Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/ASjoruai3KnAAHnbGzUX99HhN0g.roa
File: ASjoruai3KnAAHnbGzUX99HhN0g.roa (raw, json)
Hash identifier: 4FIl1h2XJbFBe2bFejPyIMlAp59IVK0TKVlC3QwpJjY=
Subject key identifier: 01:28:E8:AE:E6:A2:DC:A9:C0:00:79:DB:1B:35:17:F7:D1:E1:37:48
Certificate issuer: /CN=0b1a8394523f94dc6cb98a06c52f577ee000af89
Certificate serial: 01A03DEBF01E44A1EFFA65F12831F2DC4E4B
Authority key identifier: 0B:1A:83:94:52:3F:94:DC:6C:B9:8A:06:C5:2F:57:7E:E0:00:AF:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/ASjoruai3KnAAHnbGzUX99HhN0g.roa
Signing time: Wed 26 Aug 2026 11:54:27 +0000
ROA not before: Wed 26 Aug 2026 11:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29161
IP address blocks: 193.228.208.0/20 maxlen: 20
193.228.208.0/23 maxlen: 23
193.228.210.0/23 maxlen: 23
193.228.212.0/23 maxlen: 23
193.228.218.0/23 maxlen: 23
193.228.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:eb:f0:1e:44:a1:ef:fa:65:f1:28:31:f2:dc:4e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1a8394523f94dc6cb98a06c52f577ee000af89
Validity
Not Before: Aug 26 11:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0128e8aee6a2dca9c00079db1b3517f7d1e13748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ba:cb:f0:2d:96:52:3b:f5:1c:b6:a0:db:1b:
67:71:f4:68:ce:cb:0d:05:8c:c4:3d:c6:c6:6c:0e:
2e:c3:c4:a8:1f:f4:84:ae:e4:1a:d4:b7:4e:ab:5b:
8e:ce:ff:5f:6c:bf:6f:73:05:bd:4b:a8:69:73:49:
b2:ed:f7:01:6d:fa:17:f3:93:63:51:89:1f:4d:7b:
de:34:93:d4:60:a7:72:5a:8a:ed:14:55:31:d4:98:
e9:67:05:2b:00:33:6a:02:c7:9e:c1:e5:c6:5b:d7:
04:1e:73:f8:ba:82:f2:dd:68:32:d2:ad:d1:cc:7f:
9d:b8:db:a5:99:2f:c3:fb:11:99:86:e6:d1:c9:eb:
67:f9:3e:57:67:79:79:bd:70:03:23:6b:e4:ce:b7:
e9:37:6f:db:9f:c5:b3:17:a2:e0:10:7a:d4:8a:ed:
9a:57:d4:14:a6:db:0e:d0:3d:b7:67:a1:dc:6f:ed:
7f:b3:cd:1e:17:50:67:88:2a:10:1b:cc:f6:55:b5:
a7:9b:dc:b0:72:93:88:8a:98:94:65:2b:12:43:e7:
4b:ad:46:5c:2a:0b:33:ce:f9:ba:5b:dd:a1:ba:8b:
b9:93:80:4b:50:c6:03:18:95:36:bb:97:9b:aa:40:
90:8c:e3:06:9d:ae:2e:48:15:8d:ba:08:6d:f5:94:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:E8:AE:E6:A2:DC:A9:C0:00:79:DB:1B:35:17:F7:D1:E1:37:48
X509v3 Authority Key Identifier:
keyid:0B:1A:83:94:52:3F:94:DC:6C:B9:8A:06:C5:2F:57:7E:E0:00:AF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxqDlFI_lNxsuYoGxS9XfuAAr4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/ASjoruai3KnAAHnbGzUX99HhN0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/632cc0-c9fd-46ae-94c4-58e18cf8fda8/1/CxqDlFI_lNxsuYoGxS9XfuAAr4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.208.0/20
Signature Algorithm: sha256WithRSAEncryption
84:89:98:b7:7b:2b:47:14:b8:ba:36:df:6e:2c:84:12:37:43:
a1:f2:6d:00:1b:7c:26:a3:7d:d7:29:cf:7d:46:33:e3:45:67:
dd:ff:07:b0:e1:9a:5b:09:60:9f:9f:cf:5f:37:34:c8:db:62:
c2:84:4d:3d:b5:f4:25:88:3a:6d:1f:26:7e:81:f2:6f:c7:57:
11:62:c5:44:70:df:da:45:f6:00:3b:ff:cc:39:f1:79:1d:ca:
b1:01:85:a3:bb:34:e9:e9:03:f0:c1:8b:c9:af:58:2e:09:00:
cc:f3:93:75:d3:f1:1d:1a:b8:54:a8:76:00:4c:33:5e:08:d8:
48:3d:d3:88:79:c1:bb:88:37:d5:4f:18:09:0a:b9:aa:79:9f:
09:a1:5f:d9:d9:0a:e3:eb:fa:e3:ff:9a:9c:ab:3c:b5:60:f8:
c2:56:6a:94:9b:f8:3c:30:92:14:0f:e2:d8:fe:75:29:0b:38:
0c:b3:d8:c7:39:b1:84:7e:ac:0d:d9:aa:00:bb:ee:2a:26:72:
86:95:fc:9a:5b:3c:a9:05:34:6c:4a:54:77:2e:09:27:69:97:
63:91:a5:13:8b:62:a2:94:1f:8a:5c:21:e4:f8:8f:12:63:89:
fa:99:50:5e:86:27:c6:98:2b:57:f4:4a:7b:c6:ed:bb:5c:71:
f9:44:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:02:52 2026 by rpki-client