Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/SMUYHJGqPA3wQQI63UlSS2FCfUY.roa
File: SMUYHJGqPA3wQQI63UlSS2FCfUY.roa (raw, json)
Hash identifier: J7ZEbIf8CEpYVZLgafo0n+Ok/RB6jdMafFrTE9kMXrM=
Subject key identifier: 48:C5:18:1C:91:AA:3C:0D:F0:41:02:3A:DD:49:52:4B:61:42:7D:46
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019C6AADAD46F3D50ACA84202953C21F9F8D
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/SMUYHJGqPA3wQQI63UlSS2FCfUY.roa
Signing time: Tue 17 Feb 2026 08:18:12 +0000
ROA not before: Tue 17 Feb 2026 08:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 195.226.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:ad:ad:46:f3:d5:0a:ca:84:20:29:53:c2:1f:9f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Feb 17 08:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48c5181c91aa3c0df041023add49524b61427d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:32:5c:bf:ab:6f:d4:9a:0a:51:69:87:a2:
d7:40:f6:b1:fc:e5:41:4a:7e:0e:d7:ce:69:0c:2a:
cb:92:7c:2e:fc:6a:39:7e:26:b3:bc:c6:9b:ac:cd:
a6:e2:f5:f7:a2:eb:59:33:b4:64:2f:2a:91:bf:8b:
43:b4:e8:dd:82:69:f2:ab:21:57:d2:a0:82:d6:40:
f6:cd:1e:45:23:5f:3b:ef:a6:4c:5f:b3:8c:01:13:
80:f3:74:25:03:b2:d9:c3:91:e2:be:24:ac:c6:5e:
5a:fa:83:44:e9:da:8c:fd:59:24:38:6b:6b:ed:89:
fd:f2:4a:8d:5e:33:f7:bd:aa:5f:a6:4f:dc:c1:fd:
21:f2:3d:4e:fc:c2:58:4e:d0:17:ec:7b:dc:75:8d:
62:b6:e5:79:a6:fb:9b:8d:5a:6a:ad:1b:c3:03:12:
cd:c3:34:b6:72:53:91:3a:69:ea:ff:44:59:0a:f1:
33:34:a5:03:ed:45:55:c3:ae:4d:b4:67:8f:b0:9f:
03:17:88:8e:22:86:81:97:c3:dc:0e:f9:60:82:91:
1d:ce:aa:38:9f:ae:09:39:4c:9c:36:f1:35:30:cc:
2e:6f:23:bc:1a:93:55:a6:10:eb:68:e4:ba:0d:55:
d8:d0:9e:f1:77:b7:90:f6:aa:eb:8a:9e:09:d2:c9:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:18:1C:91:AA:3C:0D:F0:41:02:3A:DD:49:52:4B:61:42:7D:46
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/SMUYHJGqPA3wQQI63UlSS2FCfUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.92.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7f:05:f4:63:4d:b7:d2:e3:8e:6f:13:0b:14:a0:9c:bd:75:
27:86:ad:59:7a:37:fa:0c:39:76:c9:48:3f:26:8f:11:80:fc:
33:56:1e:f8:e1:16:74:ff:6c:dc:e0:cf:c1:bf:2a:f6:41:c1:
71:f7:76:5e:3f:fd:5f:ed:8c:3e:13:2e:1b:9f:d0:41:80:8a:
84:b0:c9:1a:e0:98:5b:54:85:e1:c4:68:af:ea:05:f9:18:fd:
45:b2:7f:1d:01:56:51:02:70:af:4e:88:b1:c1:8e:03:fa:b6:
e1:7f:36:fe:0a:39:b1:5d:3f:d9:0a:c5:2d:d8:31:3f:3e:78:
3e:2f:4b:bc:c8:b0:84:e6:58:6d:41:51:63:0a:06:46:a3:c4:
90:ff:f9:6d:ac:37:5b:6a:e1:2d:a8:35:77:af:db:53:2d:fa:
b6:68:91:8b:b5:f4:62:83:6b:39:d9:ad:d3:08:46:3f:a0:d8:
7b:90:7e:78:c0:ca:ea:b9:d8:f4:77:96:8f:08:92:fc:7a:cb:
07:81:e6:bc:26:b2:82:a9:07:2f:dd:3e:b5:cb:4e:8f:67:39:
4f:ca:a5:56:d0:f8:8e:9c:f3:83:a2:13:4c:44:af:f3:fc:d6:
e6:0d:ef:50:78:72:8b:3f:33:00:3d:63:45:df:fc:d6:4f:df:
a0:9e:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:57 2026 by rpki-client