Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Rciw8xcop-ztaPjnheDuhjtKoyg.roa
File: Rciw8xcop-ztaPjnheDuhjtKoyg.roa (raw, json)
Hash identifier: 46LGaoPWJWe02ky3S8huVu98APU0A7b640T6qOEQrUE=
Subject key identifier: 45:C8:B0:F3:17:28:A7:EC:ED:68:F8:E7:85:E0:EE:86:3B:4A:A3:28
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A0DA22951A31EE1273FC69939997FD1E8A
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Rciw8xcop-ztaPjnheDuhjtKoyg.roa
Signing time: Fri 25 Sep 2026 19:54:54 +0000
ROA not before: Fri 25 Sep 2026 19:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 194.93.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:22:95:1a:31:ee:12:73:fc:69:93:99:97:fd:1e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Sep 25 19:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45c8b0f31728a7eced68f8e785e0ee863b4aa328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:d7:bf:67:a2:d2:bd:91:8c:33:9e:b1:e6:
64:65:c3:62:02:09:b2:8c:20:1d:c0:38:c5:33:04:
0b:33:22:ed:39:e9:2b:e1:2e:f3:46:b8:61:25:6f:
74:4c:00:76:30:71:97:b9:b4:44:e0:22:68:4d:a5:
14:94:08:10:8d:6e:a8:e7:5c:03:bf:c7:8c:07:bf:
3e:5a:5e:02:e4:b6:2c:87:d1:2c:05:fa:4c:c9:d7:
6c:9f:93:44:15:a6:79:84:f4:82:d0:7a:c1:ae:44:
6a:9e:f5:b4:60:c3:1b:d8:e1:27:90:d2:02:5d:63:
34:db:73:ab:75:1c:45:03:76:ba:31:a5:73:81:0d:
8d:ec:3e:a3:50:47:79:df:cf:ec:b1:48:01:39:74:
f7:fa:27:7b:19:c8:c4:ac:12:71:1a:98:83:ed:5d:
5a:a0:1e:93:6b:c9:ee:4d:94:b3:98:79:c2:3d:7a:
5e:11:91:30:3f:ba:e9:c8:14:38:c2:1e:73:05:62:
fd:b3:75:71:50:ed:c4:d7:6c:5a:3c:62:45:da:32:
fc:32:06:82:d7:c6:26:ba:61:7a:b8:0d:63:6a:1d:
52:94:cc:0a:85:06:d0:a8:1a:a6:64:35:68:40:aa:
4a:31:96:38:af:41:f4:9c:33:ff:b4:1e:81:96:ae:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C8:B0:F3:17:28:A7:EC:ED:68:F8:E7:85:E0:EE:86:3B:4A:A3:28
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Rciw8xcop-ztaPjnheDuhjtKoyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.58.0/24
Signature Algorithm: sha256WithRSAEncryption
79:80:8a:15:3b:e8:52:27:48:e6:8e:41:36:63:05:e6:95:6e:
3d:c3:4f:3b:7f:6e:fd:e6:b4:dd:44:50:c1:b4:fc:5d:cb:1d:
18:72:29:5a:c8:70:73:7a:84:fc:b4:8a:3a:33:32:92:ee:04:
5f:e9:07:6d:9b:c2:3d:7a:73:a3:91:66:c0:d9:32:5b:ad:9a:
dd:05:12:dd:fd:be:12:63:5e:55:1e:08:fe:46:f5:81:24:0d:
af:e9:76:3a:ac:63:d6:7d:84:bc:ed:2d:f6:e3:8f:b0:cc:de:
b0:c8:a8:e4:53:43:de:5a:24:eb:68:d6:6d:cf:81:5a:66:07:
06:85:4f:e5:4f:44:3f:eb:d4:1c:91:84:f9:7b:de:ad:e4:b9:
36:27:2d:b7:3b:00:1f:d6:4d:44:85:25:ae:1c:d9:77:13:41:
df:c0:a9:e8:8a:04:44:d8:2a:93:ab:d3:aa:5a:ab:0b:ce:2f:
11:bd:b2:d6:2f:13:12:c8:ac:a6:1b:14:41:b8:41:05:0d:5b:
49:74:55:49:6b:9d:41:70:28:2b:ed:67:ee:ad:f3:92:da:a6:
04:3c:8d:f5:6d:88:0e:40:9f:ce:57:fd:3a:c9:e2:5d:f6:ed:
0e:68:6d:4e:98:10:63:91:f5:d7:03:ed:11:82:aa:bd:e3:a7:
14:4c:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:39:00 2026 by rpki-client