Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/1-436xPDlViLRWbEmsj0lTmJdxXQ.roa
File: 1-436xPDlViLRWbEmsj0lTmJdxXQ.roa (raw, json)
Hash identifier: T/iHcmpE9+88yNSlz/OStqxVHcyAieKhQgF8LC1QJDk=
Subject key identifier: FB:8D:FA:C4:F0:E5:56:22:D1:59:B1:26:B2:3D:25:4E:62:5D:C5:74
Certificate issuer: /CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Certificate serial: 01A1C632BE52E8782F28B097EB5D43B441AE
Authority key identifier: 6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/1-436xPDlViLRWbEmsj0lTmJdxXQ.roa
Signing time: Tue 10 Nov 2026 16:02:56 +0000
ROA not before: Tue 10 Nov 2026 16:02:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12874
IP address blocks: 193.42.234.0/24 maxlen: 24
193.42.237.0/24 maxlen: 24
193.42.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:32:be:52:e8:78:2f:28:b0:97:eb:5d:43:b4:41:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Validity
Not Before: Nov 10 16:02:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb8dfac4f0e55622d159b126b23d254e625dc574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:59:8e:6f:de:b8:aa:9a:cb:2f:c2:5c:91:
b1:29:d7:28:42:23:74:63:a7:e7:0b:47:4f:96:29:
f3:2d:f6:20:ba:4b:60:42:5b:c3:cc:54:35:48:80:
f5:ea:fe:ba:ae:e6:d5:4f:0c:fc:87:2c:f8:99:d5:
ed:51:34:d0:d2:6d:32:f4:3c:91:f5:f2:65:ca:4d:
e0:b4:56:bc:d7:7c:96:12:8e:ca:09:b1:a7:b1:23:
ae:1f:c0:c4:04:10:7b:57:27:51:56:f1:00:53:c0:
4b:3b:19:d0:d9:17:fe:6a:c1:bd:a2:99:47:a5:12:
73:b3:f8:04:5f:4f:e1:1e:61:e1:6b:79:ab:89:a1:
9e:03:d2:26:93:6b:74:2e:4c:62:b7:c9:98:36:1e:
2b:e4:c3:36:72:8c:03:bf:03:6f:82:59:c8:51:41:
79:d0:b8:fb:de:7c:b3:61:1c:45:d7:bc:e7:d4:9b:
f9:d2:60:2e:f5:ca:3d:a8:f2:4b:32:f3:74:63:cc:
cd:55:77:2d:70:e7:bb:3f:ca:61:d3:9f:b3:e1:14:
7c:ed:01:da:22:40:e3:15:36:ff:cc:fc:59:e3:cd:
5b:b5:e9:2e:57:ac:9d:6f:15:70:e0:26:38:5f:4b:
ff:da:a7:83:16:00:d2:5a:67:a1:da:18:85:4e:b4:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:FA:C4:F0:E5:56:22:D1:59:B1:26:B2:3D:25:4E:62:5D:C5:74
X509v3 Authority Key Identifier:
keyid:6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/1-436xPDlViLRWbEmsj0lTmJdxXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.234.0/24
193.42.237.0-193.42.238.255
Signature Algorithm: sha256WithRSAEncryption
8f:12:54:87:82:1d:25:04:28:19:36:dc:e7:33:f5:d7:bf:9d:
f0:33:c0:ae:7c:02:64:f0:53:6a:16:bd:6d:fb:5e:6e:e7:9d:
62:51:c2:c3:53:a2:79:87:0e:e4:60:8d:d4:b3:78:c8:c3:5d:
8b:99:b7:be:09:05:57:90:0e:40:d5:07:2e:43:bc:f2:00:52:
cf:ab:61:a3:08:6f:db:73:61:e6:3a:ab:29:ae:13:00:4f:c5:
9a:fd:fd:d1:59:05:85:d1:f2:b3:ac:63:52:6d:ae:d5:ab:80:
74:e6:92:c3:42:1c:f5:b0:8a:c0:9e:b0:d8:21:98:9b:c6:3a:
6a:42:65:26:d0:d1:83:f9:cb:cd:82:24:dd:0f:0f:55:8a:6f:
fb:0d:c3:cc:02:a9:bf:bd:de:10:e8:7f:75:8b:4c:49:16:a9:
4d:3b:c1:39:2e:bc:38:bc:b5:36:66:aa:46:fc:b0:ba:5a:66:
54:28:df:4e:8c:5e:c5:bb:41:97:a9:e5:22:57:5d:db:39:ce:
26:92:34:0b:08:d7:80:6e:e2:0f:fe:35:f3:f7:66:c0:ec:4f:
74:4c:e9:7f:71:b3:a8:43:fb:a2:98:25:ea:f1:ed:64:19:f6:
1a:90:57:18:4c:b5:ff:35:89:cf:65:3e:b3:6d:d6:17:aa:11:
27:cc:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:56 2026 by rpki-client