Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/u9FRg4HZmYxe88AmtVq7nrsLcrw.roa
File: u9FRg4HZmYxe88AmtVq7nrsLcrw.roa (raw, json)
Hash identifier: H8HNXc9+pLASdlhH9aRSNMbBUgB4ROYUT/WeWXSCWZo=
Subject key identifier: BB:D1:51:83:81:D9:99:8C:5E:F3:C0:26:B5:5A:BB:9E:BB:0B:72:BC
Certificate issuer: /CN=484c0fa2898b0a87066c9353e669344ca9b6366f
Certificate serial: 019EC0280FE4E06B8A1831CEFB0B5B5C4D28
Authority key identifier: 48:4C:0F:A2:89:8B:0A:87:06:6C:93:53:E6:69:34:4C:A9:B6:36:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/u9FRg4HZmYxe88AmtVq7nrsLcrw.roa
Signing time: Sat 13 Jun 2026 08:45:11 +0000
ROA not before: Sat 13 Jun 2026 08:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210474
IP address blocks: 193.105.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:28:0f:e4:e0:6b:8a:18:31:ce:fb:0b:5b:5c:4d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484c0fa2898b0a87066c9353e669344ca9b6366f
Validity
Not Before: Jun 13 08:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbd1518381d9998c5ef3c026b55abb9ebb0b72bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:86:2e:41:48:9f:58:42:01:99:a9:14:af:
7a:79:26:a4:39:ba:1d:a9:35:27:d4:0f:a1:44:96:
c5:db:82:32:75:2e:83:af:c3:c9:42:a0:98:bf:9c:
dc:90:55:46:ae:6f:98:05:af:29:2a:2f:1d:bb:a6:
ae:0e:d2:af:54:4a:21:96:fb:d1:49:0b:19:6a:7a:
cc:0d:79:8e:f1:1c:54:7e:8c:ac:1f:db:d1:8d:47:
1d:eb:5b:9e:46:cd:c5:e5:55:e1:54:d6:69:68:ee:
0a:d5:23:cc:04:aa:dc:69:82:9b:90:94:6c:38:fe:
d4:b9:f7:0c:b5:e6:4a:73:9e:59:09:35:ca:9d:46:
2b:45:40:cd:14:43:09:37:6d:77:45:37:fc:c6:e5:
48:85:8e:a4:21:b9:2c:eb:8c:11:23:2a:6c:4f:a3:
c4:71:3d:d8:71:2e:6b:4b:68:e0:47:3a:52:0f:72:
39:b7:23:c7:b0:87:6b:62:21:9c:c6:14:2c:50:35:
6c:9d:0a:40:ad:12:78:c2:09:dc:cf:1a:81:42:80:
07:3b:65:cc:27:29:53:ec:48:b5:b0:b4:60:32:ac:
b0:45:48:67:de:78:86:fe:07:98:16:70:d6:10:81:
41:81:7d:5a:81:95:e2:31:e5:1b:7b:58:31:fc:c4:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:51:83:81:D9:99:8C:5E:F3:C0:26:B5:5A:BB:9E:BB:0B:72:BC
X509v3 Authority Key Identifier:
keyid:48:4C:0F:A2:89:8B:0A:87:06:6C:93:53:E6:69:34:4C:A9:B6:36:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/u9FRg4HZmYxe88AmtVq7nrsLcrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
00:05:c9:74:16:33:30:0c:08:69:ef:0e:54:aa:1f:03:58:4a:
b8:5a:95:ff:dc:31:60:5b:44:0f:16:63:b9:73:15:a6:a0:e7:
67:30:ce:22:b1:b8:ab:98:5a:50:11:a9:f4:87:5d:ca:ab:dd:
02:e5:5c:34:1e:f3:f9:e9:3c:3c:34:71:4c:55:74:d0:0f:e1:
12:38:83:5e:c6:e3:b2:d1:1d:19:b7:39:ee:59:f7:ed:e7:55:
84:27:06:e8:6d:21:c6:49:89:ef:29:99:ad:13:69:11:94:5f:
9d:46:63:d0:76:29:d6:ed:0e:f5:d1:3c:ff:eb:ae:a4:20:b4:
3b:16:e0:93:f5:5b:c9:36:ae:b2:d8:be:e2:82:f2:81:96:5f:
f3:88:e3:30:d8:7f:79:a2:1d:5b:66:93:3f:81:54:a7:58:32:
78:36:4c:2e:de:90:a5:38:a5:22:60:97:47:86:71:87:eb:79:
c7:33:48:1c:e0:f2:16:0a:3e:86:0f:93:70:70:6b:ff:50:e4:
b6:b8:a6:17:50:ac:ee:63:15:34:14:21:b0:46:76:c5:44:a4:
91:81:76:12:6e:b9:2a:d3:9c:46:bd:8c:a2:90:c0:d4:f5:68:
ca:3f:79:5b:c4:4f:a7:f3:92:26:4a:4a:e8:09:09:c5:08:20:
de:5d:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:02 2026 by rpki-client