Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/dUaacGCz13O8mwDRkLQ5vwgXcZw.roa
File: dUaacGCz13O8mwDRkLQ5vwgXcZw.roa (raw, json)
Hash identifier: 7Istxql6dso4eiRf+0awNNeqAEJpy1igpjA10pd+/TM=
Subject key identifier: 75:46:9A:70:60:B3:D7:73:BC:9B:00:D1:90:B4:39:BF:08:17:71:9C
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 019EB61E2D7090EB8804CCAE72E5074582C6
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/dUaacGCz13O8mwDRkLQ5vwgXcZw.roa
Signing time: Thu 11 Jun 2026 09:58:11 +0000
ROA not before: Thu 11 Jun 2026 09:58:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199771
IP address blocks: 188.94.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:1e:2d:70:90:eb:88:04:cc:ae:72:e5:07:45:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Jun 11 09:58:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75469a7060b3d773bc9b00d190b439bf0817719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:0c:03:ac:1c:e7:25:7d:7d:4b:a8:3b:8c:
67:96:d8:f3:b0:52:96:be:5e:04:78:e0:e7:48:7e:
0e:3b:a5:5a:a0:10:4c:93:12:b0:15:99:56:92:39:
fd:44:20:95:71:35:83:cb:ea:0a:e1:f7:c8:08:80:
e9:9d:da:1c:9b:14:aa:a8:41:d3:d3:ac:c1:ae:e1:
76:a9:fd:fd:db:0a:c2:35:37:8e:8f:d5:f1:04:01:
d8:29:49:7b:0b:e1:76:ba:36:85:9c:34:8a:fa:cf:
7f:b7:2b:60:85:26:3c:21:2f:9f:d3:1f:36:09:2a:
fa:13:21:65:6b:14:9b:49:aa:d3:56:41:d5:53:54:
00:3b:b8:06:af:83:3d:cc:86:98:6d:6d:88:6c:46:
b1:8c:90:4e:45:db:7c:d3:77:2a:50:66:cb:0f:35:
58:51:32:b8:da:a4:4f:a4:99:b4:f5:fd:c4:34:33:
d8:34:0f:4d:83:07:5c:7b:58:7d:fb:1f:21:1f:da:
1f:23:79:f9:bd:5a:5f:00:ca:25:69:9a:db:ed:0c:
15:45:9c:a2:6c:db:79:f5:81:df:13:6d:72:b2:5b:
7d:4d:16:f2:1c:26:08:55:ce:e0:d7:7c:ac:e2:00:
41:8d:2f:b1:55:ac:a0:54:41:01:eb:5e:02:91:c6:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:9A:70:60:B3:D7:73:BC:9B:00:D1:90:B4:39:BF:08:17:71:9C
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/dUaacGCz13O8mwDRkLQ5vwgXcZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.47.0/24
Signature Algorithm: sha256WithRSAEncryption
46:af:63:a0:24:ad:43:e6:a5:41:53:6b:0f:8e:7d:af:9a:56:
88:bd:70:48:af:f7:a8:f7:56:d6:73:66:2e:1d:f4:ca:09:ac:
6b:e2:ce:39:35:2a:17:0e:ab:09:90:e6:c0:60:78:33:06:a4:
0f:46:95:61:63:9c:b5:de:bb:8b:8a:66:a5:bb:1e:d2:2f:d0:
a5:ed:38:47:97:ae:1e:40:89:c1:cc:0b:74:73:0a:4e:f3:91:
32:e5:33:d1:22:71:a5:ff:fc:24:69:49:a9:73:04:dd:9c:77:
09:58:30:87:8b:45:49:ef:d2:54:43:aa:1b:46:d9:ef:6f:53:
40:54:f7:37:8f:7b:e3:29:db:d9:59:1a:26:74:ab:63:04:bb:
7b:96:6d:b5:76:1a:f7:bb:14:9f:67:76:2c:a0:19:08:85:56:
92:b0:bc:cd:ca:87:d7:85:ea:d1:4b:14:6b:c3:01:0a:54:82:
ba:69:e8:42:90:8c:c1:25:f9:05:c7:75:b7:5b:b0:19:e5:52:
6e:2e:4f:97:64:f5:c6:d0:d6:06:1e:02:25:e4:33:e3:8b:bc:
92:be:47:79:4a:2e:f3:2e:cd:1e:97:80:3e:c3:73:98:6d:52:
45:9d:c1:bb:ad:9f:8d:42:60:8b:99:df:f3:6e:a8:06:c9:89:
ff:a0:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:23 2026 by rpki-client