Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/SJN4UDeqb6HWQeOP376NU5tUT20.roa
File: SJN4UDeqb6HWQeOP376NU5tUT20.roa (raw, json)
Hash identifier: ICpgkmijNdYF1JR0QFMMhNCUo8HlJ8VNUR8ILZMvpx0=
Subject key identifier: 48:93:78:50:37:AA:6F:A1:D6:41:E3:8F:DF:BE:8D:53:9B:54:4F:6D
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019E8C756F92C742513728C642131C379374
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/SJN4UDeqb6HWQeOP376NU5tUT20.roa
Signing time: Wed 03 Jun 2026 07:49:26 +0000
ROA not before: Wed 03 Jun 2026 07:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214814
IP address blocks: 45.89.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:75:6f:92:c7:42:51:37:28:c6:42:13:1c:37:93:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Jun 3 07:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4893785037aa6fa1d641e38fdfbe8d539b544f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:6e:db:fb:bf:3b:6f:07:83:d1:18:b9:1d:
d2:d4:87:9b:6d:7e:7a:8e:71:11:04:f2:4d:e4:cd:
5c:a4:a8:17:43:dd:26:a6:aa:22:05:93:f8:d5:34:
95:24:fe:69:60:89:8d:b8:3b:2f:b5:b5:48:8b:bc:
26:0d:93:72:f4:a5:86:74:15:1b:18:d3:45:45:61:
ae:7a:05:d3:f0:32:60:96:01:30:5b:84:c8:99:05:
db:3b:cd:ba:28:80:f2:93:0d:76:03:7d:b2:de:97:
23:c3:ed:57:19:a5:19:2b:f0:4b:f8:51:b6:9f:9e:
34:a2:9d:9a:03:0f:71:52:68:c3:e3:40:9f:4f:fe:
8f:8b:94:3f:4a:1d:04:35:6c:56:1a:53:8b:6a:31:
27:1d:47:d8:ae:92:1b:b3:9b:40:c0:b7:08:86:4d:
b6:cf:0a:fc:1c:82:31:c1:2e:48:e6:46:6d:9d:4e:
7c:3c:f8:08:18:2f:13:37:3f:b6:70:a4:d9:4e:1f:
79:54:93:ff:e3:f5:21:a3:0b:4d:ef:ad:48:42:d4:
d5:9f:35:6c:1c:d5:96:95:18:88:d4:37:6a:98:59:
d6:0c:43:e2:40:ea:d4:97:98:46:da:e5:37:c4:ac:
4b:49:cd:a0:2e:5b:98:30:80:41:5e:e1:9f:43:95:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:78:50:37:AA:6F:A1:D6:41:E3:8F:DF:BE:8D:53:9B:54:4F:6D
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/SJN4UDeqb6HWQeOP376NU5tUT20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.11.0/24
Signature Algorithm: sha256WithRSAEncryption
19:63:d3:c3:58:66:fe:b5:1f:02:f2:3e:be:d1:ec:56:e1:b2:
1b:10:8d:b4:c7:43:b1:24:c4:ec:ca:38:9a:73:3f:03:b1:63:
e4:4d:79:87:96:24:27:24:56:42:ba:8b:af:4d:a5:51:d4:19:
f8:ad:a7:e9:92:61:33:e4:91:52:c4:63:6a:1f:8f:03:7a:4d:
f9:dd:ee:71:ad:94:d3:82:40:a8:6f:80:d3:bc:35:de:db:d4:
64:d1:15:67:86:ca:fb:4c:73:95:cc:77:63:ce:cd:d9:00:e9:
b8:3f:3e:5f:f0:3b:05:86:9e:f8:d8:24:ba:7a:e8:74:58:79:
22:6c:ed:5f:1b:bb:a7:0e:d6:30:c7:21:4c:71:50:fc:42:11:
3e:fa:14:a5:4c:37:90:dc:33:15:32:70:bd:83:d9:ce:9e:23:
49:ae:92:33:24:d9:4c:f1:5e:97:16:bd:b9:14:6c:51:6f:2d:
bb:5e:0b:24:2c:69:12:4e:d9:cc:83:69:c3:e0:31:a2:af:0e:
7b:5b:a5:ab:c7:ed:a9:a3:b9:f5:42:b2:76:f1:0c:f5:56:f6:
ee:ba:48:75:5e:3a:35:03:3a:7f:43:8b:4c:38:03:ab:44:c8:
01:9d:9d:bc:ef:4c:c9:a4:7f:d8:ce:41:ef:b6:2a:cd:ce:fa:
00:fa:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:31 2026 by rpki-client