Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/If7ufj-_b2EUoFRKwbI33h0oDZE.roa
File: If7ufj-_b2EUoFRKwbI33h0oDZE.roa (raw, json)
Hash identifier: aOxlUZckeVrxmkXquW/EMNwg7hPa/yLX7xjosCstJGg=
Subject key identifier: 21:FE:EE:7E:3F:BF:6F:61:14:A0:54:4A:C1:B2:37:DE:1D:28:0D:91
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 01A153FE5348CD2AF61F75BB19A6AD9209ED
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/If7ufj-_b2EUoFRKwbI33h0oDZE.roa
Signing time: Mon 19 Oct 2026 11:48:58 +0000
ROA not before: Mon 19 Oct 2026 11:48:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200602
IP address blocks: 193.143.18.0/24 maxlen: 24
193.143.72.0/24 maxlen: 24
193.143.75.0/24 maxlen: 24
193.143.76.0/24 maxlen: 24
2a0f:8e40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:fe:53:48:cd:2a:f6:1f:75:bb:19:a6:ad:92:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Oct 19 11:48:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21feee7e3fbf6f6114a0544ac1b237de1d280d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:27:60:da:4c:da:e0:6c:2e:3d:d4:c1:0d:
ba:f4:51:28:a5:3e:f0:35:4b:50:d5:22:48:8f:9c:
28:cb:95:81:1b:83:d4:13:c9:7e:b1:f5:0a:54:b7:
c7:53:ce:a3:fb:1e:c7:b1:1a:cb:b9:ab:3e:d3:32:
91:18:f3:85:c1:58:99:ce:6b:59:26:0d:48:c2:e0:
2e:79:51:c6:cd:48:8a:46:f3:6b:fb:4b:66:c7:56:
b2:11:92:a3:cb:ad:d1:30:fc:6c:13:5f:4e:b3:c9:
17:f5:8b:f5:22:fe:71:c6:4f:f8:c8:b7:83:07:5e:
4c:a8:e6:90:ef:18:10:dc:0e:e3:17:b1:79:aa:e2:
ee:71:68:93:71:86:b4:c2:f3:7d:01:07:39:d2:d7:
0d:0b:51:d0:c9:cb:96:6d:ed:6a:b0:62:c0:fa:41:
5a:5e:1c:d9:9a:4d:38:f3:ce:07:20:9b:c6:8f:fd:
fa:2c:13:9d:b0:b7:46:b2:45:02:01:ff:ba:20:0e:
6c:11:bb:f8:15:30:57:0f:50:08:0f:de:e2:d5:73:
00:f5:26:ae:09:d8:36:39:02:c1:2c:55:14:ed:9b:
6b:c9:1b:3d:e2:80:ec:cc:73:38:fa:c5:80:8f:cc:
f1:0d:ee:20:03:7d:fb:8e:78:a4:47:f5:f1:44:c5:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:EE:7E:3F:BF:6F:61:14:A0:54:4A:C1:B2:37:DE:1D:28:0D:91
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/If7ufj-_b2EUoFRKwbI33h0oDZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.18.0/24
193.143.72.0/24
193.143.75.0-193.143.76.255
IPv6:
2a0f:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
19:69:1f:4d:10:17:28:47:5e:13:a5:19:d2:ef:2c:1f:3f:9a:
91:23:3a:a2:73:a7:f2:e8:16:37:fa:4a:74:fd:22:6d:41:9d:
e6:78:84:04:e5:06:14:5e:e9:1b:44:13:25:86:27:df:eb:04:
5f:3a:14:2d:be:36:5b:db:28:8e:fc:33:b2:af:c3:9f:e3:a7:
f4:7e:e9:78:d2:85:72:c0:63:98:25:e7:e6:cb:9c:2a:bb:87:
13:76:b6:d8:19:9b:55:e8:46:5a:c9:fd:df:d8:f0:05:a8:d7:
3f:60:3b:be:cf:9b:c7:76:a0:1a:50:31:eb:59:a8:fc:c7:79:
8f:75:36:fa:43:59:82:77:00:c2:89:73:c2:9a:7c:8c:b0:68:
17:17:b3:f4:91:ba:ed:84:62:e7:fd:57:43:2b:1c:7a:86:db:
fd:47:e1:53:bc:53:e1:d7:ed:40:da:2b:b5:49:3c:16:31:ed:
fa:d6:bc:c9:7d:bf:82:93:03:f9:57:15:e2:d9:10:7a:dc:42:
a3:d3:15:51:cb:9a:1a:05:d9:87:fb:1f:ee:21:b5:14:45:d0:
89:c2:16:5e:2f:38:7f:d0:0c:47:05:f3:64:57:55:9f:21:11:
94:6f:7c:c2:58:80:91:28:1d:64:42:33:fe:3a:d9:ec:c1:67:
87:c4:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:43 2026 by rpki-client