Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/toIwvzDtnMcr8Vr654lueB2nW5c.roa
File: toIwvzDtnMcr8Vr654lueB2nW5c.roa (raw, json)
Hash identifier: L7+3Y6vOhJhPEyX8n5fzWSUXTONaoyZXyjV+eIZHIak=
Subject key identifier: B6:82:30:BF:30:ED:9C:C7:2B:F1:5A:FA:E7:89:6E:78:1D:A7:5B:97
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01A0384CBA7B38504C40A1BC422030A50655
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/toIwvzDtnMcr8Vr654lueB2nW5c.roa
Signing time: Tue 25 Aug 2026 09:42:27 +0000
ROA not before: Tue 25 Aug 2026 09:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 131678
IP address blocks: 193.42.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:4c:ba:7b:38:50:4c:40:a1:bc:42:20:30:a5:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Aug 25 09:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b68230bf30ed9cc72bf15afae7896e781da75b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:3a:c6:ef:0c:91:0e:9f:44:3e:b6:a9:e9:
94:2a:e7:59:d7:59:cb:bf:57:dd:5c:1a:82:6f:49:
3e:4d:74:6c:2a:cc:1a:a5:d0:0d:8e:7a:b7:e8:4d:
16:62:f8:6c:61:27:dc:10:cd:c1:cb:66:42:8f:34:
8a:f2:97:f6:dd:55:da:7b:99:55:ba:2b:94:c4:71:
78:f6:bd:48:2c:7a:7c:8f:c4:46:61:0b:5a:6c:e7:
5a:22:d8:ef:0e:f3:40:39:e3:c7:81:75:04:93:fa:
ce:dd:e7:83:eb:91:f3:ea:f8:ce:8d:69:8b:12:1b:
11:62:4e:24:71:a9:3c:b0:77:79:a7:b7:cc:d2:f1:
04:a1:e2:5f:3c:e6:81:04:9d:78:ff:9b:d0:23:22:
75:01:d3:9d:c5:32:7d:6d:d6:76:44:e8:ac:39:90:
76:12:8d:01:bf:77:ba:ca:ad:55:f6:6e:53:7f:cc:
4f:af:fa:9c:57:46:ae:2e:fa:84:29:d5:88:9c:4e:
c0:36:f4:28:74:61:47:41:57:95:57:f8:bb:4c:44:
17:eb:0b:4d:93:ed:76:28:83:41:90:a1:aa:7f:83:
2d:45:9c:3c:cf:f8:e6:36:df:49:75:77:4f:62:5f:
6c:fe:d0:71:14:5d:55:79:99:df:3f:53:9c:5e:bc:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:30:BF:30:ED:9C:C7:2B:F1:5A:FA:E7:89:6E:78:1D:A7:5B:97
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/toIwvzDtnMcr8Vr654lueB2nW5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.43.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b0:10:8c:48:30:c1:22:e4:87:31:a7:ed:3e:29:1a:7d:4a:
cb:57:cf:ea:fc:24:e1:1f:36:ad:02:e2:18:03:59:3c:c2:84:
c2:b8:a2:e9:b4:fd:62:a8:1c:81:64:6e:bf:5f:af:90:d5:0a:
09:2c:00:b6:0e:de:9d:b4:3f:cc:f0:fb:2a:84:1e:75:14:1e:
fb:3c:4e:cd:58:2e:31:cf:fe:8d:ff:43:95:91:df:1c:65:c0:
57:88:7a:89:c8:f8:13:06:ac:c3:8a:51:1b:23:05:fd:73:6d:
8b:06:2c:55:8f:ff:97:99:dd:db:75:01:f1:b9:4b:dc:65:73:
e5:2f:62:3e:c4:c3:03:10:38:66:2d:42:1a:48:ad:17:36:68:
bf:fa:f8:47:05:f4:c5:0e:f2:05:04:bc:c1:45:06:bf:48:78:
d2:7e:7f:ed:68:f4:a1:ce:e2:8f:fe:b9:2c:ff:49:f0:0d:d9:
c7:82:b1:42:ee:28:9b:39:8e:58:6b:57:28:08:ce:1b:45:ec:
72:b4:e2:77:e0:b1:8d:d6:8b:9f:09:02:e0:67:86:7c:a4:57:
4f:66:d2:c2:74:11:a2:1c:16:3c:7a:be:80:5a:3a:a5:e2:e7:
ce:04:df:b4:be:e2:80:1c:a5:da:94:7e:4d:37:2c:32:b4:7f:
d1:30:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:15 2026 by rpki-client