Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/RbKa2MdNi93D_SEy5mldBBAr_6g.roa
File: RbKa2MdNi93D_SEy5mldBBAr_6g.roa (raw, json)
Hash identifier: DDJFavU8WXwXwFIv80Na6ws8lwRCdKbzrxmE+FCif5A=
Subject key identifier: 45:B2:9A:D8:C7:4D:8B:DD:C3:FD:21:32:E6:69:5D:04:10:2B:FF:A8
Certificate issuer: /CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Certificate serial: 019F2369362F2EDD41C87AC15E72D95FD49D
Authority key identifier: 7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/RbKa2MdNi93D_SEy5mldBBAr_6g.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1961
IP address blocks: 193.38.176.0/23 maxlen: 23
193.38.176.0/24 maxlen: 24
193.38.177.0/24 maxlen: 24
193.38.178.0/23 maxlen: 23
193.38.180.0/23 maxlen: 23
193.38.180.0/24 maxlen: 24
193.38.181.0/24 maxlen: 24
193.38.190.0/23 maxlen: 23
193.38.190.0/24 maxlen: 24
193.38.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:2f:2e:dd:41:c8:7a:c1:5e:72:d9:5f:d4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45b29ad8c74d8bddc3fd2132e6695d04102bffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:47:b4:2f:db:9b:67:aa:87:a5:57:eb:c0:
ed:0c:51:99:26:df:e2:04:77:25:05:73:32:c4:e0:
5c:5c:65:7e:1e:64:0d:b5:f1:e0:fc:4d:18:bd:8a:
29:17:41:ad:04:27:fe:c3:05:5a:d1:66:cf:6f:03:
6f:61:06:63:f7:1a:76:77:cd:82:0f:67:7d:03:26:
c3:92:7b:c6:4c:18:ad:e4:c5:7f:16:9a:1e:23:4a:
0c:af:89:d9:b2:8e:3b:01:02:8e:bc:0b:57:2c:8f:
60:9f:ca:7a:2b:a1:d7:9f:70:43:db:87:f5:29:6e:
72:14:dd:de:73:b7:12:6c:87:5a:98:71:65:9e:31:
10:90:18:2c:27:60:52:ac:94:d6:a8:ea:2e:fd:ca:
d1:5a:67:5b:82:85:fb:26:ea:cc:2b:c2:4b:4e:47:
07:36:5e:21:97:66:23:64:47:34:78:26:2e:be:22:
14:0b:91:43:43:76:be:4d:5a:c6:bb:af:05:c0:d4:
e3:6a:38:ea:89:41:ef:c3:4e:91:24:d4:84:22:d5:
de:2b:10:21:80:e0:d0:b6:09:68:1d:80:74:8f:e5:
ac:f1:42:5c:97:4c:a5:9a:20:bf:31:85:e6:22:2c:
06:6c:8e:6b:71:5f:5c:a6:7f:bf:4c:10:a6:7f:c8:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:9A:D8:C7:4D:8B:DD:C3:FD:21:32:E6:69:5D:04:10:2B:FF:A8
X509v3 Authority Key Identifier:
keyid:7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/RbKa2MdNi93D_SEy5mldBBAr_6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.176.0-193.38.181.255
193.38.190.0/23
Signature Algorithm: sha256WithRSAEncryption
97:17:a2:71:42:5d:55:1b:19:92:7a:f7:4c:b2:b7:f9:de:3e:
5b:08:fd:3f:23:42:32:66:51:e4:ef:c8:f8:3f:14:8f:0e:ee:
49:bf:86:6a:8e:eb:b6:0a:b8:9c:7b:7c:47:e9:0e:26:97:54:
a1:b8:40:f9:f6:38:8e:eb:94:06:17:f8:cd:44:e6:c9:35:3f:
c6:b4:d4:d2:99:59:87:09:a4:79:a8:9e:47:6d:91:97:df:a5:
32:11:9d:ac:d1:42:02:2c:cb:50:72:a0:34:01:00:9b:72:72:
50:35:77:56:f3:c1:3f:48:6e:9c:c9:76:59:e0:1b:14:cd:93:
cc:00:0b:4a:4a:ad:d9:ad:aa:a3:c8:84:66:0e:8b:46:4d:73:
b6:84:06:3a:1b:cb:8e:58:01:45:b7:b1:55:e4:ff:1f:01:0b:
93:9b:83:86:d6:ba:61:90:68:fa:d8:ac:58:f7:32:48:fa:31:
b2:81:6b:2a:17:e8:7b:b9:2a:ae:1a:bd:0a:d9:a8:b2:75:e2:
d8:4b:51:be:a9:25:8f:9a:77:ae:7d:c6:f0:1e:5d:a9:1b:dc:
34:d6:27:d6:28:d2:41:05:c4:88:aa:24:d3:e9:19:9b:fb:8a:
cb:0c:c7:3e:63:1f:d6:6b:d7:7a:d9:27:8c:e4:be:b9:b7:56:
20:8c:78:74
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8jaTYvLt1ByHrBXnLZX9SdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMmU5NGRkY2U1NjZkOTQxODM4YjNiYzljOGU4YTRmMzlk
MmRhNDYwHhcNMjYwNzAyMTUxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWIyOWFkOGM3NGQ4YmRkYzNmZDIxMzJlNjY5NWQwNDEwMmJmZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14lHtC/bm2eqh6VX68DtDFGZJt/i
BHclBXMyxOBcXGV+HmQNtfHg/E0YvYopF0GtBCf+wwVa0WbPbwNvYQZj9xp2d82C
D2d9AybDknvGTBit5MV/FpoeI0oMr4nZso47AQKOvAtXLI9gn8p6K6HXn3BD24f1
KW5yFN3ec7cSbIdamHFlnjEQkBgsJ2BSrJTWqOou/crRWmdbgoX7JurMK8JLTkcH
Nl4hl2YjZEc0eCYuviIUC5FDQ3a+TVrGu68FwNTjajjqiUHvw06RJNSEItXeKxAh
gODQtgloHYB0j+Ws8UJcl0ylmiC/MYXmIiwGbI5rcV9cpn+/TBCmf8gXDQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEWymtjHTYvdw/0hMuZpXQQQK/+oMB8GA1UdIwQY
MBaAFHwulN3OVm2UGDizvJyOik850tpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkM2VTNjNVdiWlFZT0xPOG5JNktUem5TMmtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvUmJLYTJNZE5pOTNEX1NFeTVtbGRCQkFyXzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvZkM2VTNjNVdiWlFZT0xPOG5JNktUem5TMmtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBATBJrAD
BAHBJrQDBAHBJr4wDQYJKoZIhvcNAQELBQADggEBAJcXonFCXVUbGZJ690yyt/ne
PlsI/T8jQjJmUeTvyPg/FI8O7km/hmqO67YKuJx7fEfpDiaXVKG4QPn2OI7rlAYX
+M1E5sk1P8a01NKZWYcJpHmonkdtkZffpTIRnazRQgIsy1ByoDQBAJtyclA1d1bz
wT9IbpzJdlngGxTNk8wAC0pKrdmtqqPIhGYOi0ZNc7aEBjoby45YAUW3sVXk/x8B
C5Obg4bWumGQaPrYrFj3Mkj6MbKBayoX6Hu5Kq4avQrZqLJ14thLUb6pJY+ad659
xvAeXakb3DTWJ9Yo0kEFxIiqJNPpGZv7issMxz5jH9Zr13rZJ4zkvrm3ViCMeHQ=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:12:07 2026 by rpki-client