Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/Sa-P59ilAaBoROu7JXxgieqHHuI.roa
File: Sa-P59ilAaBoROu7JXxgieqHHuI.roa (raw, json)
Hash identifier: klYsPIaTsQM9yUBEbb86aHfmxgUEhKSfXO+ZQhF9TNg=
Subject key identifier: 49:AF:8F:E7:D8:A5:01:A0:68:44:EB:BB:25:7C:60:89:EA:87:1E:E2
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 019B78351EF0CB0363424A39B3FF6A0ED2F5
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/Sa-P59ilAaBoROu7JXxgieqHHuI.roa
Signing time: Thu 01 Jan 2026 06:18:25 +0000
ROA not before: Thu 01 Jan 2026 06:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43066
IP address blocks: 93.184.128.0/20 maxlen: 20
93.184.128.0/24 maxlen: 24
93.184.129.0/24 maxlen: 24
93.184.130.0/24 maxlen: 24
93.184.131.0/24 maxlen: 24
93.184.132.0/23 maxlen: 23
93.184.132.0/24 maxlen: 24
93.184.133.0/24 maxlen: 24
93.184.134.0/24 maxlen: 24
93.184.135.0/24 maxlen: 24
93.184.136.0/24 maxlen: 24
93.184.137.0/24 maxlen: 24
93.184.138.0/24 maxlen: 24
93.184.139.0/24 maxlen: 24
93.184.140.0/24 maxlen: 24
93.184.141.0/24 maxlen: 24
93.184.142.0/24 maxlen: 24
93.184.143.0/24 maxlen: 24
2a05:d880::/30 maxlen: 30
2a05:d880::/48 maxlen: 48
2a05:d880:1::/48 maxlen: 48
2a05:d880:2::/48 maxlen: 48
2a05:d880:3::/48 maxlen: 48
2a05:d880:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:1e:f0:cb:03:63:42:4a:39:b3:ff:6a:0e:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Jan 1 06:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49af8fe7d8a501a06844ebbb257c6089ea871ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:79:33:c2:19:8f:a7:7a:bd:36:a7:00:d7:
f4:ec:75:7b:f1:b4:ba:90:b8:5f:a2:5b:01:e4:76:
51:ac:4d:67:64:4b:2d:7d:33:3b:c1:9c:87:55:68:
fd:0e:21:4c:c6:0d:41:ba:f2:f8:c1:76:87:9e:eb:
9c:c7:87:27:c6:d3:88:fb:40:05:b2:56:d5:44:cb:
2b:dc:98:05:71:d9:1c:c4:a9:1b:62:5f:f9:dd:4c:
d6:d8:9d:98:bc:29:d7:86:5b:57:ed:9e:29:ac:d4:
e5:10:18:1f:1f:4e:a0:c9:f3:03:d9:dd:e7:39:4d:
33:a1:ed:50:66:b9:d2:32:a1:2b:9d:a5:6b:47:ad:
b9:92:b1:4f:59:1d:f7:5c:d1:c1:70:9f:65:7e:d1:
19:3b:e0:82:7c:ac:d0:bd:31:e7:5a:01:15:d1:d2:
86:0b:40:1e:9a:74:69:bb:ea:d9:ca:c5:50:82:1d:
61:09:87:78:97:ec:cd:43:e4:c1:c2:51:fe:d0:d0:
d9:47:6d:85:d9:7a:c7:c9:67:7d:ac:f7:e7:25:57:
c3:de:cf:01:d8:a5:80:24:5a:f5:d4:ac:45:7f:05:
d4:fa:e4:bf:2d:27:7c:9f:39:14:f2:8b:02:f6:4e:
b4:d9:30:8e:0e:e1:b1:a4:4f:df:5b:1e:3f:80:ae:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:8F:E7:D8:A5:01:A0:68:44:EB:BB:25:7C:60:89:EA:87:1E:E2
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/Sa-P59ilAaBoROu7JXxgieqHHuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.128.0/20
IPv6:
2a05:d880::/30
Signature Algorithm: sha256WithRSAEncryption
6f:ca:9c:90:f5:4f:9a:12:ef:2a:99:e2:b1:7b:33:5c:b7:13:
25:87:d9:22:11:64:64:df:f2:89:5b:6d:f0:ca:52:ea:eb:0c:
94:01:49:de:1c:f4:3d:be:1f:dd:49:b9:e1:20:65:f3:5f:df:
3d:e6:92:7a:ca:66:4c:d1:6d:5e:ec:3d:f8:6a:7b:30:e3:7f:
ba:b6:43:86:10:e4:28:5d:a1:34:83:5f:ca:e6:ec:67:f3:8e:
5d:79:f1:41:49:a5:c3:32:e6:17:d2:bf:d8:d9:a9:e7:f0:d8:
7b:92:cb:89:4c:eb:ad:a6:dc:44:c6:53:23:c0:68:86:a8:8b:
ae:32:5c:af:58:56:1a:99:d7:2d:81:f6:e9:21:f0:cb:40:e2:
3d:8c:8a:36:6a:57:aa:0c:4e:d5:93:a5:ae:ac:ab:11:f4:ee:
06:24:f8:50:23:79:c2:16:7a:ba:fa:95:ae:27:a3:d0:96:e5:
58:94:56:97:68:b3:fc:61:b4:6d:1d:1c:66:ee:90:13:b9:76:
ad:53:4e:94:d8:cf:ec:5e:a5:55:25:09:1a:fe:bd:18:d0:92:
48:15:76:dc:87:2c:c4:1c:1b:8d:fe:f9:56:13:66:00:33:70:
66:59:b3:f4:6b:fa:62:f5:66:d9:38:8e:d0:bc:97:ad:b5:b7:
18:cd:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:37:40 2026 by rpki-client