Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1-d34El5TOS33gNqYznL6Kp_q4fk.roa
File: 1-d34El5TOS33gNqYznL6Kp_q4fk.roa (raw, json)
Hash identifier: PIfnBkEF3eZWgszecP7f0oeQ4r56pitv+Tre3ZV5KWM=
Subject key identifier: F9:DD:F8:12:5E:53:39:2D:F7:80:DA:98:CE:72:FA:2A:9F:EA:E1:F9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019E3F9F7B0A9E3B668B7300726EE9B2B8D1
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1-d34El5TOS33gNqYznL6Kp_q4fk.roa
Signing time: Tue 19 May 2026 09:44:36 +0000
ROA not before: Tue 19 May 2026 09:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12401
IP address blocks: 193.93.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:9f:7b:0a:9e:3b:66:8b:73:00:72:6e:e9:b2:b8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 19 09:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9ddf8125e53392df780da98ce72fa2a9feae1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:5b:99:2c:e2:a8:60:1d:ed:40:1e:af:e6:
91:d0:74:57:38:30:0f:34:ce:61:c8:4e:87:94:32:
3c:be:4b:f6:ae:26:cb:55:11:40:0a:70:01:09:38:
4d:4e:40:4b:9f:5a:75:04:82:6f:2f:23:97:e8:9b:
7f:e5:ff:56:85:05:4f:5d:ae:2d:2e:86:33:6c:1b:
d8:21:cc:28:2d:fa:29:4a:f9:4a:9c:d4:d7:98:98:
71:22:56:a7:e0:ff:92:0a:f1:50:0a:e5:05:b3:cc:
ca:82:fa:09:c1:b9:1c:06:63:8e:4c:0c:b5:d5:be:
71:74:56:5c:3a:fc:1d:a1:aa:32:c3:75:a3:3e:5a:
8a:2c:1e:92:fe:23:03:36:c4:d4:d2:2f:af:43:ad:
32:aa:76:9a:39:0f:e1:e9:69:78:12:49:b6:0c:b0:
e4:60:fb:71:91:7c:8c:d3:43:e4:f1:22:8a:89:c8:
dd:dd:14:56:0d:b0:ca:6d:b0:23:53:82:10:68:29:
b9:a4:41:a8:46:ba:a7:93:53:06:aa:46:fc:a9:bb:
66:ba:89:cd:4a:ca:b9:03:eb:e9:ad:57:8a:d6:0a:
44:35:66:7d:aa:d2:f3:3f:74:78:43:7e:92:8f:2e:
7c:91:75:05:49:ff:92:06:56:ac:29:d4:68:10:ed:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:F8:12:5E:53:39:2D:F7:80:DA:98:CE:72:FA:2A:9F:EA:E1:F9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1-d34El5TOS33gNqYznL6Kp_q4fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d6:80:a1:fd:49:f1:2b:eb:e9:b6:8b:1b:ef:f7:d4:27:6e:
c4:b6:f6:ae:0f:db:9b:26:83:f4:cd:92:81:82:dc:9d:e2:9d:
66:4d:27:ff:7e:7d:9d:63:68:ef:46:3e:c4:5e:9b:93:6c:a3:
d9:09:3e:5b:fe:24:da:b2:55:c0:ff:a5:07:55:81:56:c0:8c:
17:a1:be:05:75:b8:3f:d9:3b:fb:1f:67:3c:cb:af:54:b0:24:
84:f3:80:70:99:73:4c:c4:ae:ea:fd:b3:25:5c:31:c6:a6:e3:
11:db:83:38:70:e4:31:bf:63:cf:4f:50:67:a2:1f:85:ae:1f:
19:ac:c4:06:55:46:6c:d6:d0:1f:94:24:89:46:6b:2f:67:47:
e0:98:52:2b:38:af:91:0d:b6:87:10:9a:aa:d7:19:df:97:9c:
8a:2c:28:23:47:7f:22:be:11:a3:c1:ee:78:fd:99:04:d0:f1:
c0:4f:c3:2e:a9:3a:00:f4:9f:db:3e:0e:4e:60:7e:b2:78:01:
a6:c4:46:b8:9b:eb:49:f4:3e:46:e9:b8:94:63:90:ab:8f:c9:
e8:b0:2d:3f:f4:02:46:c7:97:d7:9a:09:00:b6:86:8f:82:91:
47:08:bc:c8:17:7b:fa:56:03:04:e1:05:6d:92:a7:c6:b7:dc:
f7:9b:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:47 2026 by rpki-client