Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/sLcjP0MexoJKRfJdT7_XekWEx5g.roa
File: sLcjP0MexoJKRfJdT7_XekWEx5g.roa (raw, json)
Hash identifier: 81Gv1gjQe+8o8rD8eLhttbKdZxs2A/IOu9hlnmcGBtM=
Subject key identifier: B0:B7:23:3F:43:1E:C6:82:4A:45:F2:5D:4F:BF:D7:7A:45:84:C7:98
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019D9FE33419DFE8E9BF8FEF529ED8B82624
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/sLcjP0MexoJKRfJdT7_XekWEx5g.roa
Signing time: Sat 18 Apr 2026 09:19:20 +0000
ROA not before: Sat 18 Apr 2026 09:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200291
IP address blocks: 193.16.224.0/23 maxlen: 24
2a00:fe00:a000::/36 maxlen: 36
2a00:fe00:a000::/38 maxlen: 38
2a00:fe00:a000::/46 maxlen: 46
2a00:fe00:a000::/48 maxlen: 48
2a00:fe00:a001::/48 maxlen: 48
2a00:fe00:a002::/48 maxlen: 48
2a00:fe00:a003::/48 maxlen: 48
2a00:fe00:a400::/38 maxlen: 38
2a00:fe00:a800::/38 maxlen: 38
2a00:fe00:ac00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:e3:34:19:df:e8:e9:bf:8f:ef:52:9e:d8:b8:26:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Apr 18 09:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b7233f431ec6824a45f25d4fbfd77a4584c798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:72:93:dc:b6:5f:8a:be:ab:c4:6e:20:4b:
28:5f:b2:2b:69:40:59:0a:b1:81:64:e7:14:0d:19:
10:73:73:d0:54:ed:55:b7:ce:dd:77:d8:61:d1:ac:
f5:d8:ea:51:86:94:96:e7:1e:bc:e3:ab:23:20:44:
ca:ec:cb:70:8a:84:b9:ea:21:e8:fd:97:09:28:21:
89:f1:19:03:48:22:60:6e:be:b5:96:9b:81:e8:04:
09:a5:6b:bd:c5:78:62:03:9e:c7:4f:49:7d:e6:a4:
74:ae:e4:53:f6:de:ee:e7:7c:04:a7:f0:77:0f:e3:
d5:7d:ff:20:a2:ea:96:cc:29:dc:f4:ec:bc:fc:e3:
53:7f:b9:75:30:ea:1b:4a:3a:5f:16:1c:cf:ed:f6:
19:e8:69:76:ab:96:51:8e:e7:3b:d1:9a:e8:2e:88:
45:16:12:ae:6d:a3:e4:0b:4a:28:56:ce:5a:5e:4b:
3b:b2:b1:c1:7e:77:a4:24:c8:53:75:76:45:85:e3:
0d:16:45:93:a1:dd:d4:48:f6:76:b1:71:c7:f4:39:
59:27:34:0a:d2:e6:59:18:ae:58:27:bc:05:6e:c3:
f6:3e:1a:99:01:69:61:b7:eb:f6:17:d6:c6:17:97:
ff:48:00:d6:30:5d:8f:a1:ed:d6:14:6a:93:bf:f8:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B7:23:3F:43:1E:C6:82:4A:45:F2:5D:4F:BF:D7:7A:45:84:C7:98
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/sLcjP0MexoJKRfJdT7_XekWEx5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.224.0/23
IPv6:
2a00:fe00:a000::/36
Signature Algorithm: sha256WithRSAEncryption
98:f5:0e:aa:58:06:2b:8a:aa:16:df:2e:80:d0:37:36:cb:ad:
27:f9:6c:d4:43:f2:bc:d7:82:e4:e9:a4:16:3f:05:c2:e2:f7:
fc:4b:15:d4:1a:e5:55:4b:70:c6:c7:19:54:8e:fc:a9:9b:f0:
22:f1:83:64:ee:11:c1:3d:62:c8:69:d8:05:f8:d5:ea:d1:02:
7f:3b:4c:69:5e:8e:11:50:82:31:01:6e:51:3e:34:cf:61:94:
07:ec:4a:67:42:4c:cf:47:cb:92:50:9d:45:cd:98:9a:f8:42:
66:f9:f8:b7:51:c0:a7:4d:4b:d0:42:c8:30:37:71:23:31:2e:
c5:20:08:86:9f:21:ff:d1:8e:b8:c6:88:4d:d3:f3:77:d3:ef:
18:ab:72:f9:15:61:14:20:41:f2:30:f0:09:76:c8:97:54:48:
7f:28:12:76:fd:30:01:51:c2:a5:37:16:20:75:55:be:18:6c:
4f:69:c4:c0:9e:ff:d1:a4:c1:91:06:b9:29:2a:8e:d7:23:79:
85:08:da:cb:4f:6f:67:72:8e:d1:10:2b:74:f5:74:41:dc:ee:
5a:12:d5:8d:24:9f:b0:78:57:1f:2d:cf:c8:cc:bc:56:85:1c:
e0:f6:53:c6:a8:36:8c:c3:f0:0e:d0:0c:d2:1a:ba:e6:42:b8:
76:09:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 14:49:02 2026 by rpki-client