Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/2c8b8b-070e-42b3-adbe-de0d5ddef702/1/T9b6DJT2Vj-WKYhuGQWDVFuyoG4.roa
File: T9b6DJT2Vj-WKYhuGQWDVFuyoG4.roa (raw, json)
Hash identifier: MELTd+QQZNlF8aW64DHQgjXDrr0HA/scT6rKe/chi0s=
Subject key identifier: 4F:D6:FA:0C:94:F6:56:3F:96:29:88:6E:19:05:83:54:5B:B2:A0:6E
Certificate issuer: /CN=03c3bc03f6cb72ee344d6ccb6a4a8ac60849003f
Certificate serial: 019FB6E2F688B4EB5A66BF925A89CEBCF569
Authority key identifier: 03:C3:BC:03:F6:CB:72:EE:34:4D:6C:CB:6A:4A:8A:C6:08:49:00:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8O8A_bLcu40TWzLakqKxghJAD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2c8b8b-070e-42b3-adbe-de0d5ddef702/1/T9b6DJT2Vj-WKYhuGQWDVFuyoG4.roa
Signing time: Fri 31 Jul 2026 06:35:55 +0000
ROA not before: Fri 31 Jul 2026 06:35:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39133
IP address blocks: 193.22.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2c8b8b-070e-42b3-adbe-de0d5ddef702/1/A8O8A_bLcu40TWzLakqKxghJAD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2c8b8b-070e-42b3-adbe-de0d5ddef702/1/A8O8A_bLcu40TWzLakqKxghJAD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8O8A_bLcu40TWzLakqKxghJAD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:e2:f6:88:b4:eb:5a:66:bf:92:5a:89:ce:bc:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c3bc03f6cb72ee344d6ccb6a4a8ac60849003f
Validity
Not Before: Jul 31 06:35:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd6fa0c94f6563f9629886e190583545bb2a06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:14:dd:46:e6:08:a2:dc:ed:7c:78:76:4b:
c2:36:67:0b:0f:f9:73:7f:ab:30:6c:a6:6b:ad:81:
7b:ec:00:84:6a:79:24:49:05:67:7d:41:13:bc:58:
d8:59:e2:7f:67:ba:0e:f1:da:02:3f:c4:58:66:b6:
a5:13:80:d7:da:6a:f6:56:c1:ea:90:26:a0:34:0a:
2a:1f:97:19:f1:8b:40:4f:47:ed:71:08:18:47:69:
92:22:0c:47:72:12:07:ef:cc:ff:3c:d9:38:67:b4:
3b:61:4a:15:d5:dc:c0:a0:3f:61:fc:40:97:14:a9:
fa:19:08:95:97:db:26:b1:38:a6:9f:e0:60:b7:1b:
95:6b:6e:c1:33:35:9e:60:6c:3a:18:1d:eb:18:2f:
6c:9a:e0:bf:cf:2b:13:ec:cb:0c:f5:79:14:0b:e3:
49:8e:8d:51:86:71:f0:ca:9f:37:db:ab:03:7e:5d:
bc:03:95:09:09:db:56:d8:25:a2:42:37:7e:70:e9:
f9:b7:66:5c:a3:e5:c4:11:c8:73:e8:4c:71:dc:3e:
a6:48:70:42:1c:ae:7c:d4:a0:f5:57:fa:70:a1:c1:
8b:fe:50:d4:28:37:8c:f2:8f:75:d8:1d:7e:a7:c1:
79:ea:6f:9a:18:bc:7f:5b:64:4b:17:b3:ef:2d:29:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D6:FA:0C:94:F6:56:3F:96:29:88:6E:19:05:83:54:5B:B2:A0:6E
X509v3 Authority Key Identifier:
keyid:03:C3:BC:03:F6:CB:72:EE:34:4D:6C:CB:6A:4A:8A:C6:08:49:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8O8A_bLcu40TWzLakqKxghJAD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2c8b8b-070e-42b3-adbe-de0d5ddef702/1/T9b6DJT2Vj-WKYhuGQWDVFuyoG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2c8b8b-070e-42b3-adbe-de0d5ddef702/1/A8O8A_bLcu40TWzLakqKxghJAD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.252.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8e:db:bb:43:af:c2:c2:6e:d1:4a:c7:20:f8:57:24:a0:be:
89:57:db:dd:eb:d2:4e:5d:f0:ca:9f:55:22:f1:6d:5c:5e:39:
eb:c1:22:26:01:8c:7c:55:b8:17:9a:db:0b:7a:18:0a:0e:c2:
04:ca:78:d6:eb:de:b4:8e:e0:2d:67:df:4c:26:b3:47:d0:a9:
a9:72:65:20:5e:30:fc:8c:e9:22:c4:3b:3e:30:11:e5:39:0e:
77:70:ed:ca:7c:47:9e:ef:45:24:dd:94:ed:0a:13:44:5d:3f:
55:0d:5c:36:cd:52:68:b8:d6:d2:6a:99:38:02:7f:55:af:b7:
65:a5:71:fd:90:e4:19:08:a6:5a:eb:41:f7:7b:df:7e:9b:6f:
ba:b1:b7:ce:a6:21:30:ea:37:83:9e:32:c0:cf:d9:60:52:e7:
9f:54:4d:c7:3c:ee:51:cb:c8:b1:4e:fd:00:1d:cf:04:5b:9c:
e1:eb:a5:68:5f:a7:fa:1f:39:f4:51:24:af:e9:33:61:f5:08:
f1:a1:0a:d5:f2:9c:8d:96:a7:91:6d:d1:22:e2:4f:b5:59:7d:
db:c7:91:6e:fa:d7:5d:93:32:f7:bc:ee:00:49:19:6d:91:9a:
c2:c7:0c:88:eb:12:8c:7f:6a:82:63:4d:1a:67:f4:63:0a:17:
f1:e3:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:55:17 2026 by rpki-client