Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/Sn5dXPePTxw_-scztJAILPyJvn4.roa
File: Sn5dXPePTxw_-scztJAILPyJvn4.roa (raw, json)
Hash identifier: 2qiqIThOytILqksly7edBKOLfun0GmMPmkxmZW0F0hM=
Subject key identifier: 4A:7E:5D:5C:F7:8F:4F:1C:3F:FA:C7:33:B4:90:08:2C:FC:89:BE:7E
Certificate issuer: /CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Certificate serial: 01A0B0116CD654E69A6A659FB203902E9A5D
Authority key identifier: 69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/Sn5dXPePTxw_-scztJAILPyJvn4.roa
Signing time: Thu 17 Sep 2026 15:52:07 +0000
ROA not before: Thu 17 Sep 2026 15:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219092
IP address blocks: 209.135.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:11:6c:d6:54:e6:9a:6a:65:9f:b2:03:90:2e:9a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Validity
Not Before: Sep 17 15:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a7e5d5cf78f4f1c3ffac733b490082cfc89be7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:2f:91:f7:78:5a:b3:89:ec:2e:aa:78:f0:
ce:c7:d1:07:c4:b5:a7:4e:89:08:00:30:bc:c4:ae:
59:09:b0:47:ce:a6:fb:39:be:62:fe:8e:65:f4:05:
a5:06:a6:7e:15:a7:b0:f2:15:91:cd:eb:80:5f:ba:
80:58:5d:ab:8f:33:6d:8d:06:84:f5:0e:48:cc:89:
e6:17:b2:ec:b9:fd:5f:31:13:f0:f9:5f:ee:47:9e:
8c:58:cb:7b:0d:d5:47:e7:86:d9:c6:ce:d7:a9:b0:
c6:32:99:bc:92:52:e8:70:f2:ae:b7:f6:a4:c1:ba:
af:15:a1:8b:ab:81:9d:29:80:13:6e:7e:20:9e:c4:
33:10:ca:79:0e:12:e2:76:4e:f1:10:c2:d0:fa:79:
1a:05:80:4e:e5:b1:6e:b7:13:2a:88:8e:98:9e:25:
c1:d0:78:41:f0:dc:f4:41:a1:74:cd:8b:71:2c:e8:
f5:b7:9d:19:5b:e1:8e:47:0a:c5:5d:8d:ae:d8:6a:
49:25:5f:54:83:d0:f8:33:70:53:1d:2f:a1:e1:7e:
7f:e8:11:ad:f4:9d:00:24:80:9b:cf:7f:7b:f0:4e:
8a:c5:20:f8:ba:dd:cc:b3:59:2a:67:1a:2c:ce:61:
47:4a:8b:25:41:11:12:9b:b0:1c:db:de:2a:25:ab:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:5D:5C:F7:8F:4F:1C:3F:FA:C7:33:B4:90:08:2C:FC:89:BE:7E
X509v3 Authority Key Identifier:
keyid:69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/Sn5dXPePTxw_-scztJAILPyJvn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.135.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7c:82:e0:94:06:bd:68:f3:4e:0d:f8:3a:4d:d8:05:b2:84:
54:0e:33:71:a6:ee:eb:26:fe:58:60:b1:ad:11:60:f6:91:26:
5d:0b:e8:3d:84:0a:a3:b5:e3:d1:3b:7c:75:80:2a:6c:d6:84:
cc:a3:2f:ef:f9:c8:83:8e:41:89:5d:3c:ef:13:de:e0:cd:a0:
5f:e2:3f:51:61:fb:f7:66:47:a5:1e:f2:03:8e:5b:ba:c4:eb:
e1:c3:e4:38:0e:11:94:5b:eb:0f:77:03:5b:5f:a3:20:b0:8b:
fb:17:84:f7:46:b5:42:8b:88:24:21:c7:3e:98:a0:86:64:75:
e3:d5:4b:5b:b4:90:4f:91:e2:ac:d9:0c:b2:af:7a:63:02:ec:
4a:22:f2:11:ce:c3:65:e7:c4:25:c9:f7:31:fa:b8:f7:01:22:
9c:b8:90:d8:d6:ff:be:e6:aa:b8:12:f5:89:ff:fe:d6:cf:30:
36:2e:f8:99:61:31:49:03:e4:df:66:7a:ff:7e:c0:85:c5:86:
8c:91:c3:64:37:dc:56:61:8d:71:02:a8:f8:75:01:de:c6:6e:
b4:79:5e:9e:0b:b1:ed:3e:f4:8a:76:44:87:85:00:fe:7b:2c:
90:52:3f:ff:3a:16:1f:65:2a:ce:9d:f8:79:84:47:bb:84:cf:
42:83:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:27 2026 by rpki-client