Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/cAD0rvowwMXkTvTlNEZ0J1ZlDvA.roa
File: cAD0rvowwMXkTvTlNEZ0J1ZlDvA.roa (raw, json)
Hash identifier: HuXESRs8SLssZo0izmBi1I+irPTDN/vnESnPWpu4ew4=
Subject key identifier: 70:00:F4:AE:FA:30:C0:C5:E4:4E:F4:E5:34:46:74:27:56:65:0E:F0
Certificate issuer: /CN=18392dac8e3f3ae5039957ee4a9e5d5dc2e48195
Certificate serial: 019C55AB3D4A6AEBF131528316514A18D451
Authority key identifier: 18:39:2D:AC:8E:3F:3A:E5:03:99:57:EE:4A:9E:5D:5D:C2:E4:81:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/cAD0rvowwMXkTvTlNEZ0J1ZlDvA.roa
Signing time: Fri 13 Feb 2026 06:23:31 +0000
ROA not before: Fri 13 Feb 2026 06:23:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35293
IP address blocks: 193.47.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:ab:3d:4a:6a:eb:f1:31:52:83:16:51:4a:18:d4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18392dac8e3f3ae5039957ee4a9e5d5dc2e48195
Validity
Not Before: Feb 13 06:23:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7000f4aefa30c0c5e44ef4e53446742756650ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:6f:c6:3e:f7:53:33:52:4b:2c:d5:b0:56:
de:17:64:8a:c8:c1:fd:01:61:0e:c8:20:6d:22:dc:
e3:2e:30:b8:88:03:34:13:30:3e:62:30:fa:10:c8:
8b:34:1d:b1:87:57:d8:d6:a8:8e:9a:cf:ea:0a:e5:
82:44:bd:3a:6a:70:fd:10:52:9e:50:bb:02:59:4d:
a8:0a:96:96:de:4e:fe:37:69:af:0f:b8:90:bf:35:
78:06:f0:4d:fa:d0:f1:70:19:8f:f4:39:d2:cc:e7:
38:df:18:b1:f2:ac:35:da:09:22:cb:3d:23:13:0f:
b3:a0:85:b4:e6:b3:7b:57:2a:3d:d4:f2:16:e0:d8:
57:02:55:b9:e0:cd:c5:c5:60:58:ae:16:68:b1:db:
64:3f:57:8a:1b:cc:2f:de:8b:d8:b7:0b:c3:07:ac:
8e:d1:51:f3:41:be:17:3f:c0:b0:74:f5:47:1f:aa:
ed:99:90:9a:e9:a3:44:25:a1:f6:86:7d:58:26:47:
61:b6:9e:ac:36:2f:b0:7c:fa:ae:3b:e8:b5:45:5a:
c0:39:60:27:51:f8:00:58:52:3f:c7:91:b5:d2:0e:
34:85:a6:33:11:a4:79:19:72:11:c2:fd:ab:10:35:
83:be:e1:85:fc:40:73:78:38:46:1d:c0:8b:3c:23:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:F4:AE:FA:30:C0:C5:E4:4E:F4:E5:34:46:74:27:56:65:0E:F0
X509v3 Authority Key Identifier:
keyid:18:39:2D:AC:8E:3F:3A:E5:03:99:57:EE:4A:9E:5D:5D:C2:E4:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/cAD0rvowwMXkTvTlNEZ0J1ZlDvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8f:aa:5b:89:3a:eb:07:fe:32:c2:62:70:57:b8:97:ac:d0:
0c:f9:a1:93:80:e1:e1:49:ca:48:68:29:aa:70:c4:7d:45:77:
bd:2d:46:f9:1c:06:cd:23:3b:d7:3a:e0:7b:a1:2d:e7:5c:60:
1b:ba:3d:f6:b1:e1:fb:f9:9c:73:97:f4:1b:74:29:93:aa:54:
1d:dc:64:52:f3:43:5e:5b:d4:0b:82:10:1d:41:d2:8d:ba:bc:
e7:23:a0:76:4b:54:9c:8f:47:22:9d:51:31:19:7c:3d:07:52:
75:63:de:d8:96:27:72:cd:14:34:1c:36:0d:d4:43:0b:0b:82:
c5:27:4d:7c:5c:f1:71:7b:df:61:17:92:b4:c0:7e:40:a5:31:
1d:84:d8:70:df:e6:13:b1:d6:a1:58:67:44:4f:d7:04:06:2f:
bc:1e:2a:28:3c:b6:39:16:08:e2:4b:77:05:f2:0a:ef:ff:52:
5a:84:2a:04:47:ac:44:32:6a:76:25:92:0c:22:06:fd:d1:1e:
0f:59:78:10:d2:f2:69:bc:6e:39:74:56:32:6e:1e:8c:90:2f:
76:ba:e5:9e:d9:38:5b:c4:8b:13:ea:df:63:05:ff:da:05:98:
b9:e1:8b:39:2b:38:d6:09:1b:67:6b:06:79:08:00:90:a2:84:
7b:6f:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:48:19 2026 by rpki-client