Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-ZnI4rWSRrMRT1eatOUz2rc3Lh4.roa
File: 1-ZnI4rWSRrMRT1eatOUz2rc3Lh4.roa (raw, json)
Hash identifier: Eull/8vH/vDrcToT+vW/qVp1jrAOXqKVQZSKsYw9cW4=
Subject key identifier: F9:99:C8:E2:B5:92:46:B3:11:4F:57:9A:B4:E5:33:DA:B7:37:2E:1E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A15E2065210A2118F9EFDE0A18BEE587D4
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-ZnI4rWSRrMRT1eatOUz2rc3Lh4.roa
Signing time: Wed 21 Oct 2026 11:02:23 +0000
ROA not before: Wed 21 Oct 2026 11:02:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 193.160.140.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:20:65:21:0a:21:18:f9:ef:de:0a:18:be:e5:87:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 21 11:02:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f999c8e2b59246b3114f579ab4e533dab7372e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:23:1b:8d:f1:62:82:ac:e4:07:b5:98:8b:
7c:01:9a:ac:7f:82:d4:19:32:c5:2d:57:b5:bd:22:
6b:32:7e:0c:65:9a:00:d0:9f:55:b5:29:60:2c:76:
ec:f9:f1:d5:25:f8:54:6e:05:39:07:3a:df:8c:b8:
b9:cd:37:42:fb:85:9f:7d:3e:4f:e6:5b:e9:44:91:
d5:61:c9:e6:42:76:7e:53:8b:37:ea:87:5e:20:57:
93:dd:dd:c8:c0:71:5a:63:c2:e8:03:b2:32:b5:ea:
86:46:a2:5d:25:fc:70:6e:da:1d:45:b2:ee:24:ea:
c1:44:90:06:fd:15:a9:43:87:3b:ff:7f:34:e5:eb:
64:0b:76:cf:55:07:d3:19:7a:73:03:8e:fb:47:7c:
1e:a5:4e:f3:7f:36:67:52:da:a3:18:2c:04:af:b9:
8f:07:d8:d7:4a:6f:6a:ce:89:89:0c:f1:2e:0a:07:
d0:7f:66:77:db:a0:0d:8e:06:e1:c7:4f:fd:be:be:
24:b5:ef:c7:61:92:33:02:8f:03:25:e0:c6:7a:00:
f6:42:93:a5:4c:63:ed:e3:28:0a:09:89:ea:78:7f:
14:54:e7:af:cf:41:3b:dd:b6:9d:86:75:4f:81:4c:
b9:71:ab:e5:84:a4:f3:1c:30:25:bc:5c:09:f9:28:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:99:C8:E2:B5:92:46:B3:11:4F:57:9A:B4:E5:33:DA:B7:37:2E:1E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-ZnI4rWSRrMRT1eatOUz2rc3Lh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.140.0/24
193.160.142.0/23
193.223.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:0a:70:75:03:1a:74:d9:34:45:5b:c7:89:02:5e:fd:af:e6:
12:22:be:ea:65:0e:32:4a:f8:d2:87:26:c0:a3:68:c3:25:a4:
4f:25:94:ce:c5:b1:c4:98:5f:ba:a6:44:06:bb:b1:22:1a:83:
90:b7:2e:29:86:d5:be:cf:c2:36:b2:59:cf:99:89:8e:fb:04:
27:16:3d:29:f3:5c:eb:91:18:5a:64:74:f8:0c:80:75:f0:b1:
87:a9:6f:88:1b:3d:be:4e:a8:8e:94:6b:6e:41:c2:55:32:22:
2c:26:5b:4f:66:55:76:ef:de:76:e8:39:ae:21:22:b0:0d:f3:
8d:91:99:15:b8:53:8c:55:7a:25:27:40:ce:6a:56:97:d5:71:
f1:76:d8:81:06:62:f8:c8:ec:c9:e0:d9:6c:e4:2f:e9:c4:f3:
24:88:68:4b:36:83:68:8c:c2:a8:e2:4c:22:50:76:92:c9:4f:
27:99:4b:55:87:19:7b:9e:51:f1:39:d2:93:ad:db:ad:64:93:
51:41:d7:c5:f0:a2:cb:e7:d7:84:16:2f:0f:d1:30:4f:47:72:
ad:bf:fc:da:5e:9e:26:7e:5d:61:34:8d:70:a2:25:fa:82:e2:
a9:93:b5:3c:3a:52:63:09:7f:03:27:5f:2d:20:f8:16:b3:fc:
5a:e4:c2:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:53 2026 by rpki-client