Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_-IzSqMyAnYeGuXF9HT2vUtVRRk.roa
File: _-IzSqMyAnYeGuXF9HT2vUtVRRk.roa (raw, json)
Hash identifier: vztXW7011fFUdIgTt2EUpqtENMCmXjShPNnZa1ANQRc=
Subject key identifier: FF:E2:33:4A:A3:32:02:76:1E:1A:E5:C5:F4:74:F6:BD:4B:55:45:19
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019ECFF7201DEECC504D1BFB8C9B8A4CD6C6
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_-IzSqMyAnYeGuXF9HT2vUtVRRk.roa
Signing time: Tue 16 Jun 2026 10:25:39 +0000
ROA not before: Tue 16 Jun 2026 10:25:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f7:20:1d:ee:cc:50:4d:1b:fb:8c:9b:8a:4c:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jun 16 10:25:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffe2334aa33202761e1ae5c5f474f6bd4b554519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:07:c8:1c:8d:ef:0a:90:ee:29:6b:05:39:
be:a9:a2:78:30:a8:9b:3d:f6:fd:48:1e:9c:ed:41:
a5:fb:36:a6:36:34:93:0c:da:95:24:13:1f:ae:a7:
9d:0d:34:6d:67:a8:53:a2:be:c3:b7:09:5b:7a:95:
3c:7a:2f:52:e4:39:f9:24:ca:7d:86:fe:ec:75:38:
e1:ea:e5:cc:25:e2:61:0e:21:ef:41:fa:25:54:f5:
aa:ea:15:cd:78:ee:40:a8:83:13:1a:0d:54:f2:b9:
e1:53:d6:83:7f:c7:b5:28:05:9c:57:86:01:fe:e0:
da:13:69:24:51:7e:e3:3e:7d:bb:19:98:3f:35:31:
e6:31:77:20:61:a8:df:df:2d:b2:cc:1f:28:54:55:
9c:ce:d3:73:12:9c:f5:4f:ad:bc:a2:b3:1a:be:78:
3f:01:10:d3:5e:60:f3:af:10:ac:08:62:b2:ab:d5:
5c:f6:85:18:c3:12:a1:07:dd:6b:db:30:a4:0f:08:
76:b2:06:71:6c:44:5d:7f:f5:e9:47:b4:90:c7:0e:
f8:82:2f:09:70:03:3c:c5:61:ce:05:b4:fe:a5:aa:
3d:78:bc:cc:2a:2f:8e:e3:2b:27:60:58:3a:1c:3b:
03:02:f5:eb:eb:d2:5d:1c:03:67:20:9e:3b:28:7c:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E2:33:4A:A3:32:02:76:1E:1A:E5:C5:F4:74:F6:BD:4B:55:45:19
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_-IzSqMyAnYeGuXF9HT2vUtVRRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b3:f0:30:a3:c6:3e:b1:aa:41:de:2c:cc:21:7b:1b:66:13:
2b:84:fc:3f:ea:71:be:1b:ca:bc:4d:f8:ae:85:75:e3:e1:a0:
c9:f6:7f:03:bf:1e:23:1f:54:1d:cc:4a:f9:8b:3d:78:3a:ef:
ba:5c:41:bb:de:8b:e5:fe:d3:be:50:a4:9e:4d:16:1e:ff:7a:
dd:d7:5b:a5:a6:2b:03:26:03:82:32:19:22:53:0e:e1:36:df:
cb:64:4b:47:a2:b7:53:c3:22:33:21:7a:dd:f8:88:54:3d:1d:
ce:ce:bf:26:7c:08:1d:e5:68:38:5b:22:6c:2f:32:38:9a:ea:
29:90:64:05:6b:49:ba:fb:a4:7d:df:2c:4e:8a:4c:be:c5:8a:
8c:67:03:cc:52:cb:3c:71:c0:ad:0d:e4:8b:5d:25:ed:4b:f4:
f1:cb:8a:20:8b:9a:5d:24:98:ef:cb:1a:3e:ae:ca:c5:be:68:
ff:66:30:17:a4:7d:ea:69:d2:d8:79:24:fc:2d:bc:03:e0:57:
56:de:7d:fd:96:e8:5b:f4:b6:a5:cb:7a:86:cd:0c:d4:1d:19:
d0:0a:88:0c:48:2a:fc:a0:e6:07:aa:5b:a8:38:ae:74:0d:57:
6c:0c:48:33:53:d6:e1:ad:2d:b2:18:bd:0d:ec:16:81:f3:ee:
45:3a:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:52 2026 by rpki-client