Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rmbYhhizFW4e8aPwl_hv-9YaUiU.roa
File: rmbYhhizFW4e8aPwl_hv-9YaUiU.roa (raw, json)
Hash identifier: sui7cnrZW8UE7Gl/bNAaYZnnZ/dhGFrEXksCYskVvBs=
Subject key identifier: AE:66:D8:86:18:B3:15:6E:1E:F1:A3:F0:97:F8:6F:FB:D6:1A:52:25
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019F4055F95D95CC0D27D0789FC573EF38B8
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rmbYhhizFW4e8aPwl_hv-9YaUiU.roa
Signing time: Wed 08 Jul 2026 06:06:43 +0000
ROA not before: Wed 08 Jul 2026 06:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216061
IP address blocks: 213.176.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:55:f9:5d:95:cc:0d:27:d0:78:9f:c5:73:ef:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 8 06:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae66d88618b3156e1ef1a3f097f86ffbd61a5225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:61:da:df:0e:d5:6a:07:ef:97:73:a1:5d:
9d:33:bf:3a:78:28:2e:33:89:dc:d3:12:d4:3e:80:
65:c8:42:39:3a:82:7a:85:4b:6b:ba:f4:90:89:c2:
11:01:a4:92:7f:77:26:b6:93:13:49:97:1d:cb:2c:
d5:0c:42:3b:c5:20:de:ff:1e:63:5d:bb:d8:b8:8a:
5b:4c:71:c6:ed:2c:82:e5:17:f6:70:9e:06:bf:c0:
06:1d:dd:e7:7e:89:c2:6f:8c:49:48:a9:ef:a9:61:
10:29:fe:ed:6b:81:c3:2d:af:ed:5b:75:ad:cb:b5:
40:c9:0e:4f:7e:e7:0e:91:3f:14:f1:e8:a4:db:f2:
bc:04:d8:d0:57:8e:a0:cd:a3:94:6f:13:f1:fb:0e:
20:f9:4d:62:d9:c3:16:05:35:a0:fd:4e:e0:d6:a4:
91:91:52:62:85:54:4f:f1:98:fc:ad:55:68:5c:2d:
7c:3f:9a:80:2c:ea:56:12:98:a6:aa:72:ad:e3:83:
d6:ba:8c:84:24:fe:bb:d9:52:ce:d3:06:ce:90:f6:
4b:36:8b:b4:61:31:4b:4a:a4:55:2d:a9:24:1d:25:
3b:e3:a4:7a:32:e0:e6:01:cb:12:a1:6c:d0:78:6d:
17:45:36:96:03:e4:1b:ce:50:d4:ee:62:f5:b7:3f:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:66:D8:86:18:B3:15:6E:1E:F1:A3:F0:97:F8:6F:FB:D6:1A:52:25
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rmbYhhizFW4e8aPwl_hv-9YaUiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5c:3a:a8:af:49:7b:b0:d7:47:30:22:62:4a:ae:6d:8e:4b:
d8:6f:df:20:3e:1c:71:3a:c7:b9:e7:33:b2:3f:3b:e2:6a:4f:
7f:c8:97:5f:0b:09:fd:f8:35:53:6e:00:a9:8e:c1:a6:5a:4e:
0b:e5:53:59:7e:8a:b8:dd:4e:3f:c5:0d:5e:4d:30:27:77:b7:
7e:dd:75:ff:ef:f8:49:1b:33:f8:10:ee:7e:cc:63:ba:66:b8:
f8:9c:85:94:8f:ef:16:4e:46:e8:f5:b8:12:ab:9c:9d:3d:e0:
6d:bb:ba:bc:b7:c5:16:bf:d9:26:6a:e3:2b:08:38:ff:8c:b8:
8d:2d:dd:cd:fd:aa:02:7a:2b:f6:b4:4a:e4:40:d5:e9:80:46:
3c:fb:7e:dd:ad:53:13:32:a2:63:1d:db:f5:2f:64:25:2e:43:
19:f4:1f:44:4c:21:77:1e:7b:0a:ab:57:76:7d:a6:cb:9f:da:
a4:52:bf:95:15:44:dc:71:11:42:6e:3e:0d:b7:00:81:bc:27:
ce:08:ca:ea:c5:c6:ab:78:2a:33:97:f8:03:62:bc:7a:36:58:
15:92:77:d3:74:b8:67:a0:4e:61:cb:e9:43:45:f6:11:92:d1:
c7:00:7d:fb:9f:8b:96:f0:54:5c:4c:9e:89:a8:83:db:bb:b3:
9d:df:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:54 2026 by rpki-client