Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/w7lsYz9XoKaXPHhmbi8S3F4BFig.roa
File: w7lsYz9XoKaXPHhmbi8S3F4BFig.roa (raw, json)
Hash identifier: Vh0EEDXpeUyKU+H3tbgpmBhfgd6M7hNmqdp0iRnIzTs=
Subject key identifier: C3:B9:6C:63:3F:57:A0:A6:97:3C:78:66:6E:2F:12:DC:5E:01:16:28
Certificate issuer: /CN=04448d904f77c70cd9ee12336625d4851accb604
Certificate serial: 019DB493A017243A27621BBDCF6BA97ECDA2
Authority key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/w7lsYz9XoKaXPHhmbi8S3F4BFig.roa
Signing time: Wed 22 Apr 2026 09:44:26 +0000
ROA not before: Wed 22 Apr 2026 09:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216381
IP address blocks: 193.104.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:93:a0:17:24:3a:27:62:1b:bd:cf:6b:a9:7e:cd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04448d904f77c70cd9ee12336625d4851accb604
Validity
Not Before: Apr 22 09:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3b96c633f57a0a6973c78666e2f12dc5e011628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:e1:48:f0:ab:de:a4:2b:98:61:c0:b4:02:
b0:4e:5c:bc:4e:72:24:ff:b5:71:7f:48:c0:6c:14:
92:d3:aa:b7:35:df:42:fc:7f:d9:ca:57:65:58:e2:
03:96:6a:9e:07:22:fc:5e:2b:43:69:18:12:f2:1e:
07:08:1f:79:ea:57:ce:7a:0d:d7:bb:fd:22:e7:b0:
15:67:be:4b:f5:4e:da:4b:c7:b9:3e:2c:f7:78:d7:
b4:1b:f7:59:cc:ef:9b:da:33:d7:54:7a:96:89:93:
39:8b:c1:cf:c0:ee:74:80:19:be:21:57:fb:7d:0d:
0e:58:41:06:6d:7f:2a:10:a8:5d:55:4a:e7:41:fc:
6f:34:5e:eb:ef:8e:1f:e6:e2:6b:17:cc:97:80:d9:
0d:6e:9c:e5:29:7c:78:34:e8:8b:f3:e0:ae:e0:2d:
fe:84:4d:86:80:49:5a:c6:15:c8:7a:7f:80:c7:4d:
43:23:ad:fe:85:fa:cd:13:87:de:95:0a:88:cc:d4:
51:2e:86:e9:01:18:bd:ca:07:ce:1e:3f:24:23:f5:
1a:58:42:70:21:71:a5:a5:34:2f:27:d1:fd:e8:96:
96:8c:9b:6a:15:71:27:91:6d:a8:dd:56:c2:ee:23:
47:61:5a:af:75:fb:2a:62:bc:67:1a:91:51:28:dc:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B9:6C:63:3F:57:A0:A6:97:3C:78:66:6E:2F:12:DC:5E:01:16:28
X509v3 Authority Key Identifier:
keyid:04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/w7lsYz9XoKaXPHhmbi8S3F4BFig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.148.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a4:da:f1:f9:a5:39:c5:37:68:17:04:28:47:73:3b:2c:0c:
82:70:16:f2:8e:ad:f4:c7:f3:d8:4e:3a:4d:cf:5e:9a:41:bb:
bb:7e:c7:22:37:19:2d:51:35:8e:b7:f0:da:f7:8d:9a:00:16:
a7:59:72:91:8a:67:9c:ff:99:cc:6c:ca:3d:48:82:4c:53:f7:
ee:52:46:44:e3:e0:b2:28:6a:32:99:08:98:be:61:36:48:f6:
ce:05:bd:0f:8d:58:c0:85:e4:0b:25:54:c8:9c:2e:29:a1:a9:
e0:14:97:d1:b5:1f:3a:ae:11:a2:d3:62:a1:2b:c4:db:4f:8f:
59:9f:8b:a0:45:d4:64:61:db:9d:b2:b6:d0:03:b8:3a:7d:0d:
50:02:16:4b:6d:ea:06:c2:1a:a8:79:c6:43:2f:86:e9:ae:0f:
88:2c:29:95:7a:33:5d:56:b1:57:a0:38:a4:41:18:76:63:8d:
7b:b7:06:9b:29:ab:98:34:70:28:5f:61:a9:c6:7d:5d:69:29:
4f:17:68:64:93:27:5a:cd:b1:75:d9:3c:da:71:7e:1c:9a:77:
1a:42:6a:1e:d9:88:94:09:49:00:ff:4c:2d:09:be:4e:a8:20:
6a:5f:3b:83:6a:1f:ee:81:5b:d2:06:3e:79:6e:5e:f3:40:06:
0d:af:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:18:43 2026 by rpki-client