Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fUpYVaToyOCjhjcnER3NXoVTn8o.roa
File: fUpYVaToyOCjhjcnER3NXoVTn8o.roa (raw, json)
Hash identifier: zSYmPy55qU5ypU4W0SlpWkU6I8Y2N2ZtRSoC5xQFuU8=
Subject key identifier: 7D:4A:58:55:A4:E8:C8:E0:A3:86:37:27:11:1D:CD:5E:85:53:9F:CA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019D1A0CA85ACDD82257F364C8A0E51F8884
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fUpYVaToyOCjhjcnER3NXoVTn8o.roa
Signing time: Mon 23 Mar 2026 09:35:30 +0000
ROA not before: Mon 23 Mar 2026 09:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2614
IP address blocks: 193.231.34.0/24 maxlen: 24
194.102.61.0/24 maxlen: 24
194.102.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:0c:a8:5a:cd:d8:22:57:f3:64:c8:a0:e5:1f:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 23 09:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d4a5855a4e8c8e0a3863727111dcd5e85539fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:ca:1e:88:e3:99:8c:30:87:63:fb:33:07:
75:c8:00:3b:21:60:42:a9:f0:84:64:43:e7:3c:ec:
c5:27:15:da:cb:17:e8:95:15:dc:73:be:4c:1d:34:
0d:a5:8d:07:8e:e0:24:6d:1f:c1:a3:5a:51:43:c0:
ce:eb:94:2b:0d:9b:e8:45:8b:cd:c5:c5:6e:b5:51:
1e:36:87:2f:23:8e:56:52:9c:2a:c0:c4:7b:b3:e5:
ea:06:1b:96:5a:29:3c:0f:3b:e1:1a:cd:e7:11:7b:
ab:43:97:10:7f:cf:0b:7a:29:e2:69:9a:62:60:d3:
35:0d:06:09:1d:60:6e:45:5f:08:62:f6:27:fe:59:
f0:c8:72:30:04:ca:59:36:fc:f0:f0:f8:6f:54:bb:
02:a6:e3:4e:42:e4:81:ea:d0:4a:81:5f:5b:dc:17:
d9:96:19:ed:06:56:2f:9e:02:42:27:24:a7:20:a5:
08:ea:2f:56:e2:54:23:14:47:f9:27:bb:87:4d:1f:
a0:e2:28:f9:d0:76:4b:72:84:19:4d:24:26:a4:2e:
82:eb:39:42:fa:6c:17:35:5b:72:26:44:ef:47:de:
da:7f:6e:d4:9a:10:2b:62:71:a0:fd:9a:8c:ef:8b:
41:d0:22:a1:e7:eb:ba:ef:41:e4:a2:55:99:1a:ce:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:58:55:A4:E8:C8:E0:A3:86:37:27:11:1D:CD:5E:85:53:9F:CA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fUpYVaToyOCjhjcnER3NXoVTn8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.34.0/24
194.102.61.0/24
194.102.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d5:10:38:5a:22:99:c7:0c:29:1a:1d:c2:91:61:d4:b6:0f:
4e:f2:c3:bd:6e:c6:0f:85:98:52:df:e8:4e:28:2b:0f:c2:7b:
b9:46:a3:8b:33:8b:86:bd:6b:dc:5b:76:43:b5:3f:25:11:27:
24:27:93:b9:b6:0e:d5:46:b9:01:44:69:24:24:c7:11:bc:3e:
b5:cb:ca:70:72:23:a5:92:04:eb:ff:a6:bc:12:46:19:b3:e7:
7c:a9:5f:59:13:dd:a7:f7:0c:3f:51:05:07:09:87:03:c8:aa:
cd:2f:b7:54:e7:13:f4:25:cf:ba:1e:0a:6c:b8:61:72:8c:ce:
83:e8:cc:d9:bd:99:0c:d8:9c:72:d0:ac:27:c2:e0:e0:a9:c5:
92:98:45:29:ae:3f:d3:22:04:d7:24:54:c5:cc:99:88:a0:8c:
fb:49:8e:5f:85:3d:42:31:29:db:e2:05:6d:42:18:07:12:c9:
be:4c:3a:4a:84:83:1d:36:df:bb:2c:77:08:8e:16:5f:e7:3a:
ef:c2:fd:92:c7:bc:bd:a7:da:b4:25:83:ca:79:00:dd:ce:64:
ce:63:d6:40:25:96:3d:d0:82:b3:73:77:2b:19:3b:b3:4d:a5:
16:ce:35:db:50:03:47:89:74:67:88:94:1e:26:db:a5:73:0e:
e4:f7:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:54:04 2026 by rpki-client