Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/RU084gWiV11Pv2ydvril66csdGY.roa
File: RU084gWiV11Pv2ydvril66csdGY.roa (raw, json)
Hash identifier: 50i9SO0gTFCDlw88XMNf59sun8vGtVp8t7UQIDFKGXE=
Subject key identifier: 45:4D:3C:E2:05:A2:57:5D:4F:BF:6C:9D:BE:B8:A5:EB:A7:2C:74:66
Certificate issuer: /CN=defc3feba729b8ad0b9793adb26a4fa328386e36
Certificate serial: 019F23682DAE103CE50408BB85B6FF5FF7D4
Authority key identifier: DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/RU084gWiV11Pv2ydvril66csdGY.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1064
IP address blocks: 192.76.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2d:ae:10:3c:e5:04:08:bb:85:b6:ff:5f:f7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc3feba729b8ad0b9793adb26a4fa328386e36
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=454d3ce205a2575d4fbf6c9dbeb8a5eba72c7466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:96:08:44:e4:ae:47:3c:d3:6b:a6:9a:50:
fb:54:db:c4:6a:43:5e:e8:7b:88:93:39:f1:47:76:
bd:cb:5e:63:d0:67:4f:84:00:05:4b:d8:99:1a:24:
4d:ff:ad:f5:8d:13:ba:09:97:d4:a2:1a:27:0c:ea:
6a:14:35:f7:b1:aa:f0:0b:c2:1d:9f:09:51:7c:59:
0d:c7:49:49:ef:ad:8b:40:6e:cc:87:be:d5:03:07:
07:ad:f7:82:80:c8:31:eb:10:d5:d6:73:dd:3e:44:
d8:df:e8:f5:77:eb:d0:83:5a:66:e1:8d:36:12:f5:
97:1c:81:c0:10:c4:de:f4:3a:d2:9d:e9:40:29:ae:
76:ec:a7:6d:47:c1:ca:02:2a:e6:54:74:ca:52:ec:
71:0a:fe:b0:cc:b7:91:d4:a8:b6:06:f2:c3:77:36:
8d:5f:96:1a:25:78:1f:5d:04:3f:29:65:5d:21:20:
8a:22:23:7c:76:d9:4f:35:c3:2f:d9:e5:00:eb:5f:
ce:e4:55:55:46:cd:ae:e6:ab:55:1f:6a:bc:97:2f:
fb:19:04:b6:82:55:6a:da:32:d7:5e:8c:d3:09:d5:
3d:8c:9f:8d:17:39:6b:4a:81:18:fc:4b:42:86:1b:
e8:55:a6:bd:f3:f4:2f:7d:56:98:21:e3:34:bd:ad:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:3C:E2:05:A2:57:5D:4F:BF:6C:9D:BE:B8:A5:EB:A7:2C:74:66
X509v3 Authority Key Identifier:
keyid:DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/RU084gWiV11Pv2ydvril66csdGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.164.0/24
Signature Algorithm: sha256WithRSAEncryption
45:19:1a:33:f4:fb:c3:bd:26:14:96:7e:ff:77:78:72:b5:ee:
ea:e1:a7:1e:d3:d9:95:e4:dc:02:10:14:1c:77:80:e2:2b:7c:
e5:fc:5e:0a:4c:ff:f5:55:c8:73:c9:da:c1:64:28:75:66:a3:
df:14:a6:54:9c:e2:3f:84:50:cc:8b:e0:14:08:e1:a2:be:a1:
03:c6:3c:46:5f:9f:75:d9:86:de:f1:5a:b5:f9:03:12:dd:a6:
94:fe:1f:2a:df:cd:ee:c4:63:b3:79:83:21:70:b4:0b:ea:df:
19:ab:13:fe:4a:ee:9b:e7:a3:bf:30:5a:8b:9f:84:42:a4:f3:
b6:86:7b:50:09:20:91:49:15:e0:22:24:12:7c:a1:62:fc:3d:
a3:1d:10:96:38:4e:cd:69:c2:d1:f7:f9:53:a4:b8:b2:68:33:
83:a9:1b:0e:d1:7a:d2:95:ac:c6:f6:2a:3d:20:1a:11:28:69:
35:c6:c2:57:99:7a:30:6e:fb:13:0b:b5:95:5b:7e:db:2a:5e:
9d:8f:72:49:ea:d1:e1:f2:43:ba:64:32:c6:16:24:19:88:4d:
c8:34:99:17:f5:31:c0:76:6c:68:41:5c:4c:61:5c:8c:9a:c4:
3b:6d:dd:47:cd:ac:7e:59:2f:ba:77:22:af:ad:98:ed:ce:f6:
33:62:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:25 2026 by rpki-client