Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/eHMuNXANl1YlZG7VoFbYe8kGvQU.roa
File: eHMuNXANl1YlZG7VoFbYe8kGvQU.roa (raw, json)
Hash identifier: 0S394nr4mqSN2oEz6TpDcjQlD/IHIemle0MDvIWsbyU=
Subject key identifier: 78:73:2E:35:70:0D:97:56:25:64:6E:D5:A0:56:D8:7B:C9:06:BD:05
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 019DA97C7B516FFCC1DAB98DF8E50155EA7A
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/eHMuNXANl1YlZG7VoFbYe8kGvQU.roa
Signing time: Mon 20 Apr 2026 06:03:20 +0000
ROA not before: Mon 20 Apr 2026 06:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199380
IP address blocks: 193.34.62.0/23 maxlen: 23
193.34.62.0/24 maxlen: 24
193.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:7c:7b:51:6f:fc:c1:da:b9:8d:f8:e5:01:55:ea:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Apr 20 06:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78732e35700d975625646ed5a056d87bc906bd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:0d:e9:5d:21:54:d3:28:bc:63:36:dd:4f:
65:95:e6:ab:95:4d:8b:c5:12:50:8e:c4:2d:a3:3b:
d4:61:21:1d:56:94:e6:3e:05:9c:18:b0:f6:70:f9:
d5:e3:69:23:f2:df:34:5b:b7:07:49:a0:01:71:b4:
97:10:c9:01:7f:da:90:3d:c1:66:e4:72:e6:af:32:
08:0e:32:5f:9f:85:9d:34:77:3b:89:a9:4e:1c:db:
a9:b6:af:39:e6:22:e5:1e:6a:15:20:42:17:9e:26:
a4:4b:ea:be:70:23:6b:37:d6:b1:ba:38:22:49:32:
39:56:d4:fb:0f:79:d2:81:eb:84:f9:16:76:dc:ab:
fe:1c:2e:d2:c7:a6:aa:b7:dd:60:e9:ac:ca:dc:4e:
62:71:95:54:52:7a:53:3b:aa:2e:ee:82:78:57:3c:
14:9e:3d:3e:6c:cf:dc:e9:4e:70:8c:b9:35:9e:a7:
3d:24:ca:3a:14:9f:ea:4c:f1:81:94:a0:d9:a8:38:
13:d8:24:b0:96:df:80:c3:47:2e:cc:f1:d1:36:ea:
35:02:62:a6:39:dc:ac:41:22:0c:3c:34:bd:54:df:
43:53:0b:71:28:8e:00:23:ad:e5:6a:36:24:2b:0a:
b8:bf:9e:97:5b:84:81:78:06:b1:80:f4:0b:ce:47:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:73:2E:35:70:0D:97:56:25:64:6E:D5:A0:56:D8:7B:C9:06:BD:05
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/eHMuNXANl1YlZG7VoFbYe8kGvQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:fd:29:16:cf:bb:05:b5:2a:37:35:2f:98:55:aa:f8:e5:c9:
f0:dc:f5:8b:25:3d:83:c3:0b:95:34:31:a3:d1:18:23:5c:5b:
d0:bb:5c:35:c8:28:ae:e5:54:1c:38:88:b1:31:c1:44:ae:01:
df:35:7e:6a:3c:01:3f:17:12:91:d2:ca:72:77:36:8e:d7:7f:
fb:b7:11:e3:42:33:a6:bd:eb:c4:a2:c2:81:74:13:14:e7:b8:
2c:07:22:b6:14:5f:b8:a4:a3:a7:15:a6:85:54:a9:5e:2c:c6:
3b:db:23:58:a9:2c:15:77:34:36:ec:1e:2b:71:23:28:5e:20:
f9:f8:9e:39:07:2f:e9:c6:06:00:04:de:2d:08:50:1f:93:85:
3f:64:9e:56:c4:52:fd:31:90:6a:8f:dc:8d:48:24:0a:5e:29:
b8:d7:31:e6:46:3c:11:c5:65:6b:22:5a:bf:89:63:b0:88:f6:
49:21:24:ac:5a:2b:4b:35:1e:c7:bd:cb:cc:cc:84:dc:7c:02:
c9:f5:8a:31:d3:9f:b3:7e:ab:ce:c7:92:1c:44:dc:fc:5d:18:
a6:5e:e6:6a:6b:a0:12:98:92:b6:f1:8e:75:7f:be:b2:06:31:
95:0f:7b:c9:67:19:09:a4:98:d9:d4:7d:19:4d:4f:bc:c9:8c:
15:39:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:33:57 2026 by rpki-client