Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa
File: tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa (raw, json)
Hash identifier: U6b+qcJDlZitVxi4VTwdzLaOqGFdF5aocVEDkGTIcVo=
Subject key identifier: B4:4E:89:24:11:86:61:F2:FB:A4:E9:9D:F5:27:06:1B:E3:C1:29:1D
Certificate issuer: /CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Certificate serial: 019F2368D13C663B6066F6B4C8A4D3CBF7C5
Authority key identifier: AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32787
IP address blocks: 193.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d1:3c:66:3b:60:66:f6:b4:c8:a4:d3:cb:f7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b44e8924118661f2fba4e99df527061be3c1291d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:73:f1:4b:25:fe:25:d9:72:20:3d:f7:9c:
97:e1:2b:c6:3b:2a:bb:86:fa:73:0e:ff:97:d8:01:
b8:b8:96:56:0f:3c:4e:84:16:21:a1:a6:a8:9e:d7:
ee:55:1f:9d:da:0b:1c:fd:b9:9e:df:32:14:9d:c8:
0b:32:94:89:38:a7:45:fb:b9:e6:60:e8:0f:e9:74:
76:26:ed:f8:eb:00:16:e0:a7:ae:21:ec:5e:25:52:
48:7a:03:49:fb:a5:a1:ad:fe:7c:3e:ba:6f:dd:85:
e8:31:5b:12:b0:22:b4:61:63:a6:17:0d:83:c1:64:
65:1b:9f:5a:5e:ac:1b:14:fa:7c:54:3b:eb:a5:6e:
f1:5c:66:ff:cc:bc:8b:c3:b1:0b:e1:d1:75:0c:78:
80:23:a1:64:5a:34:2f:28:5b:08:90:58:39:f8:9f:
12:72:b0:8b:d0:dd:93:72:21:fc:28:c7:b2:00:d8:
be:00:29:ec:0f:f2:f4:4d:9f:e1:a6:87:83:5c:25:
86:e9:d2:88:85:2e:e6:38:63:66:bd:4a:fc:53:0e:
80:ca:2b:1a:47:d2:fd:7c:73:73:29:e4:a9:a2:41:
5f:db:f8:3a:24:d8:df:97:b2:6d:b9:e6:1d:fd:0c:
01:94:b8:2d:f9:55:cf:e8:9e:00:ef:15:58:d2:2b:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4E:89:24:11:86:61:F2:FB:A4:E9:9D:F5:27:06:1B:E3:C1:29:1D
X509v3 Authority Key Identifier:
keyid:AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3b:39:b6:74:68:a0:e1:32:5a:e4:2f:23:f6:03:28:e0:c8:
23:0d:70:b9:44:b6:e8:4c:54:74:84:21:33:05:09:80:1a:d9:
39:4c:d2:32:c5:ac:9a:2f:be:c9:ae:36:82:c2:b9:eb:d0:81:
a5:98:aa:50:fc:72:2b:a7:75:c4:c3:0f:e8:d9:6f:cd:6e:86:
39:d8:6e:e9:90:42:ca:09:12:fc:a9:f8:69:47:85:c1:c0:0a:
08:a8:8f:57:c7:b2:c0:4a:10:42:f7:e2:c6:3d:ed:61:d9:5f:
a8:92:23:2d:4d:96:96:2f:18:ce:63:e6:c4:0e:4f:be:09:16:
d8:c2:19:3b:af:59:09:90:e7:a8:6a:35:6a:9a:b1:80:aa:96:
4e:13:37:c9:5a:6a:b6:ff:dc:81:a7:5e:9f:4d:77:75:3b:ae:
bf:65:05:51:d8:ee:68:b3:31:ed:c3:41:2f:1c:45:86:82:c7:
70:26:b0:11:96:d7:f5:b4:44:7f:23:79:3f:48:9f:68:a6:eb:
fe:5c:12:8c:46:e6:6e:f7:10:74:e5:e9:14:7f:58:54:11:22:
25:55:7f:e8:10:9a:29:5d:7a:5c:c4:1e:4d:99:a7:72:ae:80:
b7:df:66:1f:02:c3:45:7e:47:91:ae:0f:af:07:ef:87:a3:b6:
37:e6:3b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:46 2026 by rpki-client