Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RMrflS07rPNmeJPYLi05-pXKMXM.roa
File: RMrflS07rPNmeJPYLi05-pXKMXM.roa (raw, json)
Hash identifier: 4LJyTgHGHHJq4tuCN9hQDdrgUKwIzUqKbhUlelITHwk=
Subject key identifier: 44:CA:DF:95:2D:3B:AC:F3:66:78:93:D8:2E:2D:39:FA:95:CA:31:73
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FF5956D68C795E8DCC8B046FF0C07BD6E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RMrflS07rPNmeJPYLi05-pXKMXM.roa
Signing time: Wed 12 Aug 2026 10:47:18 +0000
ROA not before: Wed 12 Aug 2026 10:47:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:95:6d:68:c7:95:e8:dc:c8:b0:46:ff:0c:07:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 12 10:47:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44cadf952d3bacf3667893d82e2d39fa95ca3173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:4b:eb:cd:74:48:85:51:ac:94:1f:fe:ec:
72:9d:db:56:b8:2e:fa:3a:7b:ce:c5:ea:87:5c:e5:
1e:71:a3:38:5c:71:2e:39:2b:ab:0b:1d:39:81:e5:
21:2a:a7:fb:e1:e3:6d:b0:d1:b9:0e:f4:70:08:c6:
40:21:84:cc:45:4a:c9:bf:d0:f5:d5:4b:99:12:65:
c5:2d:4d:69:2f:38:20:1a:d7:d0:c6:1a:a1:44:53:
ec:49:b3:18:78:ed:84:50:1d:5b:a5:df:0d:39:0f:
d3:a2:f0:4b:a1:c8:6e:f0:e6:9e:72:0c:72:11:7f:
8f:0a:9a:11:77:fa:19:69:e1:3d:28:69:a6:1e:45:
29:f5:42:44:cc:8c:8f:b6:d4:5b:d7:f7:05:f7:12:
49:d7:97:68:0c:4f:b1:f2:65:ee:ee:5c:40:ed:1a:
b3:44:91:52:b1:7a:58:e1:22:4e:86:ea:95:c0:79:
27:13:f3:8c:7e:93:87:d1:9a:b0:40:b4:93:a2:b0:
33:5b:e7:27:44:7c:a9:ca:d4:7c:28:11:fa:1f:61:
fd:0f:7c:47:d1:e5:27:07:83:dc:f8:96:f0:2c:f5:
4a:95:49:27:db:5b:14:fd:4e:dd:42:aa:63:77:42:
ee:c9:2e:e5:cb:f5:bf:d0:1e:2e:8f:44:1a:d8:08:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:DF:95:2D:3B:AC:F3:66:78:93:D8:2E:2D:39:FA:95:CA:31:73
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RMrflS07rPNmeJPYLi05-pXKMXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
27:d0:2b:ba:c6:ac:1c:c1:95:5c:9d:6b:5d:fd:87:e2:07:53:
da:d6:b8:2b:c1:44:2d:b5:7e:53:8e:42:6a:60:a5:05:84:82:
0d:11:85:5d:af:2d:84:6d:36:7d:da:5b:4a:53:29:4a:a9:9c:
3e:4e:44:c0:0d:6b:6f:d9:7b:22:8f:f2:3a:d2:c7:33:6c:75:
2d:4c:a8:9e:1b:24:6e:b5:d3:cd:39:7e:f7:b1:2a:11:13:da:
ba:f1:f9:08:9d:28:e6:6b:96:6b:8d:cc:ad:cc:90:bf:66:fa:
39:eb:24:89:3f:31:f2:42:22:07:e0:61:b4:f0:88:a4:d0:d1:
db:7a:2d:34:0f:c2:f5:ee:9b:20:dc:7e:94:b4:0e:9c:8d:cc:
03:54:90:16:c7:b2:f0:b2:ff:9a:af:37:2f:bc:97:71:5c:26:
4f:8a:d2:b7:22:39:b4:7e:65:b4:0a:5e:96:a3:2d:ce:45:47:
53:1a:52:41:69:45:5e:04:75:2b:47:1f:b2:06:b5:ec:3f:15:
dc:fe:8a:93:1e:3a:8c:ef:ef:4e:70:0b:4b:cb:47:91:38:be:
64:de:52:f6:63:1b:da:23:21:a6:82:7b:ff:5b:75:a5:d0:f7:
0a:bd:b3:f6:20:fd:a2:85:15:85:9d:74:3f:2f:1f:af:35:18:
ce:05:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:54:58 2026 by rpki-client