Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/IuF3Oww8F31vgCYdvmVX_Mcdfds.roa
File: IuF3Oww8F31vgCYdvmVX_Mcdfds.roa (raw, json)
Hash identifier: ZdUD8wHqLKgu3jLFYnYVv3d4B4ky6vIxcrxoHDIpU+w=
Subject key identifier: 22:E1:77:3B:0C:3C:17:7D:6F:80:26:1D:BE:65:57:FC:C7:1D:7D:DB
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019F086618D78391CA22D7E6152D33439593
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/IuF3Oww8F31vgCYdvmVX_Mcdfds.roa
Signing time: Sat 27 Jun 2026 09:25:36 +0000
ROA not before: Sat 27 Jun 2026 09:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 185.48.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:66:18:d7:83:91:ca:22:d7:e6:15:2d:33:43:95:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jun 27 09:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22e1773b0c3c177d6f80261dbe6557fcc71d7ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:32:cd:05:a8:62:03:86:79:58:63:78:a9:
63:8b:35:9c:6f:62:e0:03:92:c0:c6:4b:11:30:9e:
49:e6:73:b0:b4:98:d4:48:23:af:b3:6a:94:ea:ce:
55:a5:17:e1:3b:8a:ac:e6:69:ab:ea:78:d3:57:62:
a5:88:82:7e:1b:11:b7:51:6c:53:ce:f7:9f:2d:47:
67:b4:09:d1:56:b7:89:72:3d:54:d0:11:75:8f:29:
0b:05:6b:e2:33:33:60:6e:40:8f:f8:0b:76:d4:06:
41:59:39:90:ca:d3:85:1f:bf:db:9d:5f:e0:3a:6e:
75:b1:b8:d1:a5:8c:bd:58:85:c2:f9:89:80:2b:44:
11:01:4e:9b:3d:e4:71:5e:c9:a4:90:1a:bb:50:cb:
d4:bc:2b:cb:69:d8:bf:41:e9:0d:d8:2d:8e:52:cb:
46:55:71:ef:42:0f:d1:38:33:01:f8:38:c6:78:51:
58:f3:b8:30:9f:45:0a:da:c1:fc:29:7f:30:63:78:
66:a9:a7:af:b8:71:07:ac:bb:89:5c:b0:25:de:fa:
67:09:37:9f:69:c0:4f:e5:b5:53:55:56:ce:c9:14:
71:a3:0e:36:97:86:97:9d:4f:50:14:30:2b:5e:3d:
b8:a4:b0:85:e4:3f:d3:bd:75:7f:e2:bd:67:37:78:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E1:77:3B:0C:3C:17:7D:6F:80:26:1D:BE:65:57:FC:C7:1D:7D:DB
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/IuF3Oww8F31vgCYdvmVX_Mcdfds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:02:07:fb:f0:2a:e6:3c:73:e3:00:ee:6d:3e:13:e6:64:00:
91:f7:be:c1:b2:cf:84:f8:8b:67:ae:1e:9f:8e:96:f6:05:65:
2a:f6:d7:6d:ad:b9:16:b1:e7:d1:05:08:c4:a7:42:38:d2:aa:
f4:98:78:e9:05:68:f2:80:e2:96:bd:1a:0d:62:38:0e:46:f2:
45:57:4c:55:09:33:6f:db:49:90:1f:7b:60:cc:bc:da:90:dc:
b5:91:1c:36:0b:0e:98:91:55:db:ef:5a:70:20:eb:b4:dd:78:
09:ea:a8:78:f4:8e:f8:b2:55:5f:3f:be:b1:90:81:a4:7e:7e:
17:ca:1a:2e:df:7f:cc:90:53:31:92:c7:06:d3:d7:82:4e:5e:
26:89:49:8e:94:98:d7:5c:9a:80:63:ee:26:9e:fa:28:2d:f9:
f1:53:be:9f:ad:2c:21:7b:d0:9d:cd:fd:21:61:7f:14:ab:40:
49:01:a6:21:34:ba:11:7f:38:70:05:2c:e5:ff:45:89:a0:cf:
2a:e5:38:d3:22:1a:4e:f7:7b:9b:c8:4e:a2:56:35:20:99:f7:
cd:01:8e:b6:b9:df:35:fd:c3:ce:9e:24:27:dc:bf:58:71:2c:
6c:2f:9d:8b:a7:a3:5d:f1:00:3c:74:75:97:9e:39:9e:c2:1d:
70:87:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client