Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/1_ZYbS4YS3Ad4TzR9dMsLt3uaoQ.roa
File: 1_ZYbS4YS3Ad4TzR9dMsLt3uaoQ.roa (raw, json)
Hash identifier: 7uA8FM0km6XoivNJ8PKPfmfodgId3foqoFN3CW/tSgA=
Subject key identifier: D7:F6:58:6D:2E:18:4B:70:1D:E1:3C:D1:F5:D3:2C:2E:DD:EE:6A:84
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019A6EE428262674D7C6967C4820DA9123FE
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/1_ZYbS4YS3Ad4TzR9dMsLt3uaoQ.roa
Signing time: Mon 10 Nov 2025 17:50:37 +0000
ROA not before: Mon 10 Nov 2025 17:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8916
IP address blocks: 188.246.192.0/19 maxlen: 19
188.246.192.0/20 maxlen: 20
193.108.199.0/24 maxlen: 24
213.5.88.0/21 maxlen: 21
2001:67c:1b8::/48 maxlen: 48
2a03:9800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:e4:28:26:26:74:d7:c6:96:7c:48:20:da:91:23:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Nov 10 17:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7f6586d2e184b701de13cd1f5d32c2eddee6a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:c7:e1:2e:5b:ee:8b:07:3a:3b:73:fd:ae:
3d:a6:ab:2a:4d:17:67:95:0c:40:a8:46:ee:4e:42:
d9:0b:3a:25:fe:4d:07:81:2b:28:bd:ed:d3:f4:46:
81:42:e7:90:9b:9a:3e:6b:09:85:29:9c:01:56:19:
0f:ef:12:3c:2c:a3:22:13:8c:59:61:6a:8e:b3:9b:
11:0d:54:69:f9:68:ed:08:35:2e:27:15:03:44:a1:
d9:d6:05:d8:2b:2d:1d:fe:73:d7:c8:4b:e8:a3:36:
36:84:38:ae:5c:9b:9c:4a:ac:1a:b1:5d:e0:71:c3:
05:b6:22:48:08:8d:bd:cd:04:29:e1:8c:f1:f2:23:
09:64:4d:0b:5a:d3:9f:8a:a9:3e:f8:6d:82:b3:d8:
55:27:15:56:c2:02:a0:9b:d9:2a:d8:b0:63:5e:89:
76:e7:33:0f:d4:4a:08:3a:29:6d:bf:80:b1:a0:29:
d8:76:20:d9:06:1e:87:16:81:07:66:8f:84:f8:7f:
ed:04:ef:ea:05:8b:23:56:c1:f1:c4:92:36:e1:5f:
23:5c:56:4c:0e:33:3d:5f:20:8f:af:28:b3:19:da:
da:ef:ad:11:a0:2f:65:9e:5e:95:74:27:f8:d1:eb:
1a:f4:f7:d8:ab:be:09:13:3c:51:7f:ad:ad:9a:56:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:58:6D:2E:18:4B:70:1D:E1:3C:D1:F5:D3:2C:2E:DD:EE:6A:84
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/1_ZYbS4YS3Ad4TzR9dMsLt3uaoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.192.0/19
193.108.199.0/24
213.5.88.0/21
IPv6:
2001:67c:1b8::/48
2a03:9800::/29
Signature Algorithm: sha256WithRSAEncryption
21:b4:d4:30:ca:5d:b6:d3:68:18:93:46:d2:ce:2b:51:b1:04:
5b:c0:ba:b7:dd:46:ca:5d:a2:e7:17:66:3e:44:a2:3e:fb:5c:
92:a2:c7:8a:0a:55:67:57:aa:7b:a1:70:5f:6a:d2:8d:88:21:
19:27:c0:be:24:cd:8b:8b:f1:3c:d1:cd:83:e4:96:ae:32:7f:
26:d1:4f:0a:3e:a5:67:96:ee:35:57:45:a7:57:42:d6:05:ac:
05:8c:85:9d:ab:b7:0e:1f:5b:a9:af:ab:60:62:ed:88:37:88:
25:91:89:71:5a:04:25:b4:f3:a1:a9:e6:60:ad:bd:b8:58:7a:
5a:db:d6:d5:d2:72:03:aa:9b:c5:45:e7:51:42:33:e4:ab:13:
7f:b1:5c:56:66:df:9c:28:e3:86:41:ac:6e:74:62:f3:bd:57:
4e:e9:11:8c:f0:d3:9d:13:2a:93:da:1a:4e:c6:c2:f1:d1:60:
8b:4c:6a:2c:03:d7:97:dc:7a:30:c6:03:93:15:4d:80:11:55:
a4:99:34:35:53:1d:5c:0b:2d:2f:ff:85:1b:16:9e:78:da:f9:
2a:a0:7e:6e:f0:93:33:a6:04:1f:89:22:64:ed:cd:f8:4a:3c:
53:56:a8:e2:62:c0:e6:c7:41:61:0e:1c:75:22:c6:c1:5f:f7:
ea:cc:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:22 2025 by rpki-client