Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/Rubo6-NbY96YPObrTra-uq3P8fU.roa
File: Rubo6-NbY96YPObrTra-uq3P8fU.roa (raw, json)
Hash identifier: ky/M0LbnwTKBtipN4E15VVxICNF2Xh8wtPVIJDRLAKs=
Subject key identifier: 46:E6:E8:EB:E3:5B:63:DE:98:3C:E6:EB:4E:B6:BE:BA:AD:CF:F1:F5
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 019D1F38A4B4762FC5527F91158F35643A01
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/Rubo6-NbY96YPObrTra-uq3P8fU.roa
Signing time: Tue 24 Mar 2026 09:41:38 +0000
ROA not before: Tue 24 Mar 2026 09:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5488
IP address blocks: 193.41.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:38:a4:b4:76:2f:c5:52:7f:91:15:8f:35:64:3a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Mar 24 09:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e6e8ebe35b63de983ce6eb4eb6bebaadcff1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:9f:c7:fd:cd:be:bb:3c:45:cc:38:e7:32:
a2:fa:9a:0a:8e:81:79:36:56:f6:ef:ca:b7:e0:ba:
35:5b:5d:4f:18:18:86:1c:7e:e4:31:74:90:8d:a1:
f5:bd:90:4d:56:9c:16:2b:52:10:25:ed:dd:16:f8:
ed:08:dc:d9:48:89:d9:ec:5b:bd:b1:d7:74:87:9e:
ea:62:5a:35:55:e9:ef:59:45:82:7f:8a:ea:18:a9:
06:fb:8b:46:70:f5:8a:35:6f:05:a6:bb:fa:0e:b5:
25:fc:ff:5c:ee:03:2b:ce:0e:9e:48:ab:28:d2:f7:
b7:53:f3:19:ea:c9:87:a0:9a:04:f8:34:ca:b8:ba:
a5:ea:00:6a:b5:78:01:51:c9:7b:c6:73:4a:5b:f7:
08:60:62:0e:c2:ff:9c:a6:73:e7:9c:fb:aa:b9:b3:
86:44:d3:2a:b3:d0:53:3c:9d:92:c1:85:2d:bc:f5:
13:67:7f:53:ed:18:bc:09:33:0d:59:01:e2:68:c6:
e5:a7:2b:04:fa:72:0b:b5:32:cb:70:c5:88:a5:a1:
7e:68:04:17:99:c0:cb:af:1e:d6:2a:5e:87:64:62:
0c:c0:ae:ff:80:35:b9:d6:f5:0a:7f:a5:72:11:8d:
74:21:3a:db:bb:67:dc:ba:9f:d5:fd:dc:aa:0c:c5:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:E8:EB:E3:5B:63:DE:98:3C:E6:EB:4E:B6:BE:BA:AD:CF:F1:F5
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/Rubo6-NbY96YPObrTra-uq3P8fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.42.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6e:93:3b:e6:4f:01:3d:b8:82:be:81:88:96:30:04:d1:89:
ad:e9:65:3e:1e:5c:19:3f:bc:a8:80:03:9f:93:ba:55:14:bd:
f5:da:25:70:55:ca:aa:21:13:9a:2c:9c:c1:14:00:d5:3c:94:
3a:ae:ea:14:b3:76:eb:63:2a:3d:ec:12:6f:2b:4d:ea:74:b4:
6a:96:3e:85:19:c0:6e:ce:d7:5e:4a:08:9b:e8:8b:67:31:dd:
76:ca:dc:1d:ea:00:77:f9:27:7c:72:d7:65:8a:f2:d9:dd:73:
4b:32:af:46:96:f5:a0:c5:aa:b0:23:d4:93:32:60:08:a0:32:
9e:09:ad:64:68:a1:aa:55:f4:25:e4:dc:9b:08:5b:9b:50:cc:
73:fe:cd:1b:75:9a:4a:61:69:6f:7f:65:cf:2e:9c:3f:f1:86:
a8:8c:a9:f2:47:09:c1:ff:74:f8:70:be:94:0f:af:ed:ed:0a:
1f:97:fc:d0:78:d9:e9:f7:79:37:06:f2:6c:b5:f2:89:37:9e:
ff:f7:56:f8:12:b0:5d:ae:7e:63:a1:e2:08:ea:cd:e9:bb:0f:
a6:d8:fc:5e:12:de:42:d6:77:46:27:bb:26:03:99:1f:08:96:
65:fa:cf:39:b2:c5:e9:e2:f3:b6:72:cf:34:15:89:11:bd:a3:
11:fb:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:03 2026 by rpki-client