Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa
File: CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa (raw, json)
Hash identifier: nr0fY8ExMvANSEMYgY5geen0UP5hnXCKbuR1OPzJBig=
Subject key identifier: 0B:3B:9E:77:01:6C:E9:4E:61:4E:FB:8E:28:A7:04:0D:92:77:9B:83
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019FF60C0A396BD21C3AE15ECB79F882DA6F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa
Signing time: Wed 12 Aug 2026 12:56:51 +0000
ROA not before: Wed 12 Aug 2026 12:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48918
IP address blocks: 195.191.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:0c:0a:39:6b:d2:1c:3a:e1:5e:cb:79:f8:82:da:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 12 12:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b3b9e77016ce94e614efb8e28a7040d92779b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:27:00:9a:cd:85:0e:f9:58:f9:5e:32:62:
b0:db:18:70:95:63:b6:f1:8a:e7:43:00:c6:d0:be:
54:89:82:9c:c0:27:25:9d:33:dc:62:69:a6:7c:12:
b3:63:9c:cd:f3:1b:d7:1f:1d:d2:3d:5a:7d:33:dc:
6c:f1:d8:76:1b:ef:a2:bd:2a:ff:a8:36:b8:a6:4e:
e3:ec:9d:b2:ab:44:f9:28:70:c3:20:1a:92:ec:5b:
b6:3f:db:ed:96:7d:ef:82:d6:2c:9f:81:23:82:f5:
b8:d4:05:d5:54:ec:1f:15:26:97:e6:d9:0b:49:a5:
39:27:2c:51:2d:50:8e:d6:5c:55:ef:87:fb:20:ae:
94:a5:2f:24:62:e9:d6:cb:de:56:09:09:6c:bf:e3:
5f:16:c4:d8:15:74:73:27:19:f1:e4:04:61:fa:1b:
7a:77:76:21:6e:c2:5d:94:df:b4:69:80:06:33:5a:
4f:37:2a:97:75:a6:1f:09:b7:c7:58:6a:12:e0:f5:
f9:94:ef:bb:fc:7b:4a:7c:69:5b:b9:bf:0b:06:66:
d9:d8:56:36:8a:ad:9b:ec:9d:d3:bc:9e:8c:f6:c2:
4f:51:b8:c0:4d:83:f1:d7:a2:67:84:56:b4:a1:a9:
a6:ed:bd:7b:2b:22:55:7f:12:d5:99:fc:06:9d:a6:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:9E:77:01:6C:E9:4E:61:4E:FB:8E:28:A7:04:0D:92:77:9B:83
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CzuedwFs6U5hTvuOKKcEDZJ3m4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.26.0/23
Signature Algorithm: sha256WithRSAEncryption
83:05:95:a9:5d:4c:d8:e8:d2:83:f3:54:31:0a:d3:41:bb:9c:
35:7a:39:ec:29:a0:cd:d4:3f:91:c6:98:ca:42:a5:98:5f:0c:
82:f4:71:8b:1a:ae:f9:89:97:eb:ee:66:ff:0a:ad:c2:98:8a:
38:3e:8d:3c:62:8b:b4:68:4e:21:7a:82:ba:00:9d:07:87:11:
24:5b:c8:8d:e3:c2:5b:75:d2:53:bb:77:51:76:06:5a:bb:f2:
2f:67:c3:0b:d7:86:df:0a:b0:8d:f2:f8:48:c5:1a:01:ea:3f:
df:b8:d6:ad:65:21:c0:fb:50:cc:3e:94:5f:65:0b:c2:f1:cf:
81:29:39:19:8b:c2:5c:55:54:c2:70:30:e1:eb:af:dd:28:4b:
5f:39:e4:fa:35:87:09:a8:84:7a:04:6d:e9:25:43:98:e8:9b:
37:42:f7:bd:2c:bf:b2:1a:40:65:b5:d6:04:5b:18:d3:99:67:
ed:6f:4a:b5:64:bb:55:b3:4a:9a:4d:8c:53:1f:04:d4:f1:c9:
74:c9:2a:cc:8a:2f:ae:52:d8:58:cb:cf:55:e0:79:64:02:13:
21:50:73:81:a3:5e:3a:42:c0:96:91:f6:7d:5d:bc:5e:a0:3a:
de:15:c6:05:a6:4a:25:17:83:26:b3:07:ed:9d:0e:11:d3:52:
91:62:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:12 2026 by rpki-client