Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/P0v6mR3smcBt5UiE9QMtEljH-o0.roa
File: P0v6mR3smcBt5UiE9QMtEljH-o0.roa (raw, json)
Hash identifier: 1OZZCNxK0pEOgMba5af7rR5wKnFTBqdHQ6QRRxIRAJU=
Subject key identifier: 3F:4B:FA:99:1D:EC:99:C0:6D:E5:48:84:F5:03:2D:12:58:C7:FA:8D
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019F416B609FE342760B6A42B27A174C5B3B
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/P0v6mR3smcBt5UiE9QMtEljH-o0.roa
Signing time: Wed 08 Jul 2026 11:09:43 +0000
ROA not before: Wed 08 Jul 2026 11:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 193.26.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:6b:60:9f:e3:42:76:0b:6a:42:b2:7a:17:4c:5b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Jul 8 11:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f4bfa991dec99c06de54884f5032d1258c7fa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:d9:e5:28:69:23:12:56:b0:ff:08:7d:b7:
6a:ba:b3:09:7c:e0:32:bf:5d:fa:d1:6f:56:1a:76:
95:51:43:5a:67:e1:7f:36:d9:b7:c8:1c:ce:3e:49:
74:8f:a3:6d:93:7a:93:99:d4:7c:8c:0e:42:60:84:
ed:a9:97:38:09:ac:04:e3:79:39:b3:3e:ee:be:f5:
3e:67:a5:a2:be:27:77:55:1a:87:f0:bb:21:b3:60:
0e:f5:54:72:c7:6d:76:16:e6:53:48:fe:e5:33:c4:
b0:d6:9e:2c:38:d7:d8:09:af:42:de:d8:94:73:21:
7f:bc:76:b2:28:ae:7c:6f:e9:e0:13:6f:7c:0a:a4:
e5:1c:b2:0e:9d:9a:47:88:89:98:c1:38:fe:5f:5f:
27:8b:05:ac:c2:c5:c6:98:14:9c:75:58:a5:65:c4:
b9:d4:4c:d9:0c:a1:95:96:15:dd:70:b1:7f:88:df:
b5:d0:ef:6b:bf:9c:e3:64:6b:31:6e:e6:83:2b:df:
cf:56:1b:b0:bc:21:8b:be:67:07:49:93:1e:78:91:
a6:92:50:c2:dd:31:2e:96:44:40:33:3e:42:b5:4f:
0c:df:b4:83:61:d9:96:6a:c6:ec:12:a3:bf:db:e4:
f5:83:98:4b:5d:c1:9d:71:b1:d3:4e:3f:23:29:33:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:FA:99:1D:EC:99:C0:6D:E5:48:84:F5:03:2D:12:58:C7:FA:8D
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/P0v6mR3smcBt5UiE9QMtEljH-o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.56.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:fc:22:d4:c4:2a:11:69:72:f8:e9:21:2b:c5:bc:2f:8b:b6:
7f:82:c7:69:40:2f:39:1d:a8:0d:ef:58:1c:91:d3:56:fa:09:
76:b0:0d:72:5f:e9:53:88:2e:c5:ad:75:77:b3:db:e3:39:cd:
b6:da:02:cf:27:a2:d3:c0:fe:e7:d2:cb:10:c3:0e:13:85:d7:
7e:da:24:12:8e:f7:51:bc:91:4d:00:9c:61:23:5e:31:f9:c0:
16:8a:54:b2:32:84:af:d7:f1:4e:4e:0d:51:e9:de:ac:fd:93:
3d:ab:59:e5:b9:c6:43:d5:60:66:38:bc:80:3c:9a:cf:8c:bf:
82:06:75:8d:e7:0b:70:a4:e3:3c:fb:69:d1:5f:d1:ac:e7:55:
ca:77:0e:57:e1:fd:e5:b8:ce:c9:10:b5:77:8c:47:51:58:b4:
9e:dc:06:14:d3:f6:4e:8b:71:ca:2d:6e:a0:c3:45:85:0f:a6:
84:69:53:41:62:b3:bf:88:c5:be:9c:d4:ba:f0:a4:ec:cf:e6:
33:ce:55:73:84:46:e9:29:02:74:7a:f5:09:61:f0:2d:59:37:
9b:c4:b7:71:00:2b:10:16:21:7b:b4:4a:e0:28:ae:66:42:8b:
72:d3:cd:11:2d:8e:37:cd:84:0a:60:c4:59:7b:4d:0a:c3:b8:
9b:4f:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 06:53:57 2026 by rpki-client