Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa
File: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (raw, json)
Hash identifier: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=
Subject key identifier: D3:70:3A:60:17:C9:92:63:63:AC:B5:2F:74:39:B2:FF:B8:95:DC:AA
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 019F236942891642886548766FF20E4D166F
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13347
IP address blocks: 193.176.98.0/24 maxlen: 24
2a12:f3c0::/29 maxlen: 29
2a12:f3c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:42:89:16:42:88:65:48:76:6f:f2:0e:4d:16:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3703a6017c9926363acb52f7439b2ffb895dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:d9:0e:97:f8:3d:13:84:74:f6:77:dc:4e:
c8:d2:d0:9c:7e:3b:83:a8:f9:c2:9f:ca:c5:56:79:
f1:9b:02:ef:b8:85:1a:14:6c:ca:96:be:09:68:56:
ea:b0:33:c5:42:9c:6a:46:a1:c4:06:92:f9:1a:6c:
92:28:5a:54:cd:58:0f:8c:6f:83:5e:4f:6c:2d:ed:
45:ca:1f:50:8a:30:fa:f1:d4:e0:52:22:55:36:d1:
d7:0b:f9:d7:a4:2b:05:77:65:bc:f5:b0:8f:92:12:
50:d0:7c:8b:03:f9:d7:38:94:cc:9b:3d:b5:23:4c:
30:fe:5e:df:81:08:55:02:8f:32:d3:20:3f:99:1e:
83:34:fb:8a:ab:35:26:23:f4:86:42:ab:52:e8:f7:
39:be:34:14:f6:04:39:64:49:a7:19:ad:fa:04:12:
f3:04:70:dc:2e:3f:76:8e:12:45:ce:7e:68:ff:6b:
9d:e4:e4:a2:11:0c:17:b2:39:a5:18:69:96:a4:78:
a3:14:59:aa:a9:5d:2e:ac:c7:3f:1d:f8:bc:3c:95:
bf:66:58:95:25:56:7e:a3:7b:32:23:8d:4f:9f:e1:
8d:30:70:5c:47:71:40:8c:06:94:76:65:d6:94:18:
81:78:4e:f6:79:f3:3e:61:cd:c5:73:08:8e:99:57:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:3A:60:17:C9:92:63:63:AC:B5:2F:74:39:B2:FF:B8:95:DC:AA
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.98.0/24
IPv6:
2a12:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
93:3b:cf:31:6f:0b:81:88:54:8c:90:ea:68:4e:a0:13:3b:18:
56:e8:96:10:b6:a2:a3:3c:75:dd:04:d7:3f:9d:09:9b:bc:c8:
fc:4f:65:bf:12:1b:92:fe:7c:9f:ae:8e:27:c4:9a:02:91:79:
42:83:c9:07:4f:48:8c:9a:34:38:ce:0a:f1:a5:c5:18:3e:e4:
f9:b2:25:6f:34:e7:21:55:4a:40:40:0a:09:d0:87:a5:e4:bf:
b1:2f:59:de:75:c4:f9:e0:e2:1a:1b:db:f2:1e:77:93:2d:21:
d5:a6:69:ab:ca:29:1a:6b:14:5d:d7:ef:6f:fb:56:c5:66:0d:
5c:d3:b1:c3:32:5e:8f:d6:1d:96:3e:53:a3:7f:cd:de:0b:61:
c8:6e:8a:71:08:cd:39:64:e3:d1:16:cb:d6:4b:38:77:10:be:
eb:c6:e7:0f:65:8a:d7:0a:1e:fb:ac:6c:98:15:2f:aa:27:f5:
f5:a7:43:7f:22:ae:99:76:eb:80:02:c8:81:f6:4a:02:8d:cf:
bb:a6:2f:12:17:4c:f8:d4:34:e6:df:2f:f3:86:e9:32:89:99:
f5:10:07:45:7e:79:ad:fc:4f:89:ac:2e:85:7c:d5:c5:46:99:
8e:1f:1f:08:88:56:da:cd:81:f4:68:a9:d9:47:a4:35:e9:e6:
2d:9a:44:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:12 2026 by rpki-client