Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/S0C6crrVKgRyJf3nSHdvRDUasow.roa
File: S0C6crrVKgRyJf3nSHdvRDUasow.roa (raw, json)
Hash identifier: ppGMxglo/WK3JU0mlehHdl0xtPuYXtPko+rmXZfr/i4=
Subject key identifier: 4B:40:BA:72:BA:D5:2A:04:72:25:FD:E7:48:77:6F:44:35:1A:B2:8C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A13173DB979CA388F387379B15A9BD153A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/S0C6crrVKgRyJf3nSHdvRDUasow.roa
Signing time: Mon 12 Oct 2026 18:50:38 +0000
ROA not before: Mon 12 Oct 2026 18:50:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 188.95.67.0/24 maxlen: 24
193.37.197.0/24 maxlen: 24
193.37.198.0/24 maxlen: 24
193.37.199.0/24 maxlen: 24
194.41.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:73:db:97:9c:a3:88:f3:87:37:9b:15:a9:bd:15:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 12 18:50:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b40ba72bad52a047225fde748776f44351ab28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:fd:f1:91:e3:19:2d:49:97:66:8e:4e:e7:
42:fc:fd:bb:ab:c9:da:d7:11:06:55:be:71:62:fb:
bc:bd:d3:98:3f:92:c1:94:9b:fb:b4:62:ed:78:9e:
9b:48:34:84:1a:b8:51:a2:24:24:19:6d:82:7d:12:
47:73:25:4f:09:a2:6f:32:27:f7:da:fb:5f:d7:3e:
6e:7c:e1:64:e3:a9:e7:e0:77:d0:83:62:4c:9a:dc:
aa:85:69:02:f8:37:83:41:86:c8:73:8a:03:01:e9:
64:bd:b0:fe:94:17:cc:a1:06:05:93:a4:fe:1d:2a:
97:c1:e7:41:51:b3:36:e4:1d:7e:d5:d4:f2:6a:e5:
80:c5:3c:ed:76:55:06:12:fa:f9:26:97:83:a9:b1:
65:bd:d2:82:3e:a5:ec:16:17:d3:e4:02:b9:cf:88:
5e:af:6f:58:8d:2a:8d:5e:2f:e1:0e:fa:9d:c1:04:
3b:9e:79:55:fe:33:65:47:66:eb:fe:ed:ce:32:53:
ed:9e:38:a6:b8:0e:bc:dd:56:02:5b:5f:b5:18:36:
4d:81:c9:c5:b2:c1:c9:0f:c2:d4:12:d5:fb:1e:0e:
96:37:e4:d3:e8:5b:c0:e7:fe:91:61:77:4a:20:17:
a8:90:7e:6e:55:5d:ef:e2:c9:d2:46:f3:48:36:62:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:BA:72:BA:D5:2A:04:72:25:FD:E7:48:77:6F:44:35:1A:B2:8C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/S0C6crrVKgRyJf3nSHdvRDUasow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
193.37.197.0-193.37.199.255
194.41.114.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f4:cd:3b:98:5f:79:8f:2f:f4:0b:e9:c3:02:29:43:b1:6d:
88:d0:80:96:2e:87:dd:d4:e2:62:54:43:12:c2:25:c2:2d:72:
44:0f:82:f3:f9:b5:fa:b7:e7:ed:54:e7:5e:2a:b3:69:59:ab:
14:f2:94:80:30:b7:c2:83:62:d8:d0:11:8c:e1:b1:35:c2:9f:
2d:a2:4c:45:d6:3c:2e:f1:10:52:16:ef:12:fd:03:e7:f1:a8:
32:6c:48:ff:9e:93:e7:5e:2e:10:bb:03:01:0d:c4:2d:c2:1c:
0c:25:13:f4:20:fe:d2:1e:5b:69:aa:c1:a1:be:07:3d:63:fe:
84:2f:7a:4f:cb:6b:ef:d0:e7:c7:0a:5b:1a:4d:a7:b3:fa:05:
58:ee:d5:73:b0:ce:14:06:16:ce:2c:37:94:a2:a2:16:8a:af:
87:1b:91:2a:76:da:e3:24:59:21:55:31:64:9f:82:e9:83:0b:
24:8e:92:a9:c3:5c:7c:a5:50:c6:dd:12:2c:3e:3c:78:80:92:
a0:0e:fd:63:d3:9a:e4:fa:ec:48:34:45:6f:49:9d:51:1b:a3:
d7:50:4d:42:2c:9d:32:9d:68:da:b0:93:8d:67:56:ca:d6:78:
fb:9b:19:e1:b8:04:6a:25:8f:4b:0c:a2:18:2a:7b:53:88:ed:
aa:1e:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:34 2026 by rpki-client