlen: 48
2a13:3d80:8000::/33 maxlen: 33
2a13:3d82::/32 maxlen: 32
2a13:3d83::/32 maxlen: 32
2a13:3d84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:26:9e:74:30:b3:10:54:9d:fb:59:51:b6:f0:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Mar 31 09:08:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a6e1d331c673fc88f969680acd7bf96b60ea16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:dd:38:9f:0f:75:47:c1:67:c1:79:95:b1:
af:8c:4a:15:5d:f8:9c:99:dd:4d:06:78:8e:d9:48:
49:ec:2a:08:97:a6:cd:35:26:05:19:36:9d:e1:0f:
96:3c:75:ac:5b:fb:98:ee:69:ab:26:22:4a:31:6d:
75:22:45:dc:04:9c:17:f7:86:9b:99:22:98:7e:84:
11:21:69:19:a0:35:3c:25:78:26:0e:73:fc:10:67:
91:50:bf:5d:1a:93:d6:73:07:2a:bc:cb:20:d4:3f:
1f:43:d8:24:e1:fd:3c:23:61:f9:38:dd:6f:a3:c9:
ad:1b:b3:c2:a4:89:78:49:09:6d:e5:29:39:f3:ab:
58:c2:c9:d2:be:68:cd:3d:50:5f:38:c1:af:79:63:
de:e2:9e:b3:82:c0:83:9c:2c:9a:af:3f:2e:66:59:
b5:74:f8:a2:4f:3c:2c:31:52:df:63:49:dc:96:8b:
c4:41:72:50:b7:9c:b9:9b:55:89:68:9b:40:f3:28:
f8:8e:7c:49:94:cd:5a:7a:15:83:b3:ef:fc:95:30:
d2:38:9c:26:8b:94:6c:13:6f:0e:08:78:a2:00:6f:
a3:07:c6:73:cf:1e:c1:f1:00:2a:01:08:d4:bf:41:
01:35:b0:d8:a0:6d:fe:d7:88:7f:ae:a0:c0:55:99:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:1D:33:1C:67:3F:C8:8F:96:96:80:AC:D7:BF:96:B6:0E:A1:6B
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.95.0/24
94.199.4.0/24
194.61.25.0/24
IPv6:
2a13:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
00:c2:1d:e0:42:d9:33:2f:90:b9:71:d2:f3:39:19:d8:a8:2b:
7c:4c:ef:a7:f7:5b:1b:88:e9:12:74:51:bb:63:68:ac:31:90:
02:94:bf:5c:b2:03:e0:bb:a3:91:18:02:c9:da:ff:60:9f:05:
a7:f0:fc:c8:db:b2:e5:62:0e:a9:11:c9:e1:95:37:07:06:c5:
f8:a8:d8:db:8a:74:9f:67:25:f9:11:55:71:b7:c9:e3:04:18:
3e:fb:2b:f7:bd:ed:87:5d:e1:a4:2e:14:36:1a:8e:33:06:ba:
f7:ed:6e:7d:9c:b1:3e:0b:96:9f:41:be:c2:49:c5:9c:50:53:
27:88:26:d0:47:24:67:a1:b4:2b:7e:66:63:61:6a:46:b3:d8:
5e:0a:02:b6:fd:78:a1:70:b1:b8:80:ea:97:08:be:46:8b:6c:
c5:24:b7:46:d2:6d:c4:82:dc:95:8a:71:b8:6d:d3:6c:a6:4a:
d5:6e:79:bd:02:ab:87:53:bb:0b:dd:b3:0d:b7:bf:32:cc:d1:
53:e8:25:d7:9b:c3:f7:0f:87:94:ff:c9:9d:65:89:b4:8c:04:
10:9d:9a:a6:93:7b:2f:ee:2f:25:ca:aa:ed:a2:55:0e:25:ce:
e9:12:b6:22:eb:dc:c3:23:fc:8b:eb:2d:41:cf:fa:18:ce:2d:
85:12:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:49 2026 by rpki-client