Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/sMuX3pzxJpfZtnqZe_FZMnkeWkc.roa
File: sMuX3pzxJpfZtnqZe_FZMnkeWkc.roa (raw, json)
Hash identifier: 0dXEN5xT7fPeUgCKLsBWTYCiUH3J8SeCfhGeTfGtAIA=
Subject key identifier: B0:CB:97:DE:9C:F1:26:97:D9:B6:7A:99:7B:F1:59:32:79:1E:5A:47
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019E2453424260C981F42CEBAD8A41D1A2DD
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/sMuX3pzxJpfZtnqZe_FZMnkeWkc.roa
Signing time: Thu 14 May 2026 02:31:36 +0000
ROA not before: Thu 14 May 2026 02:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:53:42:42:60:c9:81:f4:2c:eb:ad:8a:41:d1:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: May 14 02:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0cb97de9cf12697d9b67a997bf15932791e5a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:1c:3b:e1:a8:c0:12:1c:4f:4e:62:d0:97:
7e:34:92:d7:b6:2f:50:89:62:94:15:8a:cd:7d:84:
03:d6:99:b9:7d:f7:61:d8:43:ed:a4:16:bb:82:3a:
fb:08:b3:f3:f6:8a:90:bd:34:77:ef:4c:e8:54:8b:
6e:e6:77:88:5c:c1:3f:34:77:2a:df:3e:22:f2:aa:
9d:53:67:e4:e7:84:27:9a:1e:c9:10:af:4d:49:90:
5a:b8:f7:98:3d:27:e1:b7:09:9e:15:43:5e:76:e0:
63:d5:02:d4:7e:2d:2a:70:8f:7d:48:e6:eb:ec:31:
37:67:6f:47:0a:d7:b7:6e:ab:bc:5d:30:f7:cb:a5:
90:23:de:11:70:a3:64:a1:95:ce:82:1a:f3:9f:c8:
ad:d2:06:b9:08:b9:5d:76:44:eb:d8:4e:f4:df:36:
6c:44:dd:37:e9:80:aa:74:9e:b3:45:6d:6a:65:44:
9a:b7:5d:c2:3b:ab:f6:a8:fb:1e:54:bd:fc:e9:3b:
eb:2a:82:89:22:44:f8:ac:3c:33:b9:fe:16:24:e3:
2d:2b:9f:77:07:bc:e4:be:4d:55:8c:4a:50:8a:04:
9c:96:de:75:89:dc:24:f7:2e:5a:e8:10:4a:a0:54:
b0:3c:39:23:f6:65:ff:77:ae:2d:4c:56:66:f2:43:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:97:DE:9C:F1:26:97:D9:B6:7A:99:7B:F1:59:32:79:1E:5A:47
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/sMuX3pzxJpfZtnqZe_FZMnkeWkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b1:c6:ec:6f:37:8a:d5:5a:a9:72:22:1c:4e:dc:be:dd:51:
d5:ef:73:e7:d4:e3:f0:eb:92:df:da:e0:8b:cf:06:89:2b:f0:
1a:81:a6:ba:35:63:a4:f2:4f:ef:7f:b0:8b:b1:32:68:08:a2:
0a:e6:83:b7:5e:55:c9:f4:8b:19:13:1a:70:d7:cc:cc:ca:ad:
29:a0:19:fc:05:66:2d:32:16:4a:f1:07:40:9f:47:0a:90:16:
28:dd:ae:4a:54:9c:fb:40:f3:0c:2f:13:b3:52:8d:69:59:f3:
38:36:f7:ba:06:ac:e3:be:e5:b5:85:37:78:85:22:ea:07:17:
a0:1a:53:15:31:c3:26:e0:51:20:fe:cb:c7:90:37:b5:44:73:
61:00:ca:fe:ff:f5:38:17:7c:1a:75:c5:12:64:db:77:fb:0b:
40:e4:20:0a:85:10:68:cc:8c:9d:ce:4c:bd:88:5e:17:1d:17:
3a:c9:d4:fe:75:8e:51:4d:b1:3f:92:2b:12:df:1b:3f:cc:4f:
8d:62:3c:75:d9:60:35:d4:27:fa:c1:d3:72:27:2f:97:19:e0:
51:d8:74:0e:07:e2:e3:a5:d0:fd:a5:c6:d4:08:17:5f:f8:ba:
fe:af:e1:e5:25:b6:23:df:c9:3f:ed:ca:c6:2e:85:80:25:57:
9e:8c:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:40 2026 by rpki-client