Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/jwzq316YRIYxB2dWQOOXkN8ZJ50.roa
File: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (raw, json)
Hash identifier: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=
Subject key identifier: 8F:0C:EA:DF:5E:98:44:86:31:07:67:56:40:E3:97:90:DF:19:27:9D
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0A42475140C20371779978015D4444F64
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/jwzq316YRIYxB2dWQOOXkN8ZJ50.roa
Signing time: Tue 15 Sep 2026 08:17:27 +0000
ROA not before: Tue 15 Sep 2026 08:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 193.219.7.0/24 maxlen: 24
2a03:ec41:4::/48 maxlen: 48
2a0c:56c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:24:75:14:0c:20:37:17:79:97:80:15:d4:44:4f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 15 08:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f0ceadf5e9844863107675640e39790df19279d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:26:30:fd:45:77:ec:9d:03:d1:14:06:f3:24:
78:62:7d:7c:05:c9:b9:c9:20:76:8d:2b:05:2e:15:
74:6c:0d:c6:c7:74:27:59:92:c9:cf:10:55:e0:1a:
1d:fe:98:e6:c5:71:e8:24:ed:87:c3:c7:c7:94:c8:
2d:98:50:70:e0:85:57:4d:9a:50:3f:68:4e:34:69:
c1:f7:dc:54:15:b0:0d:7b:79:14:fc:e1:e5:42:a4:
08:4e:91:2c:70:c1:04:76:f1:e9:93:5d:0e:1a:a3:
8c:75:8b:b2:07:68:75:7f:31:7a:27:7e:67:9c:91:
cc:82:16:46:e6:e1:53:c7:3a:b4:92:e0:9d:01:f1:
c8:64:ee:8d:d1:79:34:b3:03:96:79:0c:0c:a9:46:
43:21:e8:9a:c3:c4:9f:16:a0:2e:af:c1:64:0c:58:
b3:dd:66:e4:5e:ee:f8:ef:38:a1:62:e8:91:58:3a:
51:d3:44:57:e5:2c:31:2b:b3:50:fe:74:d8:a0:9c:
49:56:09:d0:60:64:66:23:45:cc:99:98:bb:24:a5:
7f:cb:94:af:e3:a0:b7:24:28:f4:7b:99:e1:35:0e:
14:2e:c9:20:0f:ea:16:ab:f0:76:8a:19:37:1d:6a:
07:85:7d:0f:2e:05:0a:9b:63:5f:5b:90:f5:25:2f:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0C:EA:DF:5E:98:44:86:31:07:67:56:40:E3:97:90:DF:19:27:9D
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/jwzq316YRIYxB2dWQOOXkN8ZJ50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.7.0/24
IPv6:
2a03:ec41:4::/48
2a0c:56c0::/48
Signature Algorithm: sha256WithRSAEncryption
56:73:48:13:bb:9a:8e:d9:18:25:67:ac:78:09:d8:ed:6b:3a:
4a:78:ea:78:71:43:e5:d3:e5:de:db:b7:1f:e7:49:75:e2:15:
4c:77:df:70:18:cb:65:3f:bc:58:43:ab:b3:39:0a:5a:2c:87:
8b:fa:7a:54:5f:37:d5:98:2e:8b:4e:9b:14:15:e3:b3:ae:e0:
ce:da:1e:d8:de:28:ac:2c:b3:88:0d:22:54:96:8d:e7:37:14:
a3:83:67:c1:c4:36:38:76:ec:d1:d0:50:7d:b4:17:da:03:67:
95:b9:92:59:f1:1a:15:0c:12:34:30:45:a7:8e:cf:e8:03:aa:
61:2a:af:52:6e:fc:43:57:8b:6a:ea:94:17:c2:b3:b0:92:98:
64:43:92:52:f4:55:91:f4:04:91:e1:c0:23:e5:0e:ce:af:8b:
22:2f:b5:3e:86:48:5a:f2:fd:9d:91:18:a9:f8:79:84:a9:6c:
f2:c1:62:11:8b:ff:4b:f1:43:7b:4b:0b:8a:4b:fd:db:ea:ce:
b5:b5:d7:f8:24:af:91:38:4f:42:ab:48:8b:8e:b3:1f:44:23:
ca:df:68:2e:08:e8:05:39:be:d8:f9:2b:00:bc:2d:4d:ae:9e:
8b:01:06:cf:a5:56:18:85:6a:4a:d8:28:f6:8d:05:82:ea:fb:
83:ed:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 05:27:47 2026 by rpki-client