Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/urTH3sqRO8fTRQs8AZfrczzSfds.roa
File: urTH3sqRO8fTRQs8AZfrczzSfds.roa (raw, json)
Hash identifier: iRsTd9GG0Yi4UTteotvYxwNGCJflgn32QzXWlGWvi9A=
Subject key identifier: BA:B4:C7:DE:CA:91:3B:C7:D3:45:0B:3C:01:97:EB:73:3C:D2:7D:DB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F5C7ED872B155A9992838915BBAE8EF09
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/urTH3sqRO8fTRQs8AZfrczzSfds.roa
Signing time: Mon 13 Jul 2026 17:20:44 +0000
ROA not before: Mon 13 Jul 2026 17:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 203.188.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:7e:d8:72:b1:55:a9:99:28:38:91:5b:ba:e8:ef:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 13 17:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bab4c7deca913bc7d3450b3c0197eb733cd27ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:60:bd:03:cf:a0:37:fc:20:cc:8b:71:10:
07:a6:47:c2:4b:73:db:ba:89:c7:be:8f:08:6d:08:
df:6f:bf:57:dd:be:20:d7:f1:62:1a:08:11:5e:1c:
ef:8a:26:80:4d:ec:aa:46:52:f3:95:5f:c6:c9:30:
c3:eb:db:e0:ab:9d:84:a1:ea:ce:5d:b1:43:2f:22:
c6:59:2f:3b:af:89:13:2e:46:5e:3a:99:a8:b2:5d:
b3:83:e3:e3:f2:82:0a:80:40:86:0f:0f:67:4c:54:
76:b4:6b:9a:6d:10:62:0b:fa:f9:65:44:a8:c1:60:
35:65:1e:30:0f:b3:a7:8f:c8:62:c0:c2:36:d0:94:
a6:c4:15:48:91:d7:bd:4e:b9:73:5f:7d:cd:a6:d5:
7b:93:6c:b6:38:2a:bf:4d:c0:7e:fa:88:2f:0a:d2:
35:df:59:fb:4d:13:a3:d9:dc:70:48:43:50:3c:ef:
40:1f:f3:39:f5:aa:6e:3c:a4:33:b2:b2:45:60:fe:
25:1b:d3:9f:54:36:ac:cb:cd:35:fd:cd:ce:ec:6d:
a9:56:81:3c:1b:1f:6c:94:d3:b8:b8:63:3c:a4:37:
fe:bd:b9:b4:89:a8:8a:8a:cd:4d:dc:a4:5a:fe:79:
42:5d:7c:d6:ba:59:65:b3:9c:fa:bb:b7:88:76:cf:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:C7:DE:CA:91:3B:C7:D3:45:0B:3C:01:97:EB:73:3C:D2:7D:DB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/urTH3sqRO8fTRQs8AZfrczzSfds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
08:14:49:36:a8:9e:b5:b5:52:ea:8d:f0:34:85:cf:1f:82:0d:
a6:cc:f4:e2:2b:25:28:48:15:01:b7:7e:fd:68:f5:c4:ef:ec:
b0:65:6b:90:e1:00:6b:e8:05:bb:6c:3f:e6:ff:d8:70:e1:7b:
86:f1:0a:52:d0:6b:e5:78:d6:aa:00:99:8d:d5:54:d7:d1:6a:
16:79:5d:2d:99:0b:1c:30:18:5c:8c:25:5a:cc:ed:8d:12:e2:
0f:25:e9:c8:d1:11:16:b0:be:ca:d8:61:64:ad:33:05:50:03:
34:c8:d6:d0:d4:44:fa:a6:86:15:5f:a5:7e:70:c9:13:9d:ba:
0c:53:3a:a7:82:9f:a6:4b:6e:8b:f8:5c:db:f2:78:05:5c:fe:
31:57:08:f4:b7:ab:dd:92:7b:90:4f:92:e0:64:84:bc:49:30:
74:e3:22:74:4d:fe:a9:e6:ef:49:47:43:97:83:4a:e8:d0:b0:
f3:d0:4c:4b:43:0f:06:a7:8e:79:39:53:a1:f2:35:94:8f:39:
e9:6f:1e:af:95:fa:b2:84:64:4b:f9:2c:13:df:b6:94:65:f1:
4b:26:98:d1:af:d3:36:c5:c6:4d:f1:13:55:96:3a:99:cb:61:
5d:db:47:92:db:40:6c:5b:12:ba:b5:e6:9b:89:bf:80:73:c5:
41:ce:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:51 2026 by rpki-client