Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/1wLFX9FXNmkr7PirzcPsbpqlJQ8.roa
File: 1wLFX9FXNmkr7PirzcPsbpqlJQ8.roa (raw, json)
Hash identifier: P2lru/8ni4eoEw7i4AHjlyzAE6kNl3zcnc1hnURt9xU=
Subject key identifier: D7:02:C5:5F:D1:57:36:69:2B:EC:F8:AB:CD:C3:EC:6E:9A:A5:25:0F
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 019EF46E1ABC418247C40C78BE3674729F33
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/1wLFX9FXNmkr7PirzcPsbpqlJQ8.roa
Signing time: Tue 23 Jun 2026 12:21:56 +0000
ROA not before: Tue 23 Jun 2026 12:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215423
IP address blocks: 193.33.16.0/23 maxlen: 23
193.176.36.0/24 maxlen: 24
2a14:bc0::/29 maxlen: 29
2a14:bc0::/48 maxlen: 48
2a14:bc0:1::/48 maxlen: 48
2a14:bc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:6e:1a:bc:41:82:47:c4:0c:78:be:36:74:72:9f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Jun 23 12:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d702c55fd15736692becf8abcdc3ec6e9aa5250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:ae:11:df:fa:52:e2:68:7f:52:58:8e:c6:
35:3d:64:80:bd:aa:18:7e:c4:05:e1:fb:f8:25:65:
52:0e:33:b4:6a:99:ad:d9:72:3b:fd:2f:ab:b8:45:
63:38:2c:99:a1:30:5c:f8:eb:a9:50:3f:b5:1b:4c:
8e:a7:fc:1f:8f:f7:9b:5d:94:0c:a2:d5:45:29:d5:
c4:f3:fa:7b:25:16:ff:83:3e:a3:49:59:2d:cd:e1:
84:a9:91:66:f7:97:a0:a0:db:24:ec:3e:1a:2e:a8:
4d:29:30:35:ae:3c:bb:42:bf:e3:d4:3f:0a:45:46:
9a:b4:6b:dc:4f:5d:d7:57:76:09:e6:80:9c:7d:11:
9f:68:ae:28:d8:a1:c5:4a:9d:75:f5:c5:18:56:b2:
58:fb:5e:ef:87:cb:6f:8e:f2:e2:f3:15:b6:b8:15:
4a:97:71:b3:eb:21:64:c8:5c:34:60:fc:42:00:9e:
0f:69:07:b9:16:21:85:c2:60:2a:5e:82:88:72:09:
40:b8:06:e2:97:d9:75:33:d9:d5:6f:9c:61:84:50:
7b:d9:56:47:b8:06:35:10:08:6e:ea:8b:82:b4:ac:
07:68:09:be:45:5b:f7:05:5e:39:12:68:69:a7:18:
97:30:1a:f4:53:d8:e0:96:aa:6a:63:c6:8e:6f:b0:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:C5:5F:D1:57:36:69:2B:EC:F8:AB:CD:C3:EC:6E:9A:A5:25:0F
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/1wLFX9FXNmkr7PirzcPsbpqlJQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.16.0/23
193.176.36.0/24
IPv6:
2a14:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
ce:11:c0:a4:f9:d5:2c:97:b7:81:cb:6b:44:8d:fe:91:96:f2:
4f:52:df:08:36:af:c7:48:a0:7e:62:9a:7c:54:33:88:42:fa:
2e:d5:3c:ec:b2:80:66:3c:21:09:2c:e2:3e:dc:bf:27:68:63:
76:96:03:4f:70:5d:68:11:7d:17:e5:30:36:cc:0f:da:d6:47:
d4:08:5a:bd:58:bc:40:94:ec:3e:e6:a1:33:8c:53:a7:cb:75:
3e:7b:d4:02:1c:dc:26:91:23:b1:6d:6d:c0:d5:be:16:71:1b:
a5:dc:52:24:48:e4:2c:a2:62:56:8e:e7:a7:30:f8:c9:a4:98:
46:4c:50:89:a7:76:f2:3e:74:ad:e7:8c:fa:94:20:94:74:e6:
4b:05:6f:63:8f:1e:57:3f:ad:95:5c:5b:0d:61:ed:88:45:a3:
63:80:bb:49:3a:85:10:3e:f4:5d:f3:f3:b2:09:93:55:8b:49:
5e:62:45:35:88:ea:e0:b6:fa:98:03:ed:c4:cb:64:b9:bb:93:
08:1c:37:d1:b3:cb:ba:3b:94:5e:67:ba:5f:88:b9:61:82:ac:
d4:43:a3:04:b8:77:35:f5:95:73:72:87:20:93:1d:01:12:a5:
73:8d:93:15:21:2b:e8:23:77:23:b6:3c:28:7e:e6:85:72:51:
fd:fd:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:34 2026 by rpki-client