Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa
File: sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa (raw, json)
Hash identifier: UIum8I7uAuNske5DioiLLh5KWIejx8PVPwTt3WKIKnU=
Subject key identifier: B0:C0:E7:0D:2E:DB:E5:64:39:0F:E2:68:16:CB:3E:0F:EF:60:69:7E
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 019B7EA6D973073E8F3C770B63B82280BAE9
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa
Signing time: Fri 02 Jan 2026 12:20:22 +0000
ROA not before: Fri 02 Jan 2026 12:20:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206250
IP address blocks: 185.42.84.0/22 maxlen: 22
2a01:62a0::/32 maxlen: 32
2a01:62a0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:d9:73:07:3e:8f:3c:77:0b:63:b8:22:80:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Jan 2 12:20:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0c0e70d2edbe564390fe26816cb3e0fef60697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:4c:15:74:df:62:ae:8b:6b:52:26:8f:c2:
58:fe:ae:6c:2a:ec:8d:17:91:7d:cd:81:4d:08:6a:
45:66:96:46:e8:27:4c:9a:f0:fe:60:47:4a:43:60:
c2:1e:c8:7e:0d:f6:3a:7e:bc:d1:31:91:f0:0b:b6:
59:78:39:0a:71:18:7c:43:12:12:db:9e:1c:ed:c2:
93:57:cf:9b:72:9e:91:38:3a:39:13:fb:2e:a8:da:
4e:20:aa:f6:b3:53:73:eb:70:0e:e6:37:ce:8e:d0:
cc:f6:e5:6d:38:82:76:fb:b9:dc:b2:93:95:62:ac:
f6:3d:4e:44:b8:a5:bc:f3:4b:54:fb:6e:d6:9a:a5:
ff:90:c2:12:d2:bb:ad:51:87:bd:cc:f4:ee:a1:b2:
63:68:53:f1:9a:2c:1c:f4:4e:d3:b1:59:bc:f7:67:
bd:4a:bd:52:3e:35:f3:dc:0e:e0:4f:bc:f6:bf:ee:
39:2c:d6:da:63:44:cb:1c:79:7c:a2:44:ad:bc:ea:
aa:a2:b3:b9:e5:32:72:97:63:dc:a8:34:d7:06:51:
88:24:c8:79:a3:0a:50:5c:58:91:6f:bf:e7:72:18:
00:83:86:da:ec:93:2f:e1:f9:1f:c4:b7:0e:3d:65:
b7:e4:0b:77:17:1f:85:d2:2f:f4:62:e1:5f:9c:ae:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C0:E7:0D:2E:DB:E5:64:39:0F:E2:68:16:CB:3E:0F:EF:60:69:7E
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.84.0/22
IPv6:
2a01:62a0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:e7:bc:56:9b:9f:26:7d:e4:23:27:e9:51:16:89:dc:9b:e7:
6d:ca:32:59:9f:3e:a5:db:ef:61:25:f6:68:4e:1a:bd:8c:15:
29:83:d8:98:0e:4b:c4:8d:fd:95:4a:d9:83:7a:cc:56:73:7b:
6d:d7:78:d9:52:fa:bd:d2:f9:0e:e5:b1:fd:37:5a:19:67:c0:
2d:4a:ce:61:79:ec:b0:3b:c0:a5:34:c7:ae:ca:a1:97:b4:ab:
42:05:b7:2a:37:f6:9b:09:51:2e:18:f3:7e:4b:85:0d:d3:96:
8e:08:48:fc:d4:98:98:8b:f3:d8:3c:e6:80:aa:e5:0a:1c:09:
64:e9:a1:a4:28:08:34:32:57:a4:bc:d2:a7:b5:ed:b4:d8:9a:
22:c3:cf:f5:9a:c2:14:61:6c:ac:bc:f5:b7:27:13:f5:63:50:
54:1c:cb:99:70:3c:be:e7:e7:6e:2b:3a:7b:14:74:0f:c1:2c:
41:99:0e:b7:96:8a:23:dd:99:f4:5a:3f:cd:3f:4e:2f:34:e7:
4f:ed:2e:f8:47:08:32:f6:98:e4:a6:e1:b4:83:23:1c:ec:70:
d3:e3:20:30:ff:25:6a:3b:9d:11:58:8b:0e:52:ac:3f:9b:c1:
f9:58:a9:d3:36:16:03:f1:23:a1:f1:5d:29:c0:8c:28:29:85:
b6:1e:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:51:16 2026 by rpki-client