Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tG_TghGjCdgU6sXx_8eHqwV10OM.roa
File: tG_TghGjCdgU6sXx_8eHqwV10OM.roa (raw, json)
Hash identifier: FNwNgIzV+cM5gbtEPBLEJzw6Kt6akv3HznZcICCqwsY=
Subject key identifier: B4:6F:D3:82:11:A3:09:D8:14:EA:C5:F1:FF:C7:87:AB:05:75:D0:E3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019CAE2F630269CBF4C8265EB50340757A40
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tG_TghGjCdgU6sXx_8eHqwV10OM.roa
Signing time: Mon 02 Mar 2026 10:54:26 +0000
ROA not before: Mon 02 Mar 2026 10:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 193.93.54.0/24 maxlen: 24
194.61.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:2f:63:02:69:cb:f4:c8:26:5e:b5:03:40:75:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 2 10:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b46fd38211a309d814eac5f1ffc787ab0575d0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:14:2f:aa:a3:34:49:e9:e3:31:b5:6f:db:
83:d3:0f:06:f6:ba:62:4e:ab:a4:7d:33:91:4f:3d:
64:19:ae:bf:0c:fd:07:18:35:35:43:3d:1c:ad:e6:
7a:d9:12:93:3f:1f:e2:93:17:0d:70:40:02:fd:32:
0f:0f:02:78:b5:76:66:85:59:6d:c8:12:75:11:f2:
9c:76:0c:c5:ad:57:c0:d2:ae:83:52:c5:42:c7:6c:
1a:a3:56:9e:c9:ce:95:7f:5f:eb:e7:e6:f7:6c:7d:
7d:a3:94:05:66:dd:23:b0:d3:75:f9:f9:0c:dd:d5:
3f:5d:93:9e:e8:76:f4:ee:e4:8b:8f:e4:1b:4f:49:
5c:97:03:22:bb:07:c2:77:2e:56:8d:5f:f9:2d:4b:
5b:3a:40:db:82:96:c1:07:59:a8:f2:be:e3:e8:77:
d7:96:fc:00:91:87:91:e8:b8:7b:5b:14:3f:e1:57:
d5:1c:3f:4a:70:9c:f2:37:ef:b8:42:14:ce:57:f2:
7c:9a:54:39:db:45:61:c0:24:61:26:c5:2f:f8:56:
84:9b:67:6e:e9:97:60:09:5e:20:19:f9:0a:ae:df:
ed:19:67:58:cd:61:ac:e2:fa:06:81:81:17:3a:c3:
c8:9d:87:37:49:a3:86:5a:72:9f:77:cc:d4:f1:48:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:D3:82:11:A3:09:D8:14:EA:C5:F1:FF:C7:87:AB:05:75:D0:E3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tG_TghGjCdgU6sXx_8eHqwV10OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
194.61.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4f:a3:30:50:ed:c1:aa:76:06:ee:47:a2:ac:14:76:60:f9:
eb:86:a6:40:b3:a7:4e:8a:0e:22:34:0d:4c:fa:16:15:d3:93:
98:9d:aa:a0:09:43:09:98:e8:ba:72:f0:9a:b0:97:aa:c6:6e:
9d:67:c5:07:45:a4:a5:c8:15:fc:8b:f2:f5:56:24:da:cd:ef:
cb:99:3a:0f:21:51:28:a0:cb:ce:72:99:f9:77:1c:4e:85:9c:
6a:df:2b:c2:a4:1d:af:55:6f:35:56:74:1b:ef:99:4a:86:8d:
9e:64:34:eb:88:28:27:d6:62:3e:54:2a:91:f3:86:43:0b:ac:
db:1f:b6:5c:ba:03:36:f5:14:49:23:0d:1a:8c:3e:a9:1f:0b:
49:de:fd:9e:da:6e:44:67:c8:e6:82:32:85:51:5f:27:93:47:
31:56:50:25:d0:10:f3:e1:31:30:61:0a:47:96:de:72:f2:44:
1f:5d:f9:3a:ab:11:40:a1:09:9a:2e:65:39:29:e6:51:69:d7:
5d:68:70:8b:44:5b:c3:d9:de:d7:db:a3:fd:ac:b9:dc:00:c5:
fa:4e:a5:5b:d9:6a:47:2a:90:2d:a4:47:99:ac:6c:99:f2:26:
1f:2f:4c:48:67:a9:8e:ca:e8:36:c0:43:0b:a9:7e:80:64:da:
2e:ea:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:34:38 2026 by rpki-client