Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/udQh1E7UdhZ3q6PAG0MlGhbmPaw.roa
File: udQh1E7UdhZ3q6PAG0MlGhbmPaw.roa (raw, json)
Hash identifier: XThKptGke2Rt2jt7oAQhE+VAuCr0Qg/2RUNkoKL1FUY=
Subject key identifier: B9:D4:21:D4:4E:D4:76:16:77:AB:A3:C0:1B:43:25:1A:16:E6:3D:AC
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 019B797F4654FE2BFD20D6D87614B3A9C960
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/udQh1E7UdhZ3q6PAG0MlGhbmPaw.roa
Signing time: Thu 01 Jan 2026 12:19:02 +0000
ROA not before: Thu 01 Jan 2026 12:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8458
IP address blocks: 193.93.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:46:54:fe:2b:fd:20:d6:d8:76:14:b3:a9:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Jan 1 12:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9d421d44ed4761677aba3c01b43251a16e63dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:a7:34:4b:6e:7a:ef:c1:80:24:82:e1:57:
4a:58:63:2e:73:cf:c9:fa:2d:6b:c0:17:36:2d:ee:
38:17:d7:ff:7d:19:d3:0e:53:c1:30:5c:fe:07:e2:
db:db:10:80:8e:1c:2c:d9:75:83:04:35:e9:05:77:
8f:86:50:1f:c6:de:18:b6:33:06:e6:14:61:01:ab:
9a:e6:33:ec:51:8d:a5:84:46:ce:76:8a:0f:6b:a6:
14:99:5c:68:04:98:17:8f:c7:48:90:45:1b:19:de:
03:b0:e3:8d:c4:ee:48:d5:63:50:a1:a9:b7:c3:29:
e1:5d:a8:4d:59:20:df:f6:81:ea:5b:70:08:67:c5:
5b:3f:21:76:ee:00:24:bb:37:1a:0a:74:ea:1d:ca:
17:eb:f6:5c:b8:4e:f3:5f:6e:56:ad:7f:cb:25:c9:
a7:53:b3:52:14:91:04:b5:a5:fd:45:d0:1b:20:d2:
ee:f0:3e:6c:1b:fb:99:33:46:a5:ab:12:dd:2d:5c:
07:d9:2e:1b:37:ad:e7:7b:53:41:5b:24:af:ab:a2:
3e:76:36:f7:0c:ef:c8:87:4f:5c:41:e4:e4:6a:90:
47:ae:f9:e4:04:a7:4f:54:8c:99:91:61:9d:c1:bc:
8d:9c:3b:2c:79:ed:76:62:67:99:46:16:96:55:87:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:21:D4:4E:D4:76:16:77:AB:A3:C0:1B:43:25:1A:16:E6:3D:AC
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/udQh1E7UdhZ3q6PAG0MlGhbmPaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:a4:1d:1b:60:70:8f:06:87:62:3a:e1:6a:af:a7:a8:69:70:
b1:10:a1:3d:57:43:f8:80:24:ab:22:7a:ae:20:80:0b:1c:b5:
d7:c0:c4:98:a4:84:65:c8:dd:61:2c:84:7c:a7:ae:ee:fc:49:
49:24:81:97:a6:09:c6:89:18:23:98:19:1c:78:16:f9:be:00:
2d:e1:ce:35:e1:04:36:1c:3c:f0:a9:a1:bb:3f:95:03:b9:e9:
ea:11:3d:75:e4:54:7b:8b:0c:94:c5:ea:f1:6d:af:6a:4b:5d:
53:bf:1d:a6:cc:f7:89:e7:4a:07:81:a4:63:a4:47:07:74:fc:
8f:0f:cc:6b:d1:7c:45:5d:36:e8:ad:48:56:00:b8:7f:6d:53:
c9:41:6d:a8:f1:17:e9:c8:6f:f8:98:5e:ee:6f:ec:f5:ce:e8:
90:de:db:c3:8b:75:4f:40:47:b2:be:f8:12:d6:2f:67:b9:c8:
f8:ed:0f:cc:f1:92:fb:48:a7:68:e2:c0:3c:7c:7d:ef:4f:af:
89:9b:38:8e:fb:09:46:70:93:57:71:5a:cf:6c:e3:26:97:92:
4e:14:fe:15:a1:a0:3e:1c:f6:b0:6e:66:a0:ea:d8:cb:c3:17:
e9:da:c2:52:39:4c:a1:aa:f9:6a:08:22:73:3a:e3:20:09:04:
ba:de:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:12 2026 by rpki-client