Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ConWQRgaY8VeNs5oLKIg5dUQFGY.roa
File: ConWQRgaY8VeNs5oLKIg5dUQFGY.roa (raw, json)
Hash identifier: JvnvMJabHHcWurThlFM1OCqzLl2L7Rjunt84TRRHzyE=
Subject key identifier: 0A:89:D6:41:18:1A:63:C5:5E:36:CE:68:2C:A2:20:E5:D5:10:14:66
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D19DC238381B456F9600689E11FE241C8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ConWQRgaY8VeNs5oLKIg5dUQFGY.roa
Signing time: Mon 23 Mar 2026 08:42:30 +0000
ROA not before: Mon 23 Mar 2026 08:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58931
IP address blocks: 193.8.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:dc:23:83:81:b4:56:f9:60:06:89:e1:1f:e2:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 23 08:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a89d641181a63c55e36ce682ca220e5d5101466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:8a:b9:45:37:93:61:7b:d3:eb:b9:6e:fa:
b1:70:e0:95:6c:87:ec:9b:b1:c2:65:ce:98:b6:1d:
ca:31:42:f5:e1:fe:56:a9:5e:a6:31:77:b8:3f:28:
50:b6:82:18:ac:9a:24:ce:67:05:5e:a7:e9:24:56:
50:66:5e:71:47:a7:ac:7a:57:76:d4:2b:af:6e:a3:
8f:17:55:2a:4c:71:62:28:f4:7e:a8:2b:51:1f:21:
18:bf:20:6f:ad:9f:91:32:a4:a7:01:06:6e:3e:b7:
76:38:95:6f:23:23:f0:0e:7d:38:eb:c7:e5:e1:7a:
f2:e4:a8:2c:e0:63:e2:aa:68:e0:88:d5:39:0c:f3:
3a:f5:0c:1b:22:3d:03:6f:8f:22:b1:20:08:b7:ae:
27:0c:fc:46:a8:86:37:79:5f:f5:df:51:1c:10:12:
8d:29:cd:e7:96:67:8f:6d:49:9c:22:bb:0f:79:cf:
46:37:41:6d:f0:68:d1:91:23:92:f3:19:1d:67:79:
88:a1:17:bd:cc:26:c7:20:69:7b:ec:43:60:47:e2:
6b:fa:ba:82:5b:8b:4f:0a:c6:77:7f:af:66:0f:e2:
52:6e:1f:2d:f7:85:ac:1b:fa:07:89:f7:90:30:85:
4c:ba:4f:da:20:9b:64:86:78:31:ea:0a:0c:23:71:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:D6:41:18:1A:63:C5:5E:36:CE:68:2C:A2:20:E5:D5:10:14:66
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ConWQRgaY8VeNs5oLKIg5dUQFGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.238.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cd:b4:c8:ad:cc:96:5d:72:0d:d4:2c:3b:b7:75:9c:c6:f4:
5d:83:f5:80:2f:ec:95:69:86:17:b1:5e:13:93:98:d6:89:2b:
70:29:41:22:11:89:a0:82:7f:f2:cf:35:bf:de:b8:b6:fe:9d:
05:57:a5:6f:7c:3e:33:9a:ab:ca:91:72:c5:73:c6:79:f9:e0:
dc:53:d6:01:4f:2f:04:64:52:a6:09:8c:b7:ca:cb:58:43:4f:
56:c3:35:3d:af:73:9d:2c:dc:56:6f:03:2e:6d:3a:4e:f2:7c:
09:9a:24:50:a1:43:5d:ca:75:3c:32:d4:a4:fa:b6:35:0e:29:
81:77:ab:f5:8c:57:00:09:f5:fc:1b:37:63:cf:c3:08:4a:f7:
3e:25:15:c4:3b:f9:50:9e:26:6e:c5:67:9e:3d:29:86:84:d6:
0e:72:28:02:67:07:3b:d0:a3:ba:37:cf:2a:7c:a6:30:a7:89:
71:53:5a:07:d1:32:72:e5:15:49:2c:6d:dd:f7:b7:16:c3:c8:
02:9c:ad:6d:63:d1:76:e6:53:11:ac:03:f3:16:22:2c:7b:fd:
5d:85:e6:e3:58:62:42:4f:e3:f8:1e:b4:4b:3a:e5:b5:d6:27:
d4:92:33:d6:ea:17:20:f2:bf:3a:81:10:f3:58:55:06:57:ef:
4d:26:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:27 2026 by rpki-client