Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CE3jSWmNamka7vweqYVILpq0xYs.roa
File: CE3jSWmNamka7vweqYVILpq0xYs.roa (raw, json)
Hash identifier: 7MJavdFBUK32ulBtv4DP9YuvXQMMKXMXonziapHDtuk=
Subject key identifier: 08:4D:E3:49:69:8D:6A:69:1A:EE:FC:1E:A9:85:48:2E:9A:B4:C5:8B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019F394C38BF5C331606304803EB60268793
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CE3jSWmNamka7vweqYVILpq0xYs.roa
Signing time: Mon 06 Jul 2026 21:18:44 +0000
ROA not before: Mon 06 Jul 2026 21:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 2.56.113.0/24 maxlen: 24
62.233.45.0/24 maxlen: 24
91.236.120.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 20:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:4c:38:bf:5c:33:16:06:30:48:03:eb:60:26:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 6 21:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=084de349698d6a691aeefc1ea985482e9ab4c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:af:26:6e:b1:6e:52:a0:f1:7d:47:2e:cd:
fe:2f:1d:d7:41:e6:77:ae:a8:c0:a4:84:17:26:61:
34:2d:c2:a9:33:46:40:59:e2:1b:1a:ce:1b:4d:3f:
04:1c:77:67:33:4a:87:ec:73:11:41:06:f7:c5:da:
42:84:b5:c1:df:5f:74:e2:f5:78:57:e3:19:73:08:
8e:8e:95:73:86:07:35:6c:25:aa:5c:b8:83:93:71:
09:d5:5d:d2:ed:ba:f5:d6:e5:71:5d:62:be:c1:a1:
7b:b9:c7:67:2e:4d:2c:26:47:db:16:f9:c2:f3:a2:
3f:6a:ca:0f:75:1c:9d:d9:23:66:5f:6c:54:eb:e9:
8c:cc:51:19:b6:f4:f7:3d:7e:2a:d2:97:24:b4:e4:
43:aa:b3:76:c7:9f:4b:00:52:f0:32:cc:72:37:ae:
eb:8b:da:b1:b0:24:bd:d7:3f:73:48:80:17:76:46:
d9:5d:99:e4:80:d1:34:95:f1:1f:6e:4d:a0:cd:28:
0e:0a:a5:5f:04:03:9d:48:14:5f:c2:3b:da:ab:67:
ff:84:02:41:11:05:87:d7:b6:95:fd:d2:b0:12:78:
f3:22:90:24:fe:21:1b:7f:27:e9:86:ce:c4:e8:c8:
f2:b8:49:5b:4f:d8:5c:84:f7:d6:a3:24:04:91:86:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4D:E3:49:69:8D:6A:69:1A:EE:FC:1E:A9:85:48:2E:9A:B4:C5:8B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CE3jSWmNamka7vweqYVILpq0xYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.113.0/24
62.233.45.0/24
91.236.120.0/24
146.19.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:96:86:c3:32:97:41:84:da:f2:c3:0f:29:1f:0a:8f:38:f0:
64:0c:bd:be:5a:69:8e:60:df:31:1a:7a:38:5b:44:71:62:bb:
9d:c4:7f:1c:61:e0:a5:78:a4:fe:c5:f6:e2:17:fe:47:6d:0a:
4f:a3:06:56:5e:8b:30:14:a2:c3:05:42:4f:16:53:1c:30:90:
07:48:6b:bd:b8:bd:dc:2c:68:85:f0:9a:18:a1:6f:6e:40:58:
f1:ee:cc:4b:71:36:d1:0d:f3:3c:25:14:e1:81:26:ac:98:f7:
1d:e6:b6:86:b4:7b:18:c5:df:59:b5:04:45:d4:8d:d4:ac:38:
2b:3e:52:d6:60:57:3d:53:0d:35:4c:77:4b:52:c2:f1:9f:a7:
99:13:c3:2a:57:05:85:2a:07:2f:3b:f8:3f:68:f8:fe:f0:97:
0a:be:fc:86:fd:01:38:0a:0a:7b:1e:a9:6a:e1:45:bb:50:b1:
fe:1c:6b:d1:b0:c5:5d:01:1f:e9:f7:1e:d9:4b:a5:59:95:cc:
e9:9f:d5:53:8f:bd:55:30:74:a6:9a:a3:2e:dc:12:ac:b3:9c:
f1:82:30:78:db:81:a7:7c:36:fe:e3:52:5a:13:02:9a:86:09:
14:ab:2f:36:84:d0:fc:2c:a2:33:92:89:89:45:78:f0:f3:bb:
87:c2:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 04:02:49 2026 by rpki-client