Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/0EM2DLpWR0hKooZEYgbXrfFcQtQ.roa
File: 0EM2DLpWR0hKooZEYgbXrfFcQtQ.roa (raw, json)
Hash identifier: SsTJAnExUh1Qxhe7FPd8ZLJLMbQ9C4W+BVCTEcC6ZMw=
Subject key identifier: D0:43:36:0C:BA:56:47:48:4A:A2:86:44:62:06:D7:AD:F1:5C:42:D4
Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial: 019EF008977D712656FE391ACF72A62BE288
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/0EM2DLpWR0hKooZEYgbXrfFcQtQ.roa
Signing time: Mon 22 Jun 2026 15:52:35 +0000
ROA not before: Mon 22 Jun 2026 15:52:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43528
IP address blocks: 193.201.192.0/22 maxlen: 27
193.201.192.0/24 maxlen: 24
193.201.193.0/24 maxlen: 24
193.201.193.193/32 maxlen: 32
193.201.194.0/24 maxlen: 24
193.201.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:08:97:7d:71:26:56:fe:39:1a:cf:72:a6:2b:e2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Validity
Not Before: Jun 22 15:52:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d043360cba5647484aa286446206d7adf15c42d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:0d:b2:4d:8b:81:fb:55:e1:f7:e5:1f:cc:
a6:59:60:4a:b6:c2:b8:b2:3b:ca:74:8b:ba:53:f9:
4e:92:6a:a5:15:0a:f1:2c:6b:52:22:e9:1c:e6:7e:
78:fe:1a:d5:ad:90:0f:3c:4f:30:1b:83:f7:a3:5e:
cd:0f:32:66:1b:bb:68:28:be:b7:04:81:92:38:9c:
5a:52:12:51:ef:6c:9b:62:f2:f9:fa:a7:d6:22:47:
c3:0e:5a:07:92:52:9c:be:5f:b2:11:a4:f2:43:a6:
cb:17:1e:45:2d:96:d3:d0:40:fb:e7:bb:5f:76:eb:
f0:f5:0d:fe:8b:8c:25:f2:0f:20:13:6f:23:d0:8b:
25:51:16:1f:2e:33:ca:64:ef:f1:93:6f:9b:88:6b:
7f:25:dd:4d:ca:be:ef:ab:0b:d1:7b:59:d1:a4:40:
46:10:10:ab:7f:25:f4:f6:df:ab:a1:9f:f3:5f:76:
b2:04:93:e0:1e:77:f8:f4:89:fc:e6:58:48:91:e3:
df:ba:d9:dd:ca:4c:6a:95:c7:5c:61:c4:75:d5:bb:
35:57:a8:48:1f:ea:49:a7:94:07:9a:cb:23:08:53:
7f:24:d4:44:19:b6:38:65:4f:94:20:b3:74:69:26:
de:ae:c6:56:00:f2:1f:0f:c8:84:0f:a5:2d:ab:e8:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:36:0C:BA:56:47:48:4A:A2:86:44:62:06:D7:AD:F1:5C:42:D4
X509v3 Authority Key Identifier:
keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/0EM2DLpWR0hKooZEYgbXrfFcQtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:25:8c:a5:aa:bf:b7:66:13:5f:2d:09:8c:a5:c5:6e:ab:8b:
f2:09:38:b9:e9:06:0a:e7:7b:56:31:53:eb:8d:96:e1:12:ab:
20:c6:4f:ee:c9:c3:f5:93:c9:5d:8b:7b:ff:9b:65:e7:39:56:
0c:80:21:ef:c5:43:40:7e:39:d3:35:8b:79:4b:9a:26:68:fa:
65:6e:78:8f:5a:bc:74:08:58:9a:fa:06:b2:db:9b:99:c0:5d:
a6:58:e7:3d:a1:5f:8a:4d:b3:c3:bc:43:d9:13:68:5a:c0:23:
ea:79:c3:c3:c9:98:e1:20:08:82:13:7b:a8:9f:5d:0e:9a:be:
7a:55:6c:d3:51:d9:3f:31:f6:db:30:54:56:82:22:df:ba:9a:
6f:6e:b0:91:1f:aa:83:29:72:f8:5c:5d:c4:a7:29:d7:f2:87:
e1:21:30:ac:f2:13:80:08:21:f3:12:98:e2:61:54:88:18:b0:
24:0b:8b:91:2b:ff:aa:47:56:52:e3:d9:7f:04:3d:4c:52:78:
6f:86:c1:6e:a9:2c:c3:fe:cd:81:38:48:4c:94:ac:8c:00:e0:
bb:02:8e:10:7c:cb:2b:25:41:6b:e0:b4:40:29:a0:12:47:06:
6f:c2:46:44:2a:d7:04:93:69:b4:df:95:d8:f4:26:65:38:6a:
e3:d2:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:33 2026 by rpki-client