Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/S47ps47Wpid_Nhun__f_HWIZ7Oc.roa
File: S47ps47Wpid_Nhun__f_HWIZ7Oc.roa (raw, json)
Hash identifier: yOcJjQG3Um/IKD0BzGCr6uGCQjdza/1NhvuKmQjlIDI=
Subject key identifier: 4B:8E:E9:B3:8E:D6:A6:27:7F:36:1B:A7:FF:F7:FF:1D:62:19:EC:E7
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019EC1804DFCD246D61336B43785FC833C73
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/S47ps47Wpid_Nhun__f_HWIZ7Oc.roa
Signing time: Sat 13 Jun 2026 15:01:11 +0000
ROA not before: Sat 13 Jun 2026 15:01:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215938
IP address blocks: 85.133.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:4d:fc:d2:46:d6:13:36:b4:37:85:fc:83:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 13 15:01:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b8ee9b38ed6a6277f361ba7fff7ff1d6219ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:44:48:e3:8c:f8:ef:44:7b:94:e3:36:0e:
a0:92:53:e5:9e:29:1e:94:50:27:05:a7:76:a0:a1:
df:27:3c:61:32:bd:f3:4c:99:06:7e:96:00:8b:5e:
54:80:c5:96:c7:7f:93:3e:fd:d0:40:a7:dd:55:df:
f6:4c:a7:03:3d:57:79:70:85:3a:a9:a0:94:46:37:
64:70:54:d8:bc:1e:4c:cd:fa:00:01:9c:4b:7b:20:
7d:f0:29:5e:66:80:92:50:77:89:b8:f0:8d:c7:14:
28:48:6c:e6:a2:62:ae:b2:27:99:af:3f:b2:ee:b6:
96:eb:59:48:c9:26:56:e4:78:52:21:40:0c:4b:7c:
e4:c6:9b:09:05:5b:76:27:2f:79:a3:19:99:53:86:
ac:95:56:4a:0e:e6:51:af:48:3c:e1:5f:8f:14:3a:
63:7c:25:2c:99:83:6a:4e:1f:3a:80:27:86:bd:e9:
8d:33:65:fe:2f:8e:31:9a:07:20:13:c4:70:1e:15:
0b:49:23:97:17:ee:ff:cd:e8:d4:68:16:37:7c:ee:
ab:05:c7:4d:e6:52:2a:4d:37:84:56:27:0c:7b:e4:
00:b1:92:96:0d:44:fd:a4:93:fb:03:f7:ce:e6:30:
1a:63:2f:e3:14:63:01:09:de:8a:56:7c:d4:25:a6:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8E:E9:B3:8E:D6:A6:27:7F:36:1B:A7:FF:F7:FF:1D:62:19:EC:E7
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/S47ps47Wpid_Nhun__f_HWIZ7Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.153.0/24
Signature Algorithm: sha256WithRSAEncryption
10:bd:8c:a2:fa:29:dc:08:88:5b:ef:61:f5:74:d2:a9:bd:03:
c3:c6:94:b1:ed:91:b0:b0:5a:88:7c:ed:bb:24:43:91:48:61:
22:db:41:77:f1:6d:e7:65:09:bd:51:8b:3f:d8:bc:bc:16:cb:
a4:d5:28:2a:7c:6f:15:38:68:9c:b9:4f:27:76:d8:d5:48:2e:
cf:da:53:9a:ea:49:01:82:f3:fe:31:37:25:00:9f:54:f1:83:
c7:3d:27:6e:fb:07:1c:a9:53:11:72:9f:e7:07:c0:e2:e5:b7:
40:a0:04:7d:69:26:34:ee:9d:d3:6b:ba:71:37:51:0b:d3:09:
1d:56:0b:39:ea:b3:de:52:85:b1:4a:c1:b6:a6:ed:63:e9:ae:
40:3a:d9:7d:85:ab:1f:14:f3:7f:8a:55:05:76:dc:6e:83:52:
e0:b3:70:50:82:dd:66:32:b1:40:94:00:15:92:34:57:13:b3:
c2:85:f9:1c:18:e4:98:f8:eb:0b:61:95:89:97:2c:54:22:ee:
0f:00:2c:88:54:de:73:fb:42:2e:dd:a9:69:e3:e0:d9:cc:9e:
42:c8:35:3c:48:18:ad:3c:5f:12:e8:a6:12:9a:00:49:5c:24:
dc:e1:87:19:bf:b3:34:fd:7e:31:43:b7:ef:ee:e2:5c:8a:1d:
6d:84:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:29 2026 by rpki-client