Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/18uvwyaeoQM8XHFKvlJxkFhTF4I.roa
File: 18uvwyaeoQM8XHFKvlJxkFhTF4I.roa (raw, json)
Hash identifier: bnGSVbD6Uz+GBuryFSPLx6HtH5y8vYjD9x5CsQj7aok=
Subject key identifier: D7:CB:AF:C3:26:9E:A1:03:3C:5C:71:4A:BE:52:71:90:58:53:17:82
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A03CF86A3C8FC31319A9FE62D0B9B091C5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/18uvwyaeoQM8XHFKvlJxkFhTF4I.roa
Signing time: Wed 26 Aug 2026 07:28:28 +0000
ROA not before: Wed 26 Aug 2026 07:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202384
IP address blocks: 193.37.66.0/23 maxlen: 24
193.37.66.0/24 maxlen: 24
193.37.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:f8:6a:3c:8f:c3:13:19:a9:fe:62:d0:b9:b0:91:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 26 07:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7cbafc3269ea1033c5c714abe52719058531782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:42:3d:51:f8:db:c8:3e:ea:71:96:f2:3a:
86:0a:b7:2d:2a:95:93:72:30:76:d0:1b:0c:94:98:
7e:e7:62:ac:1c:de:b9:be:5a:72:a6:93:cb:8f:04:
22:f0:74:24:62:ed:a3:13:a0:a2:32:0c:db:a0:f3:
c8:a2:f6:33:ad:58:b4:c9:83:a6:f4:6d:e3:47:c4:
22:fc:63:66:36:b3:17:81:b4:8b:88:6b:03:96:19:
c8:b0:27:98:06:9e:bd:f2:3a:16:fa:e8:29:e8:e0:
e2:cc:7b:6e:83:43:9c:ef:1c:78:15:61:a6:b3:1b:
ff:c7:33:7e:39:7b:d9:3a:31:a0:fc:cd:fc:32:34:
63:06:fa:2a:4e:cc:9b:78:8a:8a:8d:9d:06:74:45:
f9:7e:dc:a8:79:7b:57:6a:fc:d1:28:32:d1:59:56:
ab:0c:9b:ac:09:aa:ea:d8:4d:c0:3c:a8:a1:91:e8:
2a:07:23:34:35:77:6d:f9:84:10:a3:bf:f1:ee:13:
27:c0:d0:62:29:f1:88:f0:c6:2d:8f:85:4e:9c:23:
ab:c8:a5:a6:4b:9c:6a:31:b2:59:cc:9e:21:18:70:
96:fa:0b:72:c8:4c:1d:5b:d3:75:9b:48:94:1f:11:
2b:a4:c1:70:26:b4:88:e1:0b:14:10:65:ff:54:a1:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:AF:C3:26:9E:A1:03:3C:5C:71:4A:BE:52:71:90:58:53:17:82
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/18uvwyaeoQM8XHFKvlJxkFhTF4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:b6:c0:af:c3:ac:cd:1e:1f:51:6f:91:65:ab:fd:08:2e:1f:
30:a1:97:e8:c0:f1:8d:77:30:93:7e:a4:b0:d9:0d:ca:b6:64:
71:c8:33:46:b0:22:6a:15:f2:7e:e5:60:13:52:b2:39:94:98:
33:06:92:4e:27:74:d2:67:a8:35:df:66:87:60:fc:fd:00:f3:
33:7c:07:34:d7:d1:81:99:6c:4f:f9:a1:54:f5:44:b4:47:4d:
13:6d:30:1b:17:80:bb:a6:f1:ad:88:05:68:0c:51:b5:be:c8:
47:e2:04:dd:da:54:23:de:b5:91:07:20:16:34:c0:9f:f8:35:
89:ce:a0:e1:ad:77:95:cd:f5:6c:4e:13:5a:97:0a:4f:03:82:
00:66:a6:48:05:c6:ca:87:79:b9:14:98:b8:f5:d6:9a:3d:d6:
6c:78:20:04:47:f9:b2:b4:e3:96:88:5c:1d:6a:71:87:56:fb:
29:60:99:b7:36:24:39:24:48:62:a5:3d:20:72:0f:a0:0d:6c:
1f:83:7c:b7:b8:a9:64:c6:e9:57:53:b2:30:14:ac:29:df:ba:
38:94:82:6a:f3:f8:e1:b2:13:db:ed:ab:c5:5b:91:34:cf:35:
1a:36:6c:11:31:5b:05:8b:ca:55:fa:67:32:be:74:5a:0c:11:
27:11:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:58 2026 by rpki-client