Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ulIWKQdx0zOS5ChkraGd9pOmeAI.roa
File: ulIWKQdx0zOS5ChkraGd9pOmeAI.roa (raw, json)
Hash identifier: EY6o+NeUZTsaS3pDDccilrUhle0FNfDUnxqDPymdDpM=
Subject key identifier: BA:52:16:29:07:71:D3:33:92:E4:28:64:AD:A1:9D:F6:93:A6:78:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E5DE399BD9EB7DF65D887B196CF7FF6EE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ulIWKQdx0zOS5ChkraGd9pOmeAI.roa
Signing time: Mon 25 May 2026 06:47:37 +0000
ROA not before: Mon 25 May 2026 06:47:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20989
IP address blocks: 193.8.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:e3:99:bd:9e:b7:df:65:d8:87:b1:96:cf:7f:f6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 25 06:47:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba5216290771d33392e42864ada19df693a67802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:8c:cf:c1:4a:7f:b2:ce:76:f9:af:ae:85:
1c:ca:9d:da:e3:9f:be:4d:6d:e2:b3:98:eb:34:0f:
b7:5b:fb:8b:02:b5:6c:42:62:d3:25:24:c7:f8:a9:
bf:50:dd:cd:61:cd:3f:28:46:9f:95:8b:62:f7:3e:
61:3d:84:8d:2d:19:5e:c4:dc:8b:b2:12:30:47:f2:
46:c7:54:9b:f5:24:22:af:28:61:55:c0:be:63:c3:
03:91:5b:3d:9b:8d:d0:f8:d0:c0:30:e2:f7:c2:2b:
b3:54:91:ad:86:d5:76:03:4e:e3:52:13:2d:da:4d:
42:95:bd:4f:45:3f:c9:82:09:3d:61:8e:c7:1b:9d:
a4:42:71:2c:a3:69:4a:5e:23:d4:0a:95:6f:17:8c:
36:88:30:fd:4d:28:d5:15:3c:ab:75:94:a8:17:87:
3b:47:77:75:a1:5b:8f:d4:f4:47:34:82:6a:a5:94:
a9:6f:e3:9d:3a:86:11:00:89:e3:7f:d0:ea:3c:64:
67:3d:8d:35:af:1f:bf:93:6f:2b:4b:5c:49:ea:03:
c4:ae:c9:5a:c1:2e:d5:d2:d5:c3:08:f9:6b:b6:0a:
6a:93:f3:d9:ef:f8:d1:5f:9f:e2:c7:f8:00:eb:d3:
d8:ea:ab:08:6f:aa:00:58:de:82:6e:dd:7d:d6:6c:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:16:29:07:71:D3:33:92:E4:28:64:AD:A1:9D:F6:93:A6:78:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ulIWKQdx0zOS5ChkraGd9pOmeAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5a:bc:57:a6:15:37:d2:e8:56:6b:4b:61:b0:d9:5c:02:4a:
ad:00:86:04:e4:ba:2d:54:be:60:78:6b:3f:4e:34:53:73:5a:
fb:35:e1:81:3e:07:9c:db:44:92:46:b1:e8:2c:8f:c2:8c:ec:
0c:0f:38:aa:65:69:a8:a7:4a:8e:52:65:8c:1c:84:bd:56:e5:
75:f0:49:78:83:3c:3a:85:dc:ed:4e:1b:e1:65:dc:3b:4b:66:
8c:56:f3:38:4b:90:45:64:a2:eb:8d:09:0f:0c:a0:74:0d:95:
8c:6e:8e:6c:e0:16:63:6c:29:ab:64:45:ad:c0:11:c4:62:c2:
46:12:f3:cf:e1:84:0b:04:1f:fa:c3:42:97:08:c0:36:fd:21:
af:64:01:c6:89:1d:19:28:84:5f:48:23:77:d1:a4:2d:a1:36:
5e:59:1d:0f:0f:34:6e:e6:81:4a:1c:44:5b:b3:44:63:5a:bb:
98:4e:a1:29:17:9a:0d:d0:9f:16:93:27:d8:e0:71:f6:84:09:
ba:f5:22:50:19:7e:85:e7:a8:54:86:77:97:be:6e:a8:f3:67:
07:4c:e9:66:fd:73:60:88:ee:e7:b9:a3:39:d7:16:43:89:43:
61:23:fa:34:df:34:89:66:2a:a1:63:c2:69:a9:62:06:28:75:
98:79:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 18:58:37 2026 by rpki-client