Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/913afe-b2ce-46e3-94ad-9dbae173b30b/1/CDuzubcbzdQ_KlNMY3fTxWoxlfw.roa
File: CDuzubcbzdQ_KlNMY3fTxWoxlfw.roa (raw, json)
Hash identifier: 4qeh54OJiMpbAoNEGf6G/O/x/yzYhqzf66t9NofV+OU=
Subject key identifier: 08:3B:B3:B9:B7:1B:CD:D4:3F:2A:53:4C:63:77:D3:C5:6A:31:95:FC
Certificate issuer: /CN=998a7122d94fb6204c87b7c76ee299cb3f15b170
Certificate serial: 01A1A09A9ED01BE22DD68EE57462B32A90DC
Authority key identifier: 99:8A:71:22:D9:4F:B6:20:4C:87:B7:C7:6E:E2:99:CB:3F:15:B1:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYpxItlPtiBMh7fHbuKZyz8VsXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/913afe-b2ce-46e3-94ad-9dbae173b30b/1/CDuzubcbzdQ_KlNMY3fTxWoxlfw.roa
Signing time: Tue 03 Nov 2026 08:50:50 +0000
ROA not before: Tue 03 Nov 2026 08:50:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24631
IP address blocks: 194.48.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/913afe-b2ce-46e3-94ad-9dbae173b30b/1/mYpxItlPtiBMh7fHbuKZyz8VsXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/913afe-b2ce-46e3-94ad-9dbae173b30b/1/mYpxItlPtiBMh7fHbuKZyz8VsXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYpxItlPtiBMh7fHbuKZyz8VsXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:9a:9e:d0:1b:e2:2d:d6:8e:e5:74:62:b3:2a:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998a7122d94fb6204c87b7c76ee299cb3f15b170
Validity
Not Before: Nov 3 08:50:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=083bb3b9b71bcdd43f2a534c6377d3c56a3195fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:23:82:01:2b:e6:10:2c:7a:1e:ae:48:11:
67:40:1d:82:f0:b7:62:19:42:91:54:e2:e8:5e:4b:
e4:6b:a4:7d:25:57:71:1e:24:8e:85:32:e7:0b:77:
0b:09:6e:2f:d4:4d:59:10:84:b8:4e:cc:5f:69:49:
95:e2:9f:f4:92:af:16:7b:fb:09:50:0c:7a:42:1c:
f4:a3:11:0e:c2:c4:ee:ef:f7:57:61:d7:32:ed:f5:
5c:33:91:12:61:8b:c2:8e:ea:3f:35:55:2b:e9:fc:
89:30:5d:31:09:92:21:5c:d7:80:5e:bb:6f:09:4f:
ba:80:d3:47:fa:93:8a:bf:4d:88:60:4d:c8:46:29:
58:89:4f:ec:0e:21:1a:23:d8:4d:4c:4b:a3:eb:e3:
2c:14:4f:50:09:32:ba:07:78:3a:e5:7d:e6:4c:3d:
2b:6c:38:87:04:43:90:4b:91:d2:0e:bf:de:99:91:
c0:9d:31:74:5f:ec:e9:80:a8:f1:9b:6c:7b:92:a9:
7c:97:fa:bc:01:11:e3:c5:af:3a:46:7e:39:c0:12:
3d:13:db:0a:7f:63:b9:68:b0:cd:7b:e3:d3:50:15:
6c:d2:c6:46:d2:20:9a:31:7a:81:5e:0c:ff:21:92:
84:20:0a:6f:d6:aa:0b:57:91:ef:3b:dd:eb:ba:57:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:B3:B9:B7:1B:CD:D4:3F:2A:53:4C:63:77:D3:C5:6A:31:95:FC
X509v3 Authority Key Identifier:
keyid:99:8A:71:22:D9:4F:B6:20:4C:87:B7:C7:6E:E2:99:CB:3F:15:B1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYpxItlPtiBMh7fHbuKZyz8VsXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/913afe-b2ce-46e3-94ad-9dbae173b30b/1/CDuzubcbzdQ_KlNMY3fTxWoxlfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/913afe-b2ce-46e3-94ad-9dbae173b30b/1/mYpxItlPtiBMh7fHbuKZyz8VsXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.197.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ec:42:a1:4b:0c:1d:dd:89:41:58:fe:3b:d3:62:19:b6:27:
d8:f5:53:b6:56:8d:f1:d9:64:73:39:f9:c5:7d:33:36:7d:85:
89:3f:8a:1c:eb:35:13:50:d3:24:36:f3:f5:ad:ab:53:09:03:
f6:1e:93:ab:6f:40:4b:ef:95:32:91:04:6a:9c:19:78:b0:7a:
31:c8:ef:23:e3:84:05:4a:96:32:b1:92:db:74:fc:44:b0:95:
5d:64:ef:15:5c:62:3d:56:38:b3:09:97:c8:50:2d:17:5c:5b:
7e:6f:30:bc:b0:cb:b8:5f:07:3c:4b:24:67:ad:48:97:f6:ce:
65:18:7e:1c:f2:06:5d:d2:b8:db:85:de:2e:5c:ae:28:75:ab:
14:a1:2b:cc:bd:e0:3a:6a:5f:72:a9:61:ce:51:0c:93:b0:a4:
51:f1:f6:9a:09:45:af:dc:23:46:db:64:c8:5b:bd:72:39:4b:
a6:a3:5a:9c:80:4b:3c:5e:0d:d5:07:ba:aa:be:78:f2:72:47:
6f:84:63:33:3d:1e:2b:94:8f:a1:93:5d:8f:df:56:5f:61:83:
30:3a:6e:73:a9:40:ae:fb:eb:bd:5b:02:7c:ea:db:96:2d:7f:
ad:04:93:93:f5:e4:26:2b:d5:e7:b8:af:22:49:9e:96:37:f7:
c5:1b:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:18 2026 by rpki-client