Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/UDflW4qKHgaeJ7MC9kLoPznsjiU.roa
File: UDflW4qKHgaeJ7MC9kLoPznsjiU.roa (raw, json)
Hash identifier: pJeNm8HWUIyS3A3dKqU3o6igG4hqSi4lZOd1wNQLmxU=
Subject key identifier: 50:37:E5:5B:8A:8A:1E:06:9E:27:B3:02:F6:42:E8:3F:39:EC:8E:25
Certificate issuer: /CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Certificate serial: 019F236872E0FDF3264D2A00B4184F577B4A
Authority key identifier: 6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/UDflW4qKHgaeJ7MC9kLoPznsjiU.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 193.8.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:e0:fd:f3:26:4d:2a:00:b4:18:4f:57:7b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5037e55b8a8a1e069e27b302f642e83f39ec8e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:57:a3:b6:3a:1b:d6:e1:3d:8e:e2:8b:3a:
db:5a:a6:d1:7c:3a:d9:85:59:a6:0d:b1:cc:d6:15:
19:07:87:59:88:56:f0:16:5a:dc:cb:51:c9:4c:76:
ea:8b:b1:71:5b:c4:b6:41:49:0e:63:e1:75:a3:57:
b0:71:a7:e0:42:c8:30:1c:31:a4:74:8a:4f:cf:aa:
be:fc:72:b7:a9:0d:e6:61:8a:8f:14:aa:9a:b5:e9:
fd:ad:05:86:de:02:6a:d1:97:e6:bc:b6:68:e6:1d:
cb:01:b8:3a:05:93:d6:6c:9e:d6:38:56:06:7b:ca:
14:0d:ba:42:3b:c1:da:9d:67:b6:ba:dc:90:1f:3c:
39:57:b7:f3:ec:fa:9e:3e:01:1f:81:46:7a:c2:db:
f6:ee:bc:bb:87:da:5b:fa:da:5b:dd:b3:61:b5:85:
0d:cc:09:6a:31:5a:3d:7c:7b:06:b6:a3:0f:d2:74:
85:bf:e2:61:51:38:77:75:aa:25:f3:30:16:4e:88:
7a:79:b6:c0:17:0e:18:d5:4c:0d:3b:bb:97:04:a3:
74:3c:09:79:3a:5d:ae:5b:c8:83:ed:d6:8f:52:4e:
42:62:aa:b1:9b:34:4c:b5:fe:88:31:81:76:5b:a2:
55:ef:82:45:e9:3e:e7:4b:e7:8f:30:3d:e4:09:a4:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:E5:5B:8A:8A:1E:06:9E:27:B3:02:F6:42:E8:3F:39:EC:8E:25
X509v3 Authority Key Identifier:
keyid:6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/UDflW4qKHgaeJ7MC9kLoPznsjiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.181.0/24
Signature Algorithm: sha256WithRSAEncryption
25:81:33:e5:30:15:07:18:12:8b:99:2d:8f:10:95:52:b6:e7:
c0:18:93:93:28:45:b9:df:ac:62:7b:59:46:fc:fb:59:03:c7:
b0:93:7c:e7:76:55:4b:5a:f2:cf:72:7e:9a:b7:86:12:eb:7f:
9a:c2:8e:41:2f:54:c1:e8:8c:10:9f:36:27:1f:f2:af:da:9e:
66:54:7b:36:e3:24:a4:b1:fc:c5:3b:2b:7f:01:34:12:b3:e5:
80:7a:5c:99:9c:91:ed:09:b9:ff:4c:70:c5:d6:ed:5e:6e:0d:
ca:87:ee:e8:6e:73:93:d3:3e:d1:35:3a:5e:46:62:6a:87:f7:
19:75:ad:41:72:75:4b:3a:76:4f:d9:89:dd:53:e1:a3:35:6c:
f6:33:88:b1:b4:6d:b4:91:cf:df:f7:34:bc:4e:12:97:17:4f:
e7:61:f2:88:0c:92:4b:25:19:3c:d7:50:f4:d9:69:9d:1b:1d:
0b:4a:e4:c5:47:e3:99:b9:56:d1:cc:f7:a3:89:eb:cb:7d:bf:
c3:7b:b4:fa:79:98:4f:3c:20:f7:b3:e6:1f:e8:e1:9d:9f:a7:
ea:9c:b8:28:c0:98:fb:ed:c6:27:e9:29:35:1b:64:10:71:8e:
22:c0:a8:dc:0e:09:07:b9:47:7e:05:c6:dc:d7:03:3f:aa:70:
b8:41:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:22 2026 by rpki-client