Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dJGN1_UcOShBQaPUt1lk59Alg7w.roa
File: dJGN1_UcOShBQaPUt1lk59Alg7w.roa (raw, json)
Hash identifier: uKBpsBjAvrTGL44aDLuYKZ7XkF6YIF9rTwG4tla7xjM=
Subject key identifier: 74:91:8D:D7:F5:1C:39:28:41:41:A3:D4:B7:59:64:E7:D0:25:83:BC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A041E604CD3E586F32D7E79A7CBCC7C330
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dJGN1_UcOShBQaPUt1lk59Alg7w.roa
Signing time: Thu 27 Aug 2026 06:26:28 +0000
ROA not before: Thu 27 Aug 2026 06:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133153
IP address blocks: 193.254.244.0/24 maxlen: 24
193.254.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:e6:04:cd:3e:58:6f:32:d7:e7:9a:7c:bc:c7:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 27 06:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74918dd7f51c39284141a3d4b75964e7d02583bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:e3:e6:a0:b8:b5:4f:e9:6a:11:fe:e5:ce:
2f:0c:c7:97:69:fa:9b:e1:e6:9e:8a:18:04:41:1a:
29:b4:4f:72:df:02:97:45:24:1e:10:e5:ae:70:6b:
ac:f2:fb:00:48:51:ac:22:a5:d6:08:7b:ea:bf:50:
30:76:dd:a8:df:ea:e7:05:be:22:ba:37:c0:76:9e:
0f:4a:e8:9c:96:cc:ed:f5:fe:93:cd:6e:92:b8:75:
f0:41:b2:31:66:ec:d2:77:92:80:2c:82:03:63:c9:
67:7d:3a:94:e8:9a:a2:22:96:c7:b5:c3:a5:32:7e:
c5:3c:74:85:b1:02:b4:ff:86:48:68:79:6a:0e:92:
08:2c:7e:7f:ab:60:a1:b6:17:41:ef:40:0f:f2:73:
01:7b:4c:87:a9:1a:a9:a7:9d:5d:6b:e5:d4:d1:e2:
1d:af:3d:d3:a4:f3:25:2c:35:54:e1:9e:d3:8d:80:
0f:5c:26:a7:33:c4:1c:db:3c:c2:7c:f6:8b:7d:af:
a0:26:de:39:b0:ed:11:fc:c1:51:c7:73:e8:4a:f3:
5e:b5:a2:01:9e:db:6f:e0:32:8a:0b:34:af:45:db:
f0:c1:67:1e:5f:17:f2:25:2e:44:76:11:01:4e:94:
c0:48:c7:e0:fd:04:43:61:a2:b1:63:4e:1b:13:f9:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:8D:D7:F5:1C:39:28:41:41:A3:D4:B7:59:64:E7:D0:25:83:BC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dJGN1_UcOShBQaPUt1lk59Alg7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:a6:19:b9:f6:ab:c6:fe:7d:f8:8b:44:d6:d3:8f:a1:cd:aa:
f1:8b:f1:63:cd:c7:c1:d7:3e:43:11:55:2b:79:d7:ee:c5:10:
8e:1b:4e:e2:2d:bb:b2:d0:45:f6:0d:e9:04:1d:ca:36:2c:df:
74:65:24:83:be:b8:ae:96:78:d3:09:3b:ee:be:27:98:3e:33:
92:d7:05:63:5f:e9:2d:a1:8e:a8:c4:c0:dc:41:89:aa:dd:49:
c7:68:b7:9a:56:14:e0:10:ac:3c:cb:2e:bd:45:7e:57:0d:82:
1c:3a:93:4e:39:67:c6:49:61:88:5d:94:46:bd:f8:98:43:35:
0e:14:34:6d:86:0f:89:9e:8e:f7:81:f5:83:ed:51:d7:8a:84:
1d:a8:32:7d:d5:62:6b:6c:2c:f1:3a:2b:b4:0d:19:cd:35:e6:
1e:20:48:b3:db:a7:0d:97:6f:18:09:23:71:78:f9:67:cd:df:
96:f2:b9:0e:cb:d7:ac:b1:31:b6:14:12:c2:b9:52:82:54:32:
ff:50:57:31:ff:1d:1a:32:68:c6:04:8c:9c:50:d6:2b:58:d2:
39:79:1f:5f:5f:8c:26:7f:51:59:03:ab:10:a0:2c:d8:ba:17:
72:25:d5:3b:eb:ad:16:9f:2a:a9:e4:ae:6c:8b:a6:b3:ab:1c:
dd:56:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:44 2026 by rpki-client