Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/CtUI7FuLA9XYnGo9ANvnYk3wXvY.roa
File: CtUI7FuLA9XYnGo9ANvnYk3wXvY.roa (raw, json)
Hash identifier: je0VlN/8mERR3XoX+3H4qOkq0hsewP/tEtzCyO0GxN4=
Subject key identifier: 0A:D5:08:EC:5B:8B:03:D5:D8:9C:6A:3D:00:DB:E7:62:4D:F0:5E:F6
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01A1B17FDBCB5204F455633B8714E8D3FFFA
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/CtUI7FuLA9XYnGo9ANvnYk3wXvY.roa
Signing time: Fri 06 Nov 2026 15:35:08 +0000
ROA not before: Fri 06 Nov 2026 15:35:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 193.84.255.0/24 maxlen: 24
2a14:4f80::/29 maxlen: 39
2a14:4f80:400::/38 maxlen: 38
2a14:4f80:800::/38 maxlen: 38
2a14:4f80:1000::/38 maxlen: 38
2a14:4f85::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:7f:db:cb:52:04:f4:55:63:3b:87:14:e8:d3:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Nov 6 15:35:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ad508ec5b8b03d5d89c6a3d00dbe7624df05ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:51:37:3f:d7:a8:b6:19:2e:e8:28:6b:a6:
bd:f9:b1:70:68:9a:d9:37:98:b6:64:c4:77:d8:14:
a0:bf:32:11:87:c7:fd:f2:a5:e4:50:03:c2:a6:8a:
bc:62:72:1b:10:6e:ef:ac:f7:7b:5b:8d:da:2e:8c:
1e:da:ae:18:7a:29:ee:1c:b7:e5:e4:78:a2:39:2a:
6c:c5:6d:da:e4:c8:e7:a4:e0:2b:56:97:02:f4:a6:
c5:7b:41:9a:bb:53:65:d0:e5:79:6a:e3:45:38:7c:
bb:5b:cc:64:e3:e7:fa:24:7c:4c:46:dc:42:71:c5:
00:bc:52:17:07:d4:de:e7:28:72:0c:5d:34:41:c7:
30:31:09:78:83:00:4a:a6:05:91:d2:63:bf:31:6d:
bd:a6:0c:3d:b9:7c:58:7a:78:f6:b8:99:17:db:37:
a2:96:50:d0:e8:34:fd:e1:2a:5b:fd:51:ed:2d:d4:
9f:00:5c:f4:b5:bd:b1:37:61:cc:6f:22:bf:1a:88:
f5:61:5f:27:cb:4d:69:f2:3f:dc:9f:05:2f:d9:2d:
bc:9a:8d:0a:e0:a9:bc:a1:14:4c:f9:97:78:e3:be:
35:6a:4e:66:b5:d9:7d:3d:82:ec:43:dd:cd:d3:0d:
26:e0:94:73:3f:c3:6e:62:bf:2f:6c:b2:e3:23:87:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D5:08:EC:5B:8B:03:D5:D8:9C:6A:3D:00:DB:E7:62:4D:F0:5E:F6
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/CtUI7FuLA9XYnGo9ANvnYk3wXvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.255.0/24
IPv6:
2a14:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:01:5d:85:52:a5:f9:89:a6:08:95:98:de:c6:36:4e:4b:83:
55:ba:ea:d2:bf:71:3e:d4:00:7c:b4:8a:80:39:1d:c1:8b:66:
c4:16:fe:82:e6:cf:37:fc:ca:39:c9:7a:10:2e:1d:3f:4f:96:
64:3f:34:11:96:6e:22:fb:e9:fc:89:ed:4e:2e:22:3b:8b:f2:
35:88:16:65:b8:3c:dc:d9:d5:ac:05:9e:0b:ef:48:62:5f:f0:
8e:fc:1f:83:16:54:b0:db:14:05:60:0f:39:9a:8e:81:09:7c:
af:e2:6e:2b:85:03:7a:95:8d:45:6f:c1:27:2e:7f:ca:b5:c7:
2b:24:78:8a:be:68:37:8e:91:ea:38:0c:b0:49:32:26:5f:68:
f6:68:58:4d:d2:c2:49:72:06:32:09:7b:f5:12:47:c5:5d:be:
53:22:f0:0d:98:c7:f9:f0:9a:e1:49:64:e5:8e:d5:02:75:16:
03:c0:78:a4:4a:f6:a5:00:59:04:71:db:de:90:98:7b:70:c1:
66:92:87:eb:0f:e1:da:fb:8c:bb:cd:38:cb:10:1f:5e:d6:1f:
84:8d:c2:bf:7b:3d:b2:6f:3f:36:da:0a:5d:e8:e8:30:00:61:
e2:a1:ea:74:19:2f:f3:73:ae:46:3c:45:b8:86:a1:b9:08:9f:
46:c1:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:39 2026 by rpki-client