Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/CISbF6n9QuqFQNm8mHoc5nc6W1g.roa
File: CISbF6n9QuqFQNm8mHoc5nc6W1g.roa (raw, json)
Hash identifier: HzRYUgonDOHDYVqUqdNB4UJzMf7057jbapRs6JAnALg=
Subject key identifier: 08:84:9B:17:A9:FD:42:EA:85:40:D9:BC:98:7A:1C:E6:77:3A:5B:58
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 019CB9113270C5465F211CEEF0D5016B4EC2
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/CISbF6n9QuqFQNm8mHoc5nc6W1g.roa
Signing time: Wed 04 Mar 2026 13:37:17 +0000
ROA not before: Wed 04 Mar 2026 13:37:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59479
IP address blocks: 130.193.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:11:32:70:c5:46:5f:21:1c:ee:f0:d5:01:6b:4e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Mar 4 13:37:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08849b17a9fd42ea8540d9bc987a1ce6773a5b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:5f:7d:44:d3:d7:d8:1a:11:a4:92:e8:5a:
49:a3:49:30:43:6e:fd:6e:21:c9:fa:6d:42:e8:6a:
69:fe:53:06:7b:7e:23:18:a5:c2:66:27:22:6c:81:
b9:4c:f4:10:a1:cb:bd:53:24:4d:45:67:79:8b:4f:
04:c8:67:bd:fc:45:4c:ef:b0:34:0b:77:29:1e:a8:
1d:ae:67:0e:4f:0b:ce:81:56:82:d7:c0:d4:f8:80:
0b:a5:90:ac:46:35:70:b2:38:4a:79:bd:83:68:39:
59:60:67:3a:49:26:84:cf:98:14:01:9f:f4:91:a2:
91:c1:38:ff:31:bf:3d:19:c1:e0:b2:29:25:24:28:
b0:6b:ef:14:3a:fe:cf:00:cc:92:12:4f:f8:8c:a3:
51:f4:d0:ac:c1:e6:1c:0e:dd:59:90:7f:4c:6f:7f:
21:ba:20:84:68:75:ec:13:fb:55:88:f4:2e:3b:b9:
85:96:c3:ce:9f:8e:2e:9a:0e:a7:b0:4a:e8:4a:e4:
e4:dc:83:45:00:ee:76:2d:3d:22:0c:2a:dd:07:1c:
cb:f1:3e:37:e2:3e:91:e2:7e:2f:44:af:57:7c:a9:
cf:98:47:0f:44:f1:76:5c:93:64:f1:cc:b4:18:a5:
85:4e:b2:2f:55:19:21:05:d2:11:37:ab:35:0c:cd:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:9B:17:A9:FD:42:EA:85:40:D9:BC:98:7A:1C:E6:77:3A:5B:58
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/CISbF6n9QuqFQNm8mHoc5nc6W1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:88:92:83:a5:8c:25:47:31:2a:ef:9b:86:66:b6:3c:30:87:
ec:46:de:55:0c:83:f1:ba:e2:72:88:d0:82:84:f6:ee:94:c7:
f9:53:f4:ab:87:37:be:8a:6d:e8:58:d1:6c:39:c0:9d:c7:ee:
0d:f7:98:fd:02:73:4b:88:30:5b:ad:f4:64:23:ff:c3:0f:84:
a3:b3:28:f0:54:f2:09:03:da:0d:91:14:07:cc:02:12:6a:19:
35:8d:9e:cb:35:5e:f1:d1:cb:78:2a:dd:25:9d:eb:a7:22:34:
0f:0c:92:2c:4d:9d:a7:73:2a:cf:9e:f0:3e:39:6a:2c:8c:03:
a5:c9:ce:dc:cb:6c:db:92:ae:71:ae:f1:87:42:ec:0e:bc:4e:
4a:00:68:9c:65:89:d8:5a:e0:e8:53:88:0c:d5:cd:39:b0:10:
67:0a:2d:1e:23:00:ca:fd:13:cb:f2:6d:30:d0:64:4f:50:6d:
8e:f2:ea:8a:69:15:b3:b7:f2:4b:4a:04:4d:47:4c:b7:a2:54:
9d:ce:27:ba:47:a0:86:7c:96:d4:04:25:1c:b5:b3:8f:35:51:
6f:18:d4:68:b0:20:76:59:36:f2:e5:35:e2:9d:c2:f4:b1:e9:
a3:71:c0:64:3f:5c:c2:b1:c0:b0:ea:3f:74:e9:fc:92:a6:95:
a8:03:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:41 2026 by rpki-client