Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RWIO1YzOCq1F9DXZeQgGuuGEdQs.roa
File: RWIO1YzOCq1F9DXZeQgGuuGEdQs.roa (raw, json)
Hash identifier: haizETlt6pEJ8pslahYQSbkXa6aAZAU1mYJ1mxOyPPI=
Subject key identifier: 45:62:0E:D5:8C:CE:0A:AD:45:F4:35:D9:79:08:06:BA:E1:84:75:0B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A164A882266486F0C423A54E075F988682
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RWIO1YzOCq1F9DXZeQgGuuGEdQs.roa
Signing time: Thu 22 Oct 2026 17:28:47 +0000
ROA not before: Thu 22 Oct 2026 17:28:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197139
IP address blocks: 194.93.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:a8:82:26:64:86:f0:c4:23:a5:4e:07:5f:98:86:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 22 17:28:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45620ed58cce0aad45f435d9790806bae184750b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:b7:16:66:a2:34:3b:8b:14:8a:3c:4b:3f:
5c:50:aa:12:42:6b:3b:f8:ce:5b:eb:8d:a6:f8:63:
6d:94:ac:f6:9c:c9:92:5c:41:7e:21:c4:55:27:ec:
6f:8b:da:f8:49:d1:e4:19:5e:7b:9b:ad:ae:c4:41:
68:1a:62:9c:ce:ab:11:c1:71:9a:18:b9:99:5c:7d:
30:dd:9f:e5:8a:c1:37:c2:ba:14:93:af:ea:c2:f0:
bf:11:8d:2f:58:3b:3d:ed:c8:49:1a:42:dd:90:cb:
71:53:ba:d6:ce:80:f2:4b:11:bd:f8:73:e9:f4:a3:
d7:d3:59:83:50:e5:35:45:2f:70:64:87:13:83:57:
36:dc:f7:f4:7b:cf:b6:41:a9:84:ca:ca:20:93:ac:
4d:ff:86:53:4c:1a:c6:a4:d1:91:f3:d9:b0:2c:a4:
ce:00:1b:1b:c7:33:15:63:49:00:cf:4f:8d:c9:33:
f1:05:43:fd:e3:e5:16:1c:a2:94:cf:c4:d4:8f:6f:
f2:c8:ec:22:72:36:2d:51:e1:05:8c:02:d2:f3:ce:
b5:80:e3:bb:59:9d:9c:83:06:90:56:f9:8e:6e:46:
63:3d:8e:8e:5d:3b:aa:88:d3:9b:2b:87:20:e5:00:
b6:59:71:fa:83:54:7a:53:de:57:bd:df:f9:89:46:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:0E:D5:8C:CE:0A:AD:45:F4:35:D9:79:08:06:BA:E1:84:75:0B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RWIO1YzOCq1F9DXZeQgGuuGEdQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.3.0/24
Signature Algorithm: sha256WithRSAEncryption
70:32:67:ae:38:f1:e5:a9:b3:32:6a:c7:b8:01:dc:04:eb:a5:
41:e0:d4:19:44:75:59:aa:5c:e2:c0:20:f2:e1:a2:46:cf:4f:
9c:3b:26:47:6d:18:db:e4:2b:3c:5d:75:44:5f:a2:6c:c0:e0:
e9:09:f2:9b:b9:26:3b:e4:e4:36:13:2e:d0:a5:5a:c1:84:a2:
b1:ba:01:a4:ba:57:10:92:b9:d2:c6:67:21:2c:6b:d4:3f:01:
1c:3d:eb:25:b4:09:82:82:38:45:67:f5:f5:31:5e:05:bb:43:
34:e2:5a:83:92:c1:fe:5c:cc:9e:38:fc:86:85:2a:b2:27:79:
1d:29:28:6f:c4:ee:a2:9b:ba:a6:2b:87:2a:87:6c:1a:b8:2c:
e2:ca:08:0d:ca:04:60:6f:57:3f:5c:ef:da:8b:36:d4:95:d4:
2c:7c:44:bc:f5:20:3f:78:8f:39:83:53:9a:17:4d:77:f5:96:
fa:f9:f9:d1:0d:0d:e4:9c:ad:ef:9e:fe:fc:e4:8a:bb:27:55:
aa:d3:df:99:99:fe:7b:3e:e0:e1:e9:f7:00:9f:c3:a8:33:aa:
f7:2d:21:6b:7f:65:50:0b:e6:e9:d5:d6:31:69:34:cf:79:0c:
bd:9a:8b:b6:80:bf:4f:d4:7b:53:e9:9f:02:c1:50:c3:2e:da:
d1:c0:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:28 2026 by rpki-client