Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/RfLbU_NtwZVGZGWu9yPN4FC6N74.roa
File: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (raw, json)
Hash identifier: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=
Subject key identifier: 45:F2:DB:53:F3:6D:C1:95:46:64:65:AE:F7:23:CD:E0:50:BA:37:BE
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 019F23691463ED5BC18666939AE033EA0A0B
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/RfLbU_NtwZVGZGWu9yPN4FC6N74.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 193.176.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:14:63:ed:5b:c1:86:66:93:9a:e0:33:ea:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45f2db53f36dc195466465aef723cde050ba37be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:a5:9e:ff:5c:5a:55:a0:38:a8:2e:87:ac:
90:82:93:2f:bf:34:b4:c0:b9:b0:eb:f8:99:ca:ad:
21:62:a7:1c:7e:df:7c:4a:4f:fe:bc:1b:ba:2c:5d:
09:90:51:1a:e3:1d:15:9c:41:d7:ab:7e:e1:75:cb:
e2:2a:ab:eb:b3:30:2c:c5:90:af:1e:ff:f8:f8:85:
46:90:23:b7:ba:69:7f:ad:a5:09:f2:59:97:e6:f1:
bb:05:d2:96:64:0e:d1:6f:11:c0:e8:32:2a:ea:1b:
a4:9f:90:cf:5f:61:31:ee:32:c4:cb:9e:4d:0f:3a:
b6:56:46:e3:fb:c5:0c:f5:14:56:9a:a4:25:26:75:
83:e6:57:e9:78:e4:c0:57:38:9b:5c:6d:06:47:17:
c8:31:10:99:b8:e3:2e:41:45:cd:44:60:47:b8:91:
07:45:86:54:d0:aa:1f:3b:37:f9:86:f6:5b:78:d3:
09:5f:eb:19:6a:c5:30:12:82:6a:eb:99:40:2a:66:
5d:b5:05:85:d3:35:11:ed:8b:b7:72:69:9a:74:5e:
c5:94:39:c3:f9:e8:a7:14:ce:98:e9:c7:61:bc:78:
7a:24:63:e2:9b:7e:3a:5a:67:ec:be:ec:38:ea:3d:
47:23:8b:9b:45:3e:3d:40:90:14:bc:a0:bc:eb:b3:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F2:DB:53:F3:6D:C1:95:46:64:65:AE:F7:23:CD:E0:50:BA:37:BE
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/RfLbU_NtwZVGZGWu9yPN4FC6N74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.186.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5d:ea:c4:87:69:a0:36:62:26:0d:41:a5:ae:f7:e3:51:fe:
d2:38:7b:fb:24:1b:bb:09:db:fd:c5:8f:6f:8f:7f:34:82:c7:
66:d9:ae:98:c0:1a:0e:e9:ed:c7:68:30:50:2e:61:9b:06:98:
ec:dc:c1:eb:46:c2:c0:28:7c:a0:eb:49:56:25:04:b9:d5:b2:
55:5c:a2:8a:fa:8b:c6:95:b6:c3:e7:11:0e:a2:a2:bb:a9:e1:
0d:d7:ab:66:a0:43:fb:57:d1:cc:12:c9:66:cd:00:4d:b2:f0:
8b:3c:96:b5:19:4a:5a:9e:9e:74:b3:99:ca:90:4b:37:4b:86:
86:66:21:5b:87:e5:6b:1d:8f:d9:74:ad:64:69:cd:32:e5:2e:
56:7d:89:d6:54:9d:37:89:a8:ee:13:08:10:cd:f4:96:21:2c:
14:6a:3c:76:b4:2d:d9:98:72:b0:99:26:59:1e:34:4e:89:32:
6a:cc:68:cf:a7:ab:dd:2d:14:c4:86:9b:dd:5d:14:38:f5:fa:
f4:13:71:71:57:b2:ab:e1:cf:bd:09:ab:cd:29:45:13:a7:b0:
cb:4c:8a:78:fb:89:54:d4:b1:99:f9:dd:3d:73:39:81:eb:64:
59:5f:b4:22:29:25:fd:9b:14:9e:cd:e3:3b:03:4c:d3:84:bf:
d5:04:22:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRRj7VvBhmaTmuAz6goLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGU5YjA2ZjUyYzI1MmZlNGI5OTJkZjZhNjBhZmJhMWUy
YTY1MDQwHhcNMjYwNzAyMTUxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWYyZGI1M2YzNmRjMTk1NDY2NDY1YWVmNzIzY2RlMDUwYmEzN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszmlnv9cWlWgOKguh6yQgpMvvzS0
wLmw6/iZyq0hYqccft98Sk/+vBu6LF0JkFEa4x0VnEHXq37hdcviKqvrszAsxZCv
Hv/4+IVGkCO3uml/raUJ8lmX5vG7BdKWZA7RbxHA6DIq6hukn5DPX2Ex7jLEy55N
Dzq2Vkbj+8UM9RRWmqQlJnWD5lfpeOTAVzibXG0GRxfIMRCZuOMuQUXNRGBHuJEH
RYZU0KofOzf5hvZbeNMJX+sZasUwEoJq65lAKmZdtQWF0zUR7Yu3cmmadF7FlDnD
+einFM6Y6cdhvHh6JGPim346Wmfsvuw46j1HI4ubRT49QJAUvKC867MWGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXy21PzbcGVRmRlrvcjzeBQuje+MB8GA1UdIwQY
MBaAFD2Omwb1LCUv5LmS32pgr7oeKmUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFk2YkJ2VXNKU19rdVpMZmFtQ3Z1aDRxWlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMt
ZDgwOGIxYWZhODgxLzEvUmZMYlVfTnR3WlZHWkdXdTl5UE40RkM2Tjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMtZDgwOGIxYWZhODgx
LzEvUFk2YkJ2VXNKU19rdVpMZmFtQ3Z1aDRxWlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbC6MA0G
CSqGSIb3DQEBCwUAA4IBAQBzXerEh2mgNmImDUGlrvfjUf7SOHv7JBu7Cdv9xY9v
j380gsdm2a6YwBoO6e3HaDBQLmGbBpjs3MHrRsLAKHyg60lWJQS51bJVXKKK+ovG
lbbD5xEOoqK7qeEN16tmoEP7V9HMEslmzQBNsvCLPJa1GUpanp50s5nKkEs3S4aG
ZiFbh+VrHY/ZdK1kac0y5S5WfYnWVJ03iajuEwgQzfSWISwUajx2tC3ZmHKwmSZZ
HjROiTJqzGjPp6vdLRTEhpvdXRQ49fr0E3FxV7Kr4c+9CavNKUUTp7DLTIp4+4lU
1LGZ+d09czmB62RZX7QiKSX9mxSezeM7A0zThL/VBCK2
-----END CERTIFICATE-----
Generated at Wed Jul 8 12:25:28 2026 by rpki-client