Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/IbCN0gsOywiVm6KgM0TcHCf0Ub8.roa
File: IbCN0gsOywiVm6KgM0TcHCf0Ub8.roa (raw, json)
Hash identifier: JMA/tpLdoYJDX+WTTPJqUKhZeEB1/cxZOQtXDZy0PL0=
Subject key identifier: 21:B0:8D:D2:0B:0E:CB:08:95:9B:A2:A0:33:44:DC:1C:27:F4:51:BF
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01A0A4CB14791371F6F4302D739E46B942D6
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/IbCN0gsOywiVm6KgM0TcHCf0Ub8.roa
Signing time: Tue 15 Sep 2026 11:19:27 +0000
ROA not before: Tue 15 Sep 2026 11:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200291
IP address blocks: 193.16.224.0/22 maxlen: 22
193.16.224.0/23 maxlen: 23
193.16.224.0/24 maxlen: 24
193.16.225.0/24 maxlen: 24
193.16.226.0/24 maxlen: 24
193.16.227.0/24 maxlen: 24
2a00:fe00:a000::/36 maxlen: 36
2a00:fe00:a000::/38 maxlen: 38
2a00:fe00:a000::/46 maxlen: 46
2a00:fe00:a000::/48 maxlen: 48
2a00:fe00:a001::/48 maxlen: 48
2a00:fe00:a002::/48 maxlen: 48
2a00:fe00:a003::/48 maxlen: 48
2a00:fe00:a400::/38 maxlen: 38
2a00:fe00:a800::/38 maxlen: 38
2a00:fe00:ac00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:cb:14:79:13:71:f6:f4:30:2d:73:9e:46:b9:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Sep 15 11:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21b08dd20b0ecb08959ba2a03344dc1c27f451bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:d8:0a:24:47:79:bb:6a:99:92:fd:db:01:
c6:eb:ca:0b:f4:cf:fa:72:02:52:b8:24:10:78:8f:
b6:7a:fd:bf:5d:bc:2c:dd:f5:73:c1:f1:cd:b4:18:
5c:48:26:2f:0f:c6:2c:a7:9d:64:3c:c2:d5:64:dd:
43:37:14:d0:be:dd:1b:cc:94:10:7e:1e:0c:6b:3b:
87:1b:f6:df:0f:d6:4f:54:e3:d1:4d:db:8f:d5:e7:
44:cc:43:cf:91:d0:a1:a0:6a:f5:19:f7:41:e3:5d:
bc:bf:96:25:bd:1d:c8:7f:ba:8f:9e:84:2e:07:37:
0a:6d:0c:7c:bf:b4:9a:c7:f2:d2:ad:69:a7:63:fc:
78:ec:cf:e4:eb:6b:03:20:81:97:fb:71:7b:9b:c3:
c0:31:0c:0a:68:ba:53:a8:bf:2a:03:dd:12:8d:65:
2c:e8:3e:57:e9:7c:bb:8c:13:7c:00:30:b3:46:17:
47:41:a4:6c:14:08:dd:52:49:c2:14:36:47:f9:32:
82:c6:97:0e:69:ad:36:2d:ae:26:0a:7e:28:11:8a:
b2:cc:91:67:83:1d:4c:92:93:39:5d:6a:ea:6c:29:
4b:c1:83:89:7c:39:e9:3a:6b:68:46:3c:8e:b2:a3:
0f:cc:81:fc:7c:68:8a:6a:b6:25:cb:df:2b:9d:a6:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:8D:D2:0B:0E:CB:08:95:9B:A2:A0:33:44:DC:1C:27:F4:51:BF
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/IbCN0gsOywiVm6KgM0TcHCf0Ub8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.224.0/22
IPv6:
2a00:fe00:a000::/36
Signature Algorithm: sha256WithRSAEncryption
81:de:c9:47:36:38:37:60:9f:26:cd:9b:31:7b:06:89:ec:a4:
e9:dd:33:2e:10:74:3f:44:cc:e5:57:b5:57:88:28:1c:3d:44:
e2:ec:76:91:ae:e1:3e:97:e3:5e:cb:db:99:75:9b:65:0b:b6:
39:b5:85:46:6c:ea:e3:5b:36:7d:84:9f:97:69:2f:df:1b:02:
99:13:fb:17:02:95:50:8d:ed:d6:9f:a5:a9:83:9d:72:40:84:
10:62:50:07:86:b8:7a:29:2c:50:b0:b7:5a:cd:27:b3:c6:86:
f1:f4:dd:0a:85:33:73:3b:cd:08:63:44:fe:cb:c3:f6:64:26:
fb:2f:a8:c5:fb:02:48:8b:85:ac:e9:55:1b:d1:51:a8:39:81:
d2:cc:67:20:4b:bd:68:6c:f5:7b:88:5d:93:fb:cc:39:5d:43:
ae:fc:ac:19:f6:9f:3f:ef:f0:5d:75:d9:92:a2:90:bd:5f:d9:
b1:d8:21:51:3a:4e:c3:e8:36:f6:c5:67:d0:10:38:77:20:e3:
4c:75:c2:31:01:16:1c:3c:ae:64:a8:f1:99:c8:d6:54:c4:8c:
69:59:f4:79:cb:4d:83:50:3c:42:e8:88:4f:57:bd:08:20:0d:
48:85:7b:74:eb:64:23:fa:ea:0e:20:38:6d:f4:ca:4a:e8:7d:
a4:ee:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:55:17 2026 by rpki-client