Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/1-SjSk5srbQUmR71vyugabNrFPhk.roa
File: 1-SjSk5srbQUmR71vyugabNrFPhk.roa (raw, json)
Hash identifier: 5tKd92URWMi7laCdF3UArKAQG+a0No+/QGtPmeVh8M4=
Subject key identifier: F9:28:D2:93:9B:2B:6D:05:26:47:BD:6F:CA:E8:1A:6C:DA:C5:3E:19
Certificate issuer: /CN=18ddd98f6bc339774aeeae5472789c42c0031009
Certificate serial: 01A01718F8B48EAECE3A0DCBA56453FE0C01
Authority key identifier: 18:DD:D9:8F:6B:C3:39:77:4A:EE:AE:54:72:78:9C:42:C0:03:10:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/1-SjSk5srbQUmR71vyugabNrFPhk.roa
Signing time: Tue 18 Aug 2026 22:58:27 +0000
ROA not before: Tue 18 Aug 2026 22:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29550
IP address blocks: 2a03:ebc0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:18:f8:b4:8e:ae:ce:3a:0d:cb:a5:64:53:fe:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ddd98f6bc339774aeeae5472789c42c0031009
Validity
Not Before: Aug 18 22:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f928d2939b2b6d052647bd6fcae81a6cdac53e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:5e:a3:c4:7f:f1:bd:75:b4:17:c6:a9:d1:
ca:cc:5a:fa:94:eb:7f:ec:b9:c1:62:14:90:2f:f4:
dd:4e:71:1d:2e:a0:9c:3c:72:dc:c8:54:1e:f4:20:
62:79:30:c7:9f:29:33:b8:71:2c:d0:02:cc:b6:e5:
0e:d5:b3:3a:51:3a:ea:b9:a7:69:d4:55:88:ac:24:
41:87:9e:14:6b:72:c9:32:db:21:9d:90:d2:a5:f6:
9c:e9:a0:a7:de:80:a0:07:24:b3:53:0d:ce:91:fc:
61:5a:45:18:44:a0:36:b8:9c:2e:f9:f3:3d:ca:ad:
74:20:15:09:44:58:49:7d:2d:1e:1f:66:3d:24:d7:
b4:7a:ed:ba:d9:54:17:94:cd:94:a0:5c:e1:62:84:
33:37:8d:88:0b:42:6d:7a:b5:ba:8b:49:69:b6:c0:
fe:a2:eb:26:6a:6b:ea:a6:18:9c:e8:05:0d:82:e9:
fd:0f:58:77:f7:1e:a8:14:3f:77:e5:16:a0:bf:6c:
d8:e0:b9:e9:14:66:9e:f6:e0:9f:e6:64:77:92:43:
30:e6:b2:58:f7:a5:9c:30:83:1b:59:65:26:15:3f:
31:0b:69:78:ee:47:bb:44:87:32:a2:1d:fb:4c:fe:
6e:1c:c9:ea:13:94:ce:37:af:7c:39:fc:bc:27:2b:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:D2:93:9B:2B:6D:05:26:47:BD:6F:CA:E8:1A:6C:DA:C5:3E:19
X509v3 Authority Key Identifier:
keyid:18:DD:D9:8F:6B:C3:39:77:4A:EE:AE:54:72:78:9C:42:C0:03:10:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GN3Zj2vDOXdK7q5UcnicQsADEAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/1-SjSk5srbQUmR71vyugabNrFPhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d36385-fd1a-41a4-b4bf-ac05d66083c8/1/GN3Zj2vDOXdK7q5UcnicQsADEAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:ebc0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
66:8c:bb:ab:06:ec:3c:6f:6b:c0:b4:77:3c:d6:f7:0f:52:41:
21:5d:8c:7b:a7:21:24:a1:7e:82:94:9a:24:e8:f3:ff:3a:ea:
6a:49:c2:b9:48:75:1b:91:f3:af:23:01:43:67:7d:5e:57:b8:
b2:34:ec:f2:0b:1c:4c:15:9f:65:da:ea:e0:e9:0d:ed:a4:d8:
1f:ca:d2:68:a1:22:4d:4d:0f:5a:63:38:d2:17:73:c8:5d:6e:
07:a9:d6:15:68:b3:d6:76:02:76:e3:b1:6c:2f:67:3c:6a:c1:
8c:0f:45:50:24:e7:6b:f6:3e:7a:71:57:80:a8:b4:af:84:27:
a9:20:d4:d5:8f:3f:f4:12:89:4d:51:18:31:9f:f4:46:7c:cf:
79:3b:69:27:23:a5:99:f4:5b:2c:58:ed:48:2d:9f:29:dc:8b:
33:0d:40:71:b8:92:43:de:b3:36:d4:34:b5:c5:75:cd:78:4e:
71:fa:89:b0:9a:34:20:95:0b:27:df:e3:3e:82:b8:a5:f6:dc:
b6:14:5d:69:e9:27:8d:a2:82:ab:3a:f9:c1:d4:18:6e:ee:56:
3b:f0:8f:c0:51:c8:41:91:35:9b:13:97:3d:14:2e:2c:7e:9f:
2b:46:aa:18:c2:de:82:69:5f:dc:f1:77:92:e6:6e:93:32:2c:
fd:33:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:15:53 2026 by rpki-client