Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aBGTQZXLz5LSXhCwswQpSWlKO2E.roa
File: aBGTQZXLz5LSXhCwswQpSWlKO2E.roa (raw, json)
Hash identifier: AdgDESpgiTwehjQmwmRZCXG5NhZAmRdcDDfLbMQX4Qc=
Subject key identifier: 68:11:93:41:95:CB:CF:92:D2:5E:10:B0:B3:04:29:49:69:4A:3B:61
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16325403D554C874BBC46F9C4EBC26F55
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aBGTQZXLz5LSXhCwswQpSWlKO2E.roa
Signing time: Thu 22 Oct 2026 10:25:47 +0000
ROA not before: Thu 22 Oct 2026 10:25:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213945
IP address blocks: 193.35.153.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:25:40:3d:55:4c:87:4b:bc:46:f9:c4:eb:c2:6f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:25:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6811934195cbcf92d25e10b0b3042949694a3b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:48:1a:44:d6:27:8f:0f:00:39:62:ac:11:
6f:89:3d:2f:72:3c:71:4c:79:ea:0e:ff:a2:7e:77:
5e:8f:7a:d2:26:5e:41:31:dd:69:14:c5:8e:1a:7a:
14:02:41:60:03:b3:c4:2d:bb:61:cf:33:5c:8d:1c:
e9:e0:3e:6d:88:46:2c:ec:60:a0:8c:db:36:1a:3c:
80:0e:be:2e:11:b6:f9:32:6a:b9:85:91:c8:91:d3:
f4:14:f7:fb:9c:8e:2a:50:35:cc:3c:25:6d:0c:21:
dc:27:5b:e0:51:56:1b:4a:d2:0d:01:c3:c8:39:e3:
a3:39:ca:e9:73:0b:46:41:14:c0:90:45:03:fb:c5:
1b:55:b1:f5:a2:db:d6:49:f8:2e:97:6f:83:e1:4b:
51:ea:4b:f0:6f:be:6c:d6:9e:99:92:11:d7:37:9e:
d7:94:2c:cc:16:f9:08:b0:b4:e7:3c:b1:0e:55:af:
09:14:9e:da:bd:af:cf:31:64:3f:54:08:56:85:73:
c4:b7:88:4f:55:a9:54:e3:99:e2:3e:11:8f:b3:e7:
8d:96:e3:2c:ea:73:8a:a6:8f:b1:16:0a:6f:ad:ff:
9a:44:ce:1f:df:f2:36:08:b8:d7:e6:b1:88:41:e7:
e9:d7:70:a5:fb:46:14:33:44:ef:57:a2:3e:51:34:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:93:41:95:CB:CF:92:D2:5E:10:B0:B3:04:29:49:69:4A:3B:61
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aBGTQZXLz5LSXhCwswQpSWlKO2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.153.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b9:fa:43:13:a4:6f:a2:ef:00:d7:e4:15:b0:fc:6d:4e:16:
74:79:92:5b:6a:2a:f0:2e:91:c7:33:48:1a:a1:83:35:ca:6f:
e1:75:45:bc:7e:f8:cd:86:56:28:6d:24:ce:b1:1e:3c:ff:1a:
e0:1c:9e:12:1a:7f:a2:38:0a:af:55:4a:ff:e7:bc:53:f9:80:
e9:90:07:ee:b4:92:38:bf:6a:74:70:3a:43:05:a4:eb:7a:03:
cd:a5:24:54:db:a3:86:ae:8c:8e:6d:90:71:9a:94:ce:fd:e1:
a2:30:54:39:38:04:f2:c5:03:28:50:e8:ea:c2:f7:6b:0e:e1:
2d:ee:c0:d1:86:5c:e5:7a:a7:18:8b:9b:37:f7:d0:75:e4:1c:
ce:24:ca:30:c8:e1:2d:83:5b:d8:6b:72:2c:af:49:22:ae:56:
9a:cb:c9:ec:b0:3b:3a:1a:91:86:5c:ce:03:db:e4:c0:e1:1a:
1b:c1:5e:d3:33:2f:53:58:18:4c:a5:37:ef:e2:4c:6e:f6:eb:
b1:eb:31:7e:1a:8d:b6:a3:36:58:63:cb:3c:10:9d:f3:0a:71:
e5:1c:37:74:fd:c2:08:60:c6:a6:c5:d5:be:60:3e:2f:34:6d:
50:b5:ee:87:64:e4:2c:c9:02:35:70:b5:bc:b0:2c:06:6c:05:
bf:1e:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:14 2026 by rpki-client