Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa
File: kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa (raw, json)
Hash identifier: ZLVUzims+TzWoAmZUdu5UaeXmFUGOW5FgDZQ1MpAcHo=
Subject key identifier: 90:4D:5C:D8:5A:2A:3D:B1:58:A6:E3:FF:DE:E0:F2:0C:C3:69:8B:70
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019DC6887D42CCA6565207E3395D996B904C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa
Signing time: Sat 25 Apr 2026 21:25:26 +0000
ROA not before: Sat 25 Apr 2026 21:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c6:88:7d:42:cc:a6:56:52:07:e3:39:5d:99:6b:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 25 21:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904d5cd85a2a3db158a6e3ffdee0f20cc3698b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:5a:ec:a9:71:e2:f4:3f:7e:0e:15:36:78:
80:b1:1e:b1:c9:84:28:4e:6c:1d:5d:19:22:03:19:
f9:4b:13:b7:a3:4b:f5:56:c3:00:32:42:28:31:b9:
ad:2c:17:87:56:1c:93:75:3b:aa:13:12:02:0b:46:
4f:eb:3c:8d:87:9b:4a:df:c4:7e:ed:25:95:c3:3b:
02:13:93:70:20:83:68:30:a3:b1:2c:b4:fb:8c:7f:
76:17:e5:51:f6:b1:0d:50:f9:25:ca:79:f1:10:2c:
9a:3b:bb:56:ab:80:1b:b0:48:26:9e:a1:4e:c4:f4:
4b:d3:f9:20:70:de:a2:d3:4a:c8:bb:3f:92:46:ab:
23:69:4c:dc:bd:35:ea:bc:62:9a:7b:bf:58:68:c3:
79:d3:0a:6f:56:e6:b1:b2:b7:5b:25:bd:cc:ee:5e:
7d:2d:1c:68:13:46:02:54:89:1b:07:b9:e7:4c:7c:
36:0c:08:e9:df:c5:82:c3:12:2d:9e:83:05:22:4a:
3a:be:d7:f2:18:ba:b5:78:50:f2:0f:7d:14:51:8d:
89:18:48:74:40:e5:64:95:58:8d:b4:f4:68:0d:7c:
bd:d6:e1:67:08:dd:1d:7d:30:b3:4d:5a:0e:9a:85:
9f:22:db:ce:1f:93:e2:52:c8:f1:96:e2:9f:30:16:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:5C:D8:5A:2A:3D:B1:58:A6:E3:FF:DE:E0:F2:0C:C3:69:8B:70
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/22
Signature Algorithm: sha256WithRSAEncryption
25:68:7b:55:33:87:cf:bb:f3:4e:9a:e3:1f:ba:12:2f:40:07:
a0:63:61:c5:0b:d9:41:a5:46:01:a0:af:ff:71:15:e8:72:d0:
8d:ae:36:e6:97:07:e1:51:ea:ac:4b:b2:17:da:62:13:30:08:
6f:ce:df:b0:a5:55:7e:0c:8b:ca:5f:07:78:8d:e1:c7:d8:c5:
aa:fa:98:d6:ae:d7:d8:cc:d0:61:79:02:27:cc:87:05:5a:dd:
be:fb:71:e9:5e:27:88:f6:4e:b6:34:5c:c9:44:47:43:37:a2:
d0:fe:7b:1c:8d:d9:b0:69:85:38:22:d2:f9:67:70:48:a3:00:
a0:b3:9a:0e:e9:c9:bd:17:df:d7:7d:9a:52:a0:7b:f1:24:7f:
28:f2:40:22:8d:6f:7b:b9:31:12:39:8b:08:67:06:ab:47:0b:
25:8d:51:b5:0d:d9:3a:a7:f3:ce:06:11:ad:f7:b8:b9:a7:ed:
ed:f5:51:ed:83:63:67:0e:44:96:df:ee:19:b3:96:42:4b:61:
99:13:45:80:07:3c:98:89:06:87:51:b8:25:52:32:78:3e:ca:
d6:b6:d2:7e:83:f9:60:05:7b:54:8e:9b:99:15:3b:36:19:e5:
89:c6:88:8c:e4:6b:d0:98:15:bc:15:9e:af:80:6f:4d:51:cb:
f0:84:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:46:16 2026 by rpki-client