Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/SXH057UJKzS7rHzBDJcA4ENrOvM.roa
File: SXH057UJKzS7rHzBDJcA4ENrOvM.roa (raw, json)
Hash identifier: xcKm9OrMnT6THeGkJMgEPYfZ1pZ8IIDbrRlbFdC0Bww=
Subject key identifier: 49:71:F4:E7:B5:09:2B:34:BB:AC:7C:C1:0C:97:00:E0:43:6B:3A:F3
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019C7038BF2C825EC406794ED2CF5C7E224D
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/SXH057UJKzS7rHzBDJcA4ENrOvM.roa
Signing time: Wed 18 Feb 2026 10:08:13 +0000
ROA not before: Wed 18 Feb 2026 10:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 153.51.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:38:bf:2c:82:5e:c4:06:79:4e:d2:cf:5c:7e:22:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Feb 18 10:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4971f4e7b5092b34bbac7cc10c9700e0436b3af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:db:b1:b9:41:d6:07:8d:6c:24:5f:4f:1a:
b3:7c:3d:2a:cd:6b:1a:7b:63:97:c6:9e:98:f6:25:
94:88:42:03:8c:78:1e:85:c2:19:ee:c1:cd:bd:dc:
49:8f:7c:9d:40:bd:75:a5:ba:8a:79:09:b9:66:3d:
2c:1e:8f:c1:7d:4b:8c:80:58:19:c3:f9:fb:a4:cd:
60:d8:d5:16:5b:26:16:fc:2a:ec:45:3a:dd:96:55:
54:e0:05:43:7a:87:58:d8:b4:65:82:49:b2:2c:5f:
01:5d:7d:41:db:e0:94:da:08:99:55:6b:30:2a:fa:
69:b0:50:3f:13:1b:92:16:3e:0e:33:d0:45:23:27:
d0:c0:d1:bd:de:9a:e8:62:18:a9:7c:ef:09:88:26:
fc:6f:1b:08:dc:b8:c1:b7:6e:31:e0:53:83:2b:b6:
35:73:df:67:81:7e:2f:15:18:57:05:86:a0:22:b1:
d1:24:1f:04:45:9e:c3:13:8f:57:29:e5:51:e4:55:
0a:3b:12:3b:bb:51:59:1a:f0:92:63:0f:12:da:34:
c3:66:61:0f:cd:6e:5a:27:fb:a5:a6:b1:af:85:f7:
3c:f1:bb:e5:40:e7:d8:c9:d0:64:59:9f:da:18:67:
40:00:d7:8a:2f:88:eb:45:c1:4a:cf:93:17:bd:a0:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:F4:E7:B5:09:2B:34:BB:AC:7C:C1:0C:97:00:E0:43:6B:3A:F3
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/SXH057UJKzS7rHzBDJcA4ENrOvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.80.0/21
Signature Algorithm: sha256WithRSAEncryption
44:a0:8f:d7:05:0a:3d:25:4f:cd:9e:65:9d:a5:db:fb:70:fa:
83:9e:2e:eb:bc:29:9e:13:de:bb:e1:f4:05:e5:7a:5f:8e:14:
30:dc:7e:51:d0:31:e7:05:a0:2b:2d:80:7e:08:5a:03:6f:ab:
ce:a4:00:f7:df:f9:6e:91:d2:48:13:0e:45:b1:72:81:57:a6:
e9:bf:4d:d5:d4:f7:c1:15:16:e6:ff:ef:1d:46:5c:2b:af:5d:
ef:6d:a1:69:e9:03:79:f9:38:8c:6e:c6:16:7e:c2:41:74:b5:
4d:e9:97:73:0a:d5:00:5d:37:ad:c0:44:74:f5:ee:ce:22:31:
11:c6:63:fd:3a:21:22:3e:8e:19:29:5d:17:a4:24:80:61:88:
4e:0b:07:ad:87:d3:a5:06:c5:d8:b9:a3:94:5d:9e:c8:e9:43:
b0:d0:8a:a1:3a:db:93:4b:a2:ab:e9:a3:17:1b:d9:e4:64:c9:
30:d8:eb:cc:33:55:25:8b:a2:ff:a0:ca:e4:ab:aa:f7:69:82:
94:45:08:90:d1:f1:68:02:5c:6c:5e:96:34:59:f2:d6:c3:35:
f9:50:b4:db:34:61:e4:90:9d:59:9f:a8:16:8b:a9:0e:a9:cd:
9e:a1:c8:8a:c6:f1:a4:eb:59:98:f4:a5:9e:e1:5e:f7:6b:c2:
51:fe:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:02 2026 by rpki-client