Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa
File: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (raw, json)
Hash identifier: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=
Subject key identifier: E7:DD:2A:D4:F5:B8:3E:5F:97:27:CD:72:67:C0:AE:26:AB:7C:D5:47
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019EB7B4ACF4CA597FEA7544E2EB4F0E62FE
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa
Signing time: Thu 11 Jun 2026 17:22:11 +0000
ROA not before: Thu 11 Jun 2026 17:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205548
IP address blocks: 193.168.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:b4:ac:f4:ca:59:7f:ea:75:44:e2:eb:4f:0e:62:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jun 11 17:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7dd2ad4f5b83e5f9727cd7267c0ae26ab7cd547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:de:a9:5e:dc:09:e4:3a:a1:d0:c4:13:3f:
ae:1a:e3:e2:d7:8f:67:58:73:4c:45:fb:68:ae:7a:
95:18:5c:8d:b4:83:d4:52:4a:58:80:f9:0b:89:8d:
9c:fb:35:b8:47:3b:7f:69:c0:cf:f0:4a:1f:b3:ee:
d3:59:f1:6b:3d:a1:60:af:12:02:76:e4:56:2e:d7:
9a:d6:4c:81:2b:db:68:43:06:59:5f:a5:5c:d0:d7:
06:57:97:a3:9b:bd:e4:43:aa:5a:2a:d6:64:26:93:
6c:0f:0d:b4:0d:02:6c:1c:2b:03:10:a0:a5:2d:e5:
ed:cb:5e:c4:f7:f3:da:80:cb:5b:75:07:fe:31:10:
9e:59:71:61:03:a6:ee:67:96:42:7c:a5:c8:5b:62:
6a:fb:30:fd:24:d1:17:8f:98:5d:fb:8c:1a:dd:4a:
36:b3:1e:09:dd:cd:8e:7b:a3:45:51:25:ca:58:38:
72:03:6a:8a:d7:fc:58:d9:f8:07:03:b7:10:8e:8d:
3b:14:52:bc:6b:b4:08:39:6d:18:4c:2b:36:94:e6:
35:73:8c:7a:b1:68:6c:f8:12:90:f1:6e:e4:ef:ee:
bc:c8:3e:0a:d4:52:61:df:b3:cb:97:66:a3:20:1e:
5e:ea:d7:bd:3d:5a:44:c9:c8:e2:1a:7d:d3:ea:b0:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:2A:D4:F5:B8:3E:5F:97:27:CD:72:67:C0:AE:26:AB:7C:D5:47
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a0:b4:7e:b9:20:e3:fa:aa:96:d9:b8:e9:bc:72:fe:4e:45:
fc:4c:27:0e:5f:a6:ac:fd:d3:07:e8:48:fa:56:5b:6d:8c:fb:
78:59:d6:9d:95:35:8d:8c:c0:c8:74:04:97:fe:b5:fa:75:cd:
e1:31:ef:cb:7d:cf:87:79:40:e1:d0:23:44:8f:73:38:0b:fb:
7f:23:a6:2b:7a:57:7c:ef:7b:07:d8:0d:f6:31:1f:f9:43:a0:
c9:35:a9:7a:01:4a:5b:21:fc:36:f5:b0:ae:8c:57:ac:d7:29:
29:67:e2:18:de:1d:1a:98:78:bc:23:7e:ea:aa:9b:f8:19:67:
2e:da:90:4e:99:44:0a:5a:da:10:e3:b7:3b:27:01:73:84:90:
29:76:5d:59:72:66:e1:d7:d3:a6:d9:44:c5:b6:4a:1e:02:97:
f8:59:57:e3:b3:41:43:37:4e:1f:24:b6:c0:97:78:e4:83:4e:
78:f5:76:59:ea:f9:18:1c:e7:02:74:c9:3b:99:38:17:be:f8:
95:48:fb:74:c5:5f:e1:d6:8c:f8:fd:56:4a:42:70:38:55:68:
77:e5:e1:b9:e7:0d:bc:77:05:6c:6f:36:51:8d:a0:11:d6:f3:
81:71:af:69:2e:06:bc:6f:19:b2:c9:d9:23:5d:e0:f3:72:da:
2e:ac:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:45 2026 by rpki-client