Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/N9BfbuT0V546jq-BCqN2uDCtmyw.roa
File: N9BfbuT0V546jq-BCqN2uDCtmyw.roa (raw, json)
Hash identifier: hAJDH5rdSKJn7sKRB4AyoR5hp5TM7VKieZqV7wMe+Kc=
Subject key identifier: 37:D0:5F:6E:E4:F4:57:9E:3A:8E:AF:81:0A:A3:76:B8:30:AD:9B:2C
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019E6A432B56EE75E00E73567C6B29C376C1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/N9BfbuT0V546jq-BCqN2uDCtmyw.roa
Signing time: Wed 27 May 2026 16:27:27 +0000
ROA not before: Wed 27 May 2026 16:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 188.119.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:43:2b:56:ee:75:e0:0e:73:56:7c:6b:29:c3:76:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: May 27 16:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d05f6ee4f4579e3a8eaf810aa376b830ad9b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:53:c4:61:2a:ef:71:43:ae:30:de:7f:a0:
73:7a:d7:7b:c7:77:4d:cb:58:35:67:d4:06:57:35:
dc:85:8d:c1:4c:13:db:37:17:79:39:51:41:f4:81:
b7:ec:38:03:83:d0:d6:46:97:46:15:8b:f3:7e:29:
1b:63:26:85:6a:6c:2a:de:c3:1a:d2:e7:1a:e3:0a:
33:97:22:ec:52:a3:49:7c:4a:1e:71:6a:54:8a:aa:
cc:0f:32:4d:66:00:77:88:e7:cb:03:34:46:e0:a1:
57:91:52:be:a5:60:5b:8c:78:a5:1d:a2:88:4f:86:
a4:10:be:6d:0f:ba:6c:28:56:82:db:e8:3d:cd:2e:
1a:50:b3:24:92:07:a4:5a:74:20:35:60:41:42:36:
77:00:5e:e1:a8:d3:bb:97:bd:bb:e8:7a:b8:2b:4d:
67:d6:5b:6c:4b:43:7b:75:f1:f3:e8:98:1a:2f:f5:
a8:b5:fa:ff:8e:de:8d:9a:6e:c6:56:d3:f2:31:0c:
b7:9e:8c:28:27:ce:e6:2d:c2:01:98:35:34:14:f7:
ba:09:9e:97:b9:70:45:1b:83:a4:ee:db:3b:06:77:
d6:1a:9f:09:d7:d0:30:bf:b5:cf:03:39:e9:bb:2d:
00:fc:5a:5e:b8:11:68:72:3d:b3:2f:a4:32:90:fe:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:5F:6E:E4:F4:57:9E:3A:8E:AF:81:0A:A3:76:B8:30:AD:9B:2C
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/N9BfbuT0V546jq-BCqN2uDCtmyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:04:5b:29:3e:b8:eb:1c:cf:b4:a4:80:53:17:47:76:0c:3b:
1c:60:9c:41:57:19:a5:56:82:64:76:87:86:bc:5c:52:c4:b4:
85:1b:49:0a:9c:b3:47:d8:36:9b:6d:0e:59:4f:6c:d5:b0:37:
b6:c3:18:f6:c9:1a:bb:cb:30:7d:96:fa:76:e5:7b:ac:ea:2c:
72:22:28:f8:89:6e:4e:68:31:d4:14:42:6f:a7:34:ae:5c:a7:
96:ef:78:8f:5c:c6:d2:87:99:82:8c:5b:f7:a0:80:b9:56:2d:
c1:e5:b1:18:6b:8f:fa:59:5e:59:b9:fe:47:a9:1c:97:36:3c:
11:ca:52:c1:72:1c:50:09:a3:28:e7:0c:77:4c:6f:af:8f:e5:
1c:e7:b5:62:47:c3:91:c1:df:eb:4a:22:69:cd:c8:91:e7:62:
1e:97:3a:58:c8:d8:6f:b2:fb:0f:61:8b:4a:f4:84:b6:c7:81:
e0:c4:a2:71:02:43:8c:be:97:02:5d:b4:f4:56:0f:d8:b6:39:
24:c2:cc:5e:e4:f5:eb:3a:cd:04:97:0a:b6:9a:82:28:06:e8:
18:37:88:65:21:85:8a:73:d0:59:a5:24:61:dd:20:8c:75:d8:
32:9c:87:0d:1e:37:7a:0a:89:9d:1b:ce:df:d4:f2:23:cb:b6:
89:36:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:15 2026 by rpki-client