Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/uox9Nc0O9CJq0e64gzsPQekDCMg.roa
File: uox9Nc0O9CJq0e64gzsPQekDCMg.roa (raw, json)
Hash identifier: ERSV0kbvjLPbsPDrGybsMiHpmNJWDqc9dKdBHSCap64=
Subject key identifier: BA:8C:7D:35:CD:0E:F4:22:6A:D1:EE:B8:83:3B:0F:41:E9:03:08:C8
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019F23C86658B34E276474431D4512139492
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/uox9Nc0O9CJq0e64gzsPQekDCMg.roa
Signing time: Thu 02 Jul 2026 17:02:43 +0000
ROA not before: Thu 02 Jul 2026 17:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212080
IP address blocks: 193.19.144.0/24 maxlen: 24
193.19.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:c8:66:58:b3:4e:27:64:74:43:1d:45:12:13:94:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Jul 2 17:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba8c7d35cd0ef4226ad1eeb8833b0f41e90308c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:f1:c7:40:8a:73:03:7a:3a:0f:05:42:dc:
27:be:d2:8b:a2:45:6e:69:33:66:3f:1a:7d:0e:c1:
1d:76:b6:a7:3e:2d:62:9f:a9:38:6c:ae:15:76:78:
86:92:99:79:55:ae:dc:73:e5:66:9e:9d:7f:f4:d8:
db:3e:96:59:43:88:69:5f:f3:70:f0:68:64:65:d4:
80:ac:ae:e9:fb:5c:6c:58:8c:b0:10:ca:8c:85:f9:
e6:84:cf:dc:53:b5:c1:86:00:1c:56:23:5e:45:95:
14:1c:d1:75:8e:8e:9b:d8:f0:27:18:91:a0:1e:a8:
44:b0:cb:c1:ba:ae:fe:d8:48:41:40:83:fb:22:2a:
4a:43:7f:77:bb:fd:e5:b0:25:a4:15:86:7c:b5:a2:
4c:08:2f:f6:5c:75:66:2c:05:4e:2e:cd:08:34:5c:
1f:b2:53:ec:72:4f:8c:98:65:a4:40:87:ac:23:8c:
48:0e:4c:2e:cf:ac:cf:ca:57:92:fa:10:2d:90:2f:
99:e5:eb:e2:a7:cf:51:25:e7:29:e8:cc:af:a0:76:
18:73:70:98:cd:47:7f:c4:85:ac:4a:01:01:0d:f4:
be:bb:36:d2:64:86:37:27:67:8e:f9:c8:e1:79:f3:
3f:62:0c:2a:7d:e7:dd:1a:2a:8d:14:d2:7d:e8:80:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:7D:35:CD:0E:F4:22:6A:D1:EE:B8:83:3B:0F:41:E9:03:08:C8
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/uox9Nc0O9CJq0e64gzsPQekDCMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.144.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:9a:cb:db:82:7e:e5:64:22:f8:ca:0c:15:8f:16:57:2d:01:
be:b8:a8:09:e2:da:6e:b7:b3:38:16:f0:05:08:c5:57:89:76:
8c:7b:98:2b:3d:13:ba:5e:af:74:45:2d:67:f4:ff:1c:24:be:
78:50:cd:ed:8b:66:83:81:7a:80:b7:33:d8:62:17:72:f8:3d:
90:c7:39:dd:ba:f6:a2:f9:5b:17:3c:76:ff:73:ae:95:ca:f2:
66:1d:af:f5:28:c4:84:3e:8c:bb:72:06:55:f0:f1:3e:ab:c2:
0c:9e:7b:04:30:8c:b6:03:8f:30:f7:5b:40:3f:6c:5e:c8:ed:
1a:1d:c6:70:cb:01:e0:25:6d:06:6c:08:86:b6:23:1d:00:a0:
62:a1:c7:41:5c:92:dd:6b:1d:4c:fc:b5:9c:4f:eb:0b:35:56:
82:cf:04:2a:56:13:55:9a:02:82:24:d9:5a:27:8c:46:32:f6:
bd:8e:6c:b7:16:05:ac:41:f5:73:58:93:d8:d0:a1:16:b3:84:
f0:97:b4:3e:d4:a4:77:7f:89:5b:65:0f:b8:5c:90:d1:7e:ef:
f7:96:67:78:0d:18:57:a7:05:03:3b:3f:f5:fe:31:15:3e:18:
7a:ce:70:14:0b:58:66:5c:e2:68:53:08:9d:c0:7d:3d:cd:49:
18:ab:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:24 2026 by rpki-client