Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/63JgYqrtG6KoZuuOrK4W3du1Duo.roa
File: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (raw, json)
Hash identifier: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=
Subject key identifier: EB:72:60:62:AA:ED:1B:A2:A8:66:EB:8E:AC:AE:16:DD:DB:B5:0E:EA
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 019F236830849417A6FF99CA7B1EA26DB518
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/63JgYqrtG6KoZuuOrK4W3du1Duo.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33911
IP address blocks: 193.202.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:30:84:94:17:a6:ff:99:ca:7b:1e:a2:6d:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb726062aaed1ba2a866eb8eacae16dddbb50eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:1c:00:a7:38:60:b3:dc:cd:c7:54:ca:5a:
e5:96:14:ec:c0:3e:14:43:de:43:0e:6e:b8:99:96:
1d:50:e3:78:6f:58:46:85:81:83:26:88:db:6f:a3:
e6:e0:eb:60:3e:6a:3d:ab:28:8e:63:34:a8:23:96:
4e:4a:8a:a1:ef:61:66:72:ef:26:a6:29:bf:09:f7:
c6:b2:47:2c:2e:3f:ee:f8:32:29:63:cd:9f:09:55:
ed:cf:3d:e5:ab:d6:27:26:89:af:14:c4:81:3b:48:
08:70:d1:f4:4a:02:bf:19:d5:fe:70:88:9b:61:dc:
ba:d0:ec:91:29:5e:98:86:6d:b3:be:58:d8:d5:76:
17:42:63:b6:84:c7:b4:b7:ca:8f:86:e7:be:39:aa:
f0:8e:e0:11:7d:7e:d8:e7:c2:8a:b4:60:63:d0:a5:
21:12:0e:ae:27:fd:5c:91:7d:ea:45:2f:b6:cd:f1:
57:41:ba:5f:c2:2c:d3:3d:fc:da:ef:d7:0f:b6:71:
1a:17:28:4b:55:a2:1d:3b:25:66:4a:39:f9:65:ba:
2d:05:dd:14:0f:9b:b7:df:19:97:cc:ce:c9:dd:2d:
18:24:3e:4d:11:77:dc:7b:89:e4:64:34:78:26:8d:
57:99:df:f9:65:92:86:e5:8f:44:ed:b7:84:e8:35:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:60:62:AA:ED:1B:A2:A8:66:EB:8E:AC:AE:16:DD:DB:B5:0E:EA
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/63JgYqrtG6KoZuuOrK4W3du1Duo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.126.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3c:0e:df:6d:99:c6:26:9f:00:35:b7:9a:91:3c:21:52:ac:
71:b0:b5:64:b0:f5:12:92:a9:d5:b5:fd:97:42:27:ae:52:90:
b7:9b:dd:8e:6e:d2:2d:a5:90:dc:69:24:32:b1:5b:16:86:5e:
48:a6:f7:98:94:b8:da:a5:81:fd:cb:22:bd:78:c4:cc:7b:88:
8b:18:80:a5:df:db:6c:4e:c1:e9:cc:2b:11:45:c2:79:5d:cf:
22:2f:a1:f0:c3:2f:32:e7:e0:70:bc:12:3c:92:4c:7f:60:8e:
b8:d2:2f:a8:49:2e:d5:a3:9d:55:58:2c:a1:92:25:55:da:dd:
53:71:d8:12:56:2e:9f:5e:f6:ab:f2:10:30:61:57:e0:5b:0e:
98:72:b3:f2:cb:8a:78:84:16:d4:0d:38:ea:95:3b:81:40:b4:
46:f3:33:ce:67:cb:19:ab:3e:c7:7f:ad:63:64:e3:47:8c:65:
6b:c0:99:a2:8f:96:3b:25:75:9c:7c:af:21:8d:c2:b0:c9:fa:
cf:7e:3f:fa:74:ee:dd:b1:6b:e7:62:6c:8c:19:d3:59:39:05:
f5:03:37:64:4e:59:c7:46:e4:44:4f:b4:06:c9:2f:2c:6b:43:
4d:ec:22:9c:7c:0f:33:68:68:fb:db:47:1e:12:60:b7:75:94:
aa:66:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:03 2026 by rpki-client