Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/g2R1TiS3jxFeB9U54WChv60i8Dc.roa
File: g2R1TiS3jxFeB9U54WChv60i8Dc.roa (raw, json)
Hash identifier: Fmq9gKwDLBwoIVihbRm78ylA/Jays/PNcsKOWbH91nY=
Subject key identifier: 83:64:75:4E:24:B7:8F:11:5E:07:D5:39:E1:60:A1:BF:AD:22:F0:37
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019F136816477A37C600EE93AB68F2136CFE
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/g2R1TiS3jxFeB9U54WChv60i8Dc.roa
Signing time: Mon 29 Jun 2026 12:43:36 +0000
ROA not before: Mon 29 Jun 2026 12:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49244
IP address blocks: 193.203.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:68:16:47:7a:37:c6:00:ee:93:ab:68:f2:13:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jun 29 12:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8364754e24b78f115e07d539e160a1bfad22f037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:91:73:c0:61:f9:e2:72:c5:46:78:6e:13:
36:cf:ac:f4:5b:be:c5:87:ae:d5:f6:e7:eb:f8:5c:
a2:b0:ca:f7:81:0c:7b:d6:c9:87:2d:e5:5c:c1:5c:
f5:91:9c:0d:7b:c8:8b:b0:83:05:bb:bd:76:75:4b:
7f:99:c3:1e:ae:0e:cb:fe:13:0e:27:55:7c:0b:e7:
a5:58:50:b6:88:b0:b4:f4:b2:77:8e:4f:70:23:bc:
05:ce:27:91:d4:1e:74:4e:94:15:a2:b0:91:75:7b:
18:13:e8:c8:30:67:ca:34:97:8c:b1:e4:7e:b3:4b:
0c:07:37:44:97:86:e4:2e:b9:3b:b3:f6:8b:b8:2f:
6c:1c:08:e4:65:5b:a8:d6:9c:a4:fb:bf:8c:41:f3:
0f:11:76:b8:b1:77:28:36:f4:0c:de:de:05:ec:75:
56:85:53:9c:c7:0e:0b:64:8e:ff:7f:4e:5d:7b:f8:
66:55:85:5a:4e:e7:45:a8:ff:e9:17:7e:f0:fb:b4:
6c:42:33:16:b7:29:dd:db:81:2d:99:91:b0:d0:1f:
8b:71:c7:eb:94:7e:c3:fd:d6:3b:eb:fb:29:57:de:
dc:06:3d:1c:cf:f2:56:5f:3d:ac:10:89:7c:b6:e6:
98:11:10:5a:d7:18:88:3c:4f:04:c7:9e:56:3c:3b:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:75:4E:24:B7:8F:11:5E:07:D5:39:E1:60:A1:BF:AD:22:F0:37
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/g2R1TiS3jxFeB9U54WChv60i8Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.104.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ed:33:af:07:4a:61:32:3b:0f:66:04:7a:34:12:0a:d9:35:
8f:c7:37:d9:ae:93:a6:a6:a9:f7:16:df:23:2a:6b:89:23:a8:
4d:82:c1:dc:e2:6d:ba:d9:0c:d9:03:35:b9:e7:4f:ff:6b:75:
89:24:84:fc:2b:4c:49:d7:f4:8a:af:9d:5f:c7:9a:28:5e:c2:
15:d2:ef:81:f9:27:ca:c3:b3:41:48:dc:6d:f8:ee:17:0f:92:
86:26:cb:34:8f:d7:0c:13:12:55:b0:a1:07:02:90:ed:45:74:
44:4f:fd:f6:80:17:08:27:d3:24:0a:d8:01:d7:f4:7c:50:59:
dc:fb:84:9b:de:e7:ac:33:fa:5d:32:af:9b:7d:0d:6c:84:68:
86:fc:31:ea:46:6b:8c:ea:33:17:e8:a6:65:5e:63:f1:e6:e9:
ee:6c:f6:82:5a:aa:c9:bf:eb:96:33:57:ab:54:e9:f7:b3:29:
f7:b2:1a:3d:83:46:ef:42:af:1e:48:81:4a:cc:4c:a4:de:75:
86:a5:52:ed:8c:40:bc:4a:c8:69:f0:99:0b:3a:73:70:dd:9e:
85:1e:a5:f4:3e:0e:e9:77:1c:7a:d2:98:83:89:21:fb:d1:1e:
6a:a1:83:94:4e:31:d5:85:5e:ca:31:a0:24:89:8a:4e:2d:ee:
6c:15:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 17:33:52 2026 by rpki-client