Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/myi3VwIyhKHJnr4qWMXGZa7tHxI.roa
File: myi3VwIyhKHJnr4qWMXGZa7tHxI.roa (raw, json)
Hash identifier: b4s1Ux4EB6+WfVHpUE0ZJZ00qhc7lmZkSyuU6m+Npgs=
Subject key identifier: 9B:28:B7:57:02:32:84:A1:C9:9E:BE:2A:58:C5:C6:65:AE:ED:1F:12
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019E79A12F3B44B4EC89F84D6B4436A9CB67
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/myi3VwIyhKHJnr4qWMXGZa7tHxI.roa
Signing time: Sat 30 May 2026 16:04:27 +0000
ROA not before: Sat 30 May 2026 16:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 194.117.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:79:a1:2f:3b:44:b4:ec:89:f8:4d:6b:44:36:a9:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: May 30 16:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b28b757023284a1c99ebe2a58c5c665aeed1f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:ff:4d:c4:69:64:48:cd:cc:fb:d1:16:02:
1d:17:94:e6:d4:84:c4:66:c5:85:a8:8b:f1:e4:9a:
1d:e7:13:20:20:64:42:8b:94:2d:11:37:f2:27:b7:
0d:37:00:d1:4a:a4:74:27:46:f7:dc:f5:d8:5f:e3:
34:4a:53:d8:cc:7a:12:d4:04:8e:29:ce:56:23:8a:
d4:6a:06:cf:55:8d:51:78:2b:92:06:b9:88:40:28:
da:ac:c2:c3:cd:08:6f:7b:a8:5a:e5:34:88:2c:e5:
09:df:d7:27:e8:d1:5f:2d:0b:44:d7:b6:93:d1:a2:
52:7a:80:5b:5c:09:dc:4b:3b:0c:a7:ce:f7:50:02:
a8:b7:6b:25:08:75:4b:d3:c2:8d:85:1f:64:eb:61:
46:c9:c3:04:14:d3:3b:fe:ae:d4:6d:ad:2a:9c:a4:
61:ae:45:88:d7:09:4e:08:87:95:b9:1e:ee:5e:d8:
96:63:7a:67:9e:18:14:e3:73:2b:ff:21:e6:fa:71:
57:5e:f8:1b:0f:dd:56:d3:2b:70:a3:db:ff:5d:e4:
da:34:0c:7d:6a:e6:7d:8c:d7:c9:bc:72:16:4e:d9:
d2:a2:11:9f:7d:46:06:fd:36:86:c8:88:dc:6a:18:
3b:50:a5:39:04:4b:0b:4b:ff:f9:61:d8:36:81:a5:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:B7:57:02:32:84:A1:C9:9E:BE:2A:58:C5:C6:65:AE:ED:1F:12
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/myi3VwIyhKHJnr4qWMXGZa7tHxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:43:7e:da:5b:87:8d:9f:4c:bd:2e:a7:4a:45:af:1f:c2:4a:
54:b0:04:f4:76:4b:5a:3c:24:a9:cf:41:6d:4e:b0:30:59:2c:
c9:28:98:b9:71:44:8f:69:ec:01:46:80:b8:99:a7:ec:48:7b:
b1:0c:4a:a1:e3:01:49:b6:9f:2c:71:44:e0:ac:63:5a:23:55:
e6:2e:6a:97:97:bb:f2:8d:3d:42:47:a5:80:58:12:54:4e:90:
84:24:e7:34:06:b6:db:12:04:9f:54:f9:b3:e5:20:f8:2b:a0:
97:6e:00:64:a8:ef:87:24:e8:f4:fa:22:07:0a:ea:a3:06:83:
01:db:e0:d1:24:e0:c5:17:72:9f:c7:c2:7c:8a:ec:57:74:ad:
d3:fb:ae:f2:f3:44:15:ed:cd:65:5a:07:f2:7e:bd:13:b9:5c:
02:a6:95:ea:00:51:6c:78:d2:ee:8b:1e:8e:1e:a9:99:42:32:
e5:9d:88:46:6c:5a:e3:d8:6d:52:2e:66:59:7e:0e:06:50:54:
06:c2:1e:28:00:c7:1a:9e:58:54:a4:54:c4:a7:2c:7b:5f:53:
36:10:75:9d:2d:06:28:4d:be:92:33:7e:97:ff:46:b3:fc:47:
71:dd:3c:9b:ac:2c:07:f5:d1:b6:81:7d:2b:69:e0:75:df:0c:
18:ed:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:25 2026 by rpki-client