Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_22eltdXocsy_FK88Pr4wpYD5XI.roa
File: _22eltdXocsy_FK88Pr4wpYD5XI.roa (raw, json)
Hash identifier: Id8vyP8DTGOlf1UKVaN65kELC8CGe3E8GystL+ym4b8=
Subject key identifier: FF:6D:9E:96:D7:57:A1:CB:32:FC:52:BC:F0:FA:F8:C2:96:03:E5:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D9FA4F7155FC54F7607D58731946970F6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_22eltdXocsy_FK88Pr4wpYD5XI.roa
Signing time: Sat 18 Apr 2026 08:11:21 +0000
ROA not before: Sat 18 Apr 2026 08:11:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216014
IP address blocks: 193.47.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:a4:f7:15:5f:c5:4f:76:07:d5:87:31:94:69:70:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 18 08:11:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff6d9e96d757a1cb32fc52bcf0faf8c29603e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:b1:27:8a:46:71:10:1c:b5:3e:7a:e7:2f:
62:89:10:b4:18:95:21:b3:1e:2d:66:3f:22:b6:14:
01:33:78:53:8b:46:79:40:8d:63:a0:aa:2d:ec:3b:
9d:d3:29:05:95:cf:61:71:31:65:1c:4b:a0:29:de:
f9:20:00:e4:8c:88:35:d8:71:50:ca:f9:89:0a:48:
fd:bb:94:bc:67:a4:d2:c8:70:6a:cd:e7:76:d4:9f:
5c:4b:86:09:38:67:e2:3e:f3:b0:61:a5:b5:31:b5:
cd:44:8b:78:e8:2d:20:0f:a1:17:77:59:2a:90:8c:
52:a3:fa:d8:ab:94:4a:c7:3e:3b:2e:d2:7f:a2:6f:
10:58:40:47:f2:17:f8:fa:ec:08:06:d8:05:fb:71:
7a:cf:fc:ca:b4:0a:54:51:8b:1b:c6:48:4c:59:19:
42:f0:a4:51:bb:64:3c:ba:82:90:62:8b:3a:e9:94:
72:84:db:87:d9:72:7b:13:ed:10:dd:75:65:32:e0:
0c:b6:e3:63:82:93:b3:52:2e:a3:0f:80:9c:f7:08:
77:bc:bd:d5:30:08:97:77:9f:1d:bb:6c:52:14:8f:
7e:36:b8:d9:af:9a:ac:00:94:0b:23:28:31:2a:ef:
fc:74:e8:45:30:72:7e:7b:4e:0c:71:7f:65:b6:da:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:9E:96:D7:57:A1:CB:32:FC:52:BC:F0:FA:F8:C2:96:03:E5:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_22eltdXocsy_FK88Pr4wpYD5XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.62.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6b:66:2b:f3:29:08:81:a2:b1:d3:94:ee:66:3b:b3:7b:2d:
19:b3:72:71:32:1f:99:40:bf:0a:6f:b0:79:4f:75:18:39:50:
69:4c:5b:86:72:c0:4d:c9:6f:ca:e3:01:37:61:16:88:e2:7f:
03:e8:fb:21:d8:d8:e3:a7:fc:ce:86:44:2e:eb:83:e6:8d:ed:
d4:38:ee:fe:92:d2:6f:dd:01:99:ea:e6:52:d6:2b:ec:19:b8:
a7:a7:32:43:9e:55:0f:d6:94:e6:34:fd:4e:8c:c6:f8:4b:61:
b9:ec:7c:07:d8:70:c0:d7:cf:3f:00:d3:8c:f7:09:4a:61:14:
12:14:e1:c7:c0:5f:e0:a9:d4:d1:4c:ed:6f:52:72:d8:b6:ec:
24:8e:86:ef:81:2f:68:df:f7:8d:c7:5b:15:78:04:70:ea:87:
dc:6e:77:16:2b:40:e1:8d:3e:30:02:3a:76:78:d6:78:d8:f6:
63:56:b2:0f:cf:5e:69:dd:04:c7:95:31:27:19:0e:8c:63:3c:
8a:db:23:ac:77:57:7d:f0:00:8c:0a:05:de:a7:73:08:b4:3e:
20:ba:d5:6a:ce:15:9c:2e:6b:91:7b:05:5f:7d:54:dd:f8:ae:
e2:83:cb:b0:30:0d:79:12:84:1e:74:77:da:63:87:3f:fe:da:
87:f7:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:03:08 2026 by rpki-client