Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uskH0neNbJdN-zGb60axPcYmPyw.roa
File: uskH0neNbJdN-zGb60axPcYmPyw.roa (raw, json)
Hash identifier: CzDpyvuCpLSbl1f6DIyY6H0a96h5LHGKhQo0Tt0CxS4=
Subject key identifier: BA:C9:07:D2:77:8D:6C:97:4D:FB:31:9B:EB:46:B1:3D:C6:26:3F:2C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EA69087ACF129155D625ED3A5E401EDA7
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uskH0neNbJdN-zGb60axPcYmPyw.roa
Signing time: Mon 08 Jun 2026 09:29:10 +0000
ROA not before: Mon 08 Jun 2026 09:29:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 193.9.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:90:87:ac:f1:29:15:5d:62:5e:d3:a5:e4:01:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 8 09:29:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bac907d2778d6c974dfb319beb46b13dc6263f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:57:b1:ae:93:4b:38:99:fd:6b:c5:eb:94:
e7:f7:5b:6f:06:51:f1:9c:f8:da:f9:c5:37:cb:2e:
04:4d:3e:1b:76:52:23:19:7b:4e:6c:f8:f8:cc:b8:
3f:6e:b6:ea:5c:60:b1:dd:6a:25:20:4a:0c:2a:e9:
8c:55:a0:3d:20:d9:73:2e:44:09:a1:5d:02:19:5f:
a7:16:fe:e6:88:e0:81:d7:7e:fe:29:d8:6c:55:c7:
d4:ef:a9:9f:45:79:e4:1d:30:bc:75:a3:86:0a:89:
78:95:fc:0a:8f:dc:38:08:c4:1b:16:6f:c8:6f:35:
3d:b2:ec:57:b4:65:97:85:bf:5b:63:b2:d4:28:4a:
de:37:7c:5f:60:fa:d6:76:54:a0:35:eb:bf:c1:db:
9d:74:12:a4:e2:18:2a:a0:17:5b:89:6e:43:17:c8:
86:60:bd:b0:ca:d9:f8:60:66:54:fc:71:2e:fc:20:
bf:49:eb:fa:4d:d5:11:22:a6:d6:0c:0f:70:05:19:
00:07:74:ba:0a:01:21:f4:3e:b1:e7:c6:77:ec:a8:
51:f5:b6:c4:ad:e2:54:72:f2:6e:01:46:da:2e:44:
a4:87:91:32:4e:51:77:9f:a2:38:1a:ea:a3:a1:1d:
82:fa:c1:8a:85:dd:51:b4:c7:a1:d9:d1:94:00:bd:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:07:D2:77:8D:6C:97:4D:FB:31:9B:EB:46:B1:3D:C6:26:3F:2C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uskH0neNbJdN-zGb60axPcYmPyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.16.0/24
Signature Algorithm: sha256WithRSAEncryption
39:80:86:c7:3c:30:01:32:65:38:25:11:39:0e:3b:cb:4e:bc:
72:63:7e:b7:3f:5a:5f:ce:7b:56:fa:e9:a6:06:b8:20:80:57:
3b:a0:fd:31:16:74:3f:8e:a8:0a:b2:e6:2f:35:cd:82:e0:ab:
fb:a0:02:a9:95:a0:a7:6c:1a:ca:91:be:16:5b:1b:78:d7:52:
57:cd:60:85:e5:73:72:ad:33:e9:a9:ff:04:24:0f:43:3e:2f:
35:ad:20:bb:3f:56:be:af:90:1a:69:db:e6:58:72:f4:5f:f2:
28:1e:47:2f:18:5a:b7:3a:4a:b1:7e:2a:26:a4:22:b2:50:39:
e5:26:e8:9b:8e:05:e7:af:24:f5:2c:70:69:e4:cf:1c:2a:9c:
6f:18:77:41:c3:5a:21:64:69:aa:b6:da:a7:4a:4e:23:d7:ef:
60:87:37:ec:36:3f:db:ad:c8:82:2e:42:6a:1b:f3:7a:81:7f:
22:6a:2d:1b:69:71:f4:4b:c6:52:28:c3:71:b4:9f:4d:e4:1e:
68:60:8e:8e:d8:b2:4a:1d:e7:c8:28:2b:af:aa:63:ec:0e:5e:
33:4f:82:fb:8d:71:ee:0d:bf:22:cb:90:3f:28:88:8e:45:9e:
6f:3f:2b:30:af:67:60:f0:a1:ed:95:09:f9:67:09:bd:8a:76:
5d:7c:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:40 2026 by rpki-client