Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/RuW8-PgIfibhBoqNocX_t7ptPOE.roa
File: RuW8-PgIfibhBoqNocX_t7ptPOE.roa (raw, json)
Hash identifier: zV6LrJuAjMC8MbTSFPKsE8qN0Xu/5M2QJ39L5RQKY/0=
Subject key identifier: 46:E5:BC:F8:F8:08:7E:26:E1:06:8A:8D:A1:C5:FF:B7:BA:6D:3C:E1
Certificate issuer: /CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Certificate serial: 019EA7FFA77E6ABB8FFAA56ED4077F8E4C88
Authority key identifier: 3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/RuW8-PgIfibhBoqNocX_t7ptPOE.roa
Signing time: Mon 08 Jun 2026 16:10:09 +0000
ROA not before: Mon 08 Jun 2026 16:10:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21449
IP address blocks: 193.134.176.0/20 maxlen: 24
193.134.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:ff:a7:7e:6a:bb:8f:fa:a5:6e:d4:07:7f:8e:4c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Validity
Not Before: Jun 8 16:10:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e5bcf8f8087e26e1068a8da1c5ffb7ba6d3ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:6b:e7:33:9d:07:a2:b4:75:4f:83:ac:c1:
03:0d:20:0e:ce:c3:55:c2:d0:1f:e8:e3:20:70:49:
c9:a0:fd:4f:69:e3:1b:f7:59:17:52:67:63:30:16:
27:b2:a8:72:31:a4:29:bb:29:e5:9b:6a:0b:b6:a4:
53:95:83:32:14:aa:7b:a0:4d:de:41:d9:5d:f7:14:
25:aa:ec:df:5a:4f:e9:95:36:c9:83:c2:d2:1a:74:
0d:79:c4:1f:b0:c7:4f:d7:45:82:63:18:74:00:cd:
e0:54:e2:da:0c:a2:db:9c:69:9d:7f:d6:7a:e2:d0:
0f:63:0e:58:39:aa:9a:1d:42:b8:ed:b6:57:c2:39:
67:5f:3d:b7:b2:e4:85:01:23:09:9b:bb:80:96:63:
28:16:96:57:67:33:02:3b:a9:95:69:cd:38:6e:b0:
c1:9e:e3:2e:be:6d:52:ef:63:2d:62:ae:ca:97:78:
23:9a:2a:59:eb:46:40:a3:20:1c:20:2c:40:04:91:
9d:cb:f1:51:14:60:5b:98:74:42:8e:76:56:6a:ad:
f6:3e:9a:c3:0f:3f:70:c7:06:a9:e9:f2:48:60:b8:
76:79:f4:76:5a:3f:b0:83:85:0e:dd:7e:45:70:af:
d3:89:e6:e0:2b:49:e3:8b:f0:0d:63:eb:60:12:8d:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:BC:F8:F8:08:7E:26:E1:06:8A:8D:A1:C5:FF:B7:BA:6D:3C:E1
X509v3 Authority Key Identifier:
keyid:3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/RuW8-PgIfibhBoqNocX_t7ptPOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.176.0/20
Signature Algorithm: sha256WithRSAEncryption
04:1c:21:8a:bb:8d:59:5a:17:63:b6:c2:af:ff:bc:59:8e:8c:
e3:f3:a4:52:ea:0e:f0:7f:18:b2:3a:d1:6c:3c:59:dc:c5:91:
ae:59:81:47:40:ca:53:1e:57:9d:89:9f:87:03:94:b6:53:25:
cb:03:42:19:60:85:9a:94:0e:42:c1:45:05:9a:01:68:db:e9:
e0:8a:45:86:3e:89:bc:d3:8f:d6:d4:8a:1c:04:33:eb:dc:5c:
5f:76:4c:0b:9d:68:e0:c9:0d:8f:ec:27:4b:3d:a4:fa:17:ef:
d7:a8:72:c7:0d:cc:24:20:04:81:8d:4d:17:b1:3a:79:4b:40:
45:f9:52:5d:e8:96:7c:7b:8a:51:1f:5d:0f:b1:76:1a:4a:a0:
47:32:4a:02:4e:2d:d9:39:b3:a6:0d:03:c1:ae:98:b0:e7:75:
89:db:14:7c:d0:93:f6:ed:96:cf:8a:9f:db:18:93:88:1a:99:
6e:4f:f1:d4:7b:7a:2e:b0:b9:41:88:b0:fe:8f:03:26:39:51:
95:77:89:3d:c0:88:03:98:c6:f1:b3:8e:f2:7e:e0:04:e5:96:
f5:be:bd:29:3f:03:30:86:d3:f8:37:a8:86:23:e2:0b:27:30:
8d:5b:bd:f1:96:dd:3a:43:50:3e:c0:c3:cf:d3:cf:b5:5b:4e:
f3:16:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:33 2026 by rpki-client