Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/sny-DSij_0G02Lh_gSi3PXS_fzc.roa
File: sny-DSij_0G02Lh_gSi3PXS_fzc.roa (raw, json)
Hash identifier: jOC+Zb741QRD+Vh6pgDFrc2lf9svv4hc8T4p5jQmTOg=
Subject key identifier: B2:7C:BE:0D:28:A3:FF:41:B4:D8:B8:7F:81:28:B7:3D:74:BF:7F:37
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019C94A68528ECBD8EC5FB8FAAEBE4A3A8D3
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/sny-DSij_0G02Lh_gSi3PXS_fzc.roa
Signing time: Wed 25 Feb 2026 11:54:26 +0000
ROA not before: Wed 25 Feb 2026 11:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213644
IP address blocks: 194.117.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:a6:85:28:ec:bd:8e:c5:fb:8f:aa:eb:e4:a3:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Feb 25 11:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b27cbe0d28a3ff41b4d8b87f8128b73d74bf7f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:bd:f5:57:44:1b:8c:47:5e:a3:5b:18:f7:
19:e3:fc:d8:78:5b:92:28:cb:bf:59:38:df:89:de:
35:11:aa:ba:35:b8:a2:b7:65:e3:e5:e2:79:d5:d9:
ab:61:25:7b:c8:d6:c5:5c:c6:65:c7:51:46:33:7b:
a6:b2:5c:7b:a8:2d:41:bd:f3:29:a3:73:91:54:5b:
92:b3:90:4d:5f:f2:27:88:bf:60:42:22:8f:79:01:
5d:7c:a2:bb:9a:9f:f7:08:f0:8d:78:78:a6:5b:79:
82:85:4a:dc:20:25:b1:e1:5e:e9:fa:fe:d5:71:4f:
13:76:32:36:1b:d3:2b:1c:b0:1b:cc:91:b7:e2:68:
59:82:da:23:17:80:45:3c:0b:42:c9:7a:27:fd:8b:
84:d5:ed:7f:6d:08:fa:c8:0f:ca:f7:97:71:17:7d:
ad:b4:d1:58:08:ff:72:41:49:70:e9:ba:10:25:d3:
58:a8:3a:5a:64:55:e6:f9:51:ab:58:c9:24:7e:14:
f2:a4:26:ba:5d:3d:fc:63:a5:37:1d:1e:11:dc:1d:
8c:2c:27:25:c8:f5:46:d8:37:54:b8:cc:70:f0:c6:
08:a5:22:f2:7b:92:43:38:cd:25:9c:ec:51:28:8b:
42:0f:9d:16:89:95:24:fb:d0:ae:f6:96:7b:45:21:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:BE:0D:28:A3:FF:41:B4:D8:B8:7F:81:28:B7:3D:74:BF:7F:37
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/sny-DSij_0G02Lh_gSi3PXS_fzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:dc:10:98:44:b9:d7:f2:ce:af:1d:8d:4e:28:cf:8a:82:3f:
e5:d6:4f:5b:e0:f6:7b:ef:fb:f5:5b:36:6b:78:3f:6e:89:d2:
d0:46:d7:77:c6:c6:3b:99:b4:2b:db:47:db:a8:2d:ef:c7:e0:
a2:10:9b:2b:34:b6:06:b1:dd:a3:e3:60:92:93:dc:56:d6:c1:
dc:e8:8d:4c:1d:c2:cc:bd:c8:c1:6e:21:87:72:75:e9:b7:6d:
16:92:18:ce:d1:66:57:43:c4:ca:23:06:54:c8:7b:21:55:eb:
ff:35:5f:cb:56:72:94:c5:0e:3c:34:38:fb:9e:e4:5a:39:10:
2a:02:64:de:f4:1a:0d:45:61:5c:85:d8:77:2e:be:c2:79:9e:
ae:b4:02:66:7d:b1:33:91:49:e2:20:df:14:08:f1:99:4c:41:
b2:c6:86:23:ec:24:fb:d1:70:32:0d:e8:77:79:5b:f8:73:59:
aa:e3:9c:d0:af:a1:7d:20:41:01:8e:2b:11:1b:ca:99:e7:63:
10:63:95:98:7a:7b:40:11:90:5b:23:ad:f0:27:a4:37:86:4f:
d7:cc:3f:99:f6:52:c9:5c:9e:90:c0:84:c1:e5:2c:03:40:4d:
65:e8:de:62:08:bd:10:d8:b5:41:27:00:c6:d0:ba:77:04:67:
be:d7:38:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:23 2026 by rpki-client