Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/5vAwcbdTRz-0U7GLJ6AIyLP61fo.roa
File: 5vAwcbdTRz-0U7GLJ6AIyLP61fo.roa (raw, json)
Hash identifier: JnIHeO8xvI7ywhZBlyvW36i3gSDsUsdWcdM+GZ8Te+0=
Subject key identifier: E6:F0:30:71:B7:53:47:3F:B4:53:B1:8B:27:A0:08:C8:B3:FA:D5:FA
Certificate issuer: /CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Certificate serial: 019F23683C5F40929DBB144403F13785546F
Authority key identifier: D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/5vAwcbdTRz-0U7GLJ6AIyLP61fo.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 193.43.183.0/24 maxlen: 24
2001:67c:66c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:5f:40:92:9d:bb:14:44:03:f1:37:85:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6f03071b753473fb453b18b27a008c8b3fad5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:d5:9f:f5:bd:dd:95:93:a0:10:fd:6f:fe:
2b:09:32:3b:3e:f6:21:54:c9:3d:5c:32:ee:5f:d9:
79:77:44:33:0e:bc:90:e9:1e:47:cd:66:21:a4:dc:
76:af:b2:be:96:e6:37:65:39:72:0f:21:49:f7:72:
67:90:31:5c:8b:19:f3:9d:b7:8c:1f:d9:a0:fa:21:
1a:6d:16:3e:46:1f:b1:69:63:5a:31:04:54:49:b1:
be:2c:df:88:14:b3:30:78:f4:38:b7:6c:7d:a8:5a:
f5:77:7b:2b:45:94:04:15:a1:2d:78:6b:c2:b9:f7:
9e:cf:f6:bc:a0:51:e9:55:8c:1a:d6:b4:cc:f0:a2:
58:c2:c5:da:99:d5:57:5c:09:cc:3b:bb:d4:09:b3:
e7:35:e1:68:44:dc:5d:6f:ef:a9:5d:36:0b:72:41:
3c:6f:a3:4a:d0:b7:55:11:d7:e2:13:21:0f:ce:eb:
87:ae:5e:de:21:97:e8:9a:57:53:87:2e:f9:68:6a:
6b:da:f3:e4:45:4a:18:c3:5d:48:a5:87:e3:92:6d:
60:1b:e1:33:82:c4:0f:f9:9c:97:78:9f:0c:b8:77:
3c:f8:fa:e8:c0:b0:4a:0a:b2:fc:fa:5d:0f:67:1f:
d8:9f:2d:2f:7d:95:ba:73:53:a6:8c:c5:6e:f6:e5:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:30:71:B7:53:47:3F:B4:53:B1:8B:27:A0:08:C8:B3:FA:D5:FA
X509v3 Authority Key Identifier:
keyid:D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/5vAwcbdTRz-0U7GLJ6AIyLP61fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.183.0/24
IPv6:
2001:67c:66c::/48
Signature Algorithm: sha256WithRSAEncryption
7c:6f:5c:f3:4b:a1:ca:26:dd:76:dc:58:ce:0f:33:67:ad:f6:
f9:65:96:60:f4:53:62:c5:c6:21:e3:6a:6d:41:8f:25:8d:86:
3d:3b:22:e9:f2:87:6f:53:c5:d3:36:85:58:89:47:be:bf:5a:
d4:0e:f0:2a:69:b7:99:bc:51:90:58:fc:e9:70:ee:05:0f:8c:
38:b8:ea:43:56:d0:e6:9a:a9:5e:42:6b:89:cc:ff:cb:c9:c8:
a1:a2:21:47:6c:a5:2f:ef:60:a9:2b:e4:a7:b1:c7:fc:d0:07:
51:ca:3a:16:08:60:58:d9:57:29:80:b8:8d:e5:cf:c8:77:0c:
c3:f4:ee:d0:96:94:fc:55:5b:8c:24:fd:ca:9f:22:68:fc:44:
b9:47:62:4c:1c:9d:01:d8:af:30:ed:e3:32:39:6c:59:31:52:
4f:ab:10:3e:cc:bb:15:80:0d:89:74:58:d6:8b:48:6a:2a:74:
5d:e5:84:56:3e:a1:64:c3:28:97:38:a2:c6:b4:4d:87:16:4f:
64:83:9b:ee:ae:c1:d3:a8:88:f7:76:84:36:74:a3:e1:32:3b:
0a:c7:19:7f:d0:3c:ae:98:67:15:39:c3:f9:12:64:6b:b7:6a:
f8:3e:db:4a:8a:8d:1a:4c:c3:6f:c3:f4:15:14:02:86:6c:25:
dc:7e:94:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:22 2026 by rpki-client