Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/73pGpq8-0wJ7lRoPVCukt4yziE4.roa
File: 73pGpq8-0wJ7lRoPVCukt4yziE4.roa (raw, json)
Hash identifier: RlgtDQls9tZvlxkXHzjE6c1TDTvoTCVEOhmPcA03d9A=
Subject key identifier: EF:7A:46:A6:AF:3E:D3:02:7B:95:1A:0F:54:2B:A4:B7:8C:B3:88:4E
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A11C51839D4B11B6919B57EE28E080CCF3
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/73pGpq8-0wJ7lRoPVCukt4yziE4.roa
Signing time: Thu 08 Oct 2026 16:21:06 +0000
ROA not before: Thu 08 Oct 2026 16:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 193.31.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:51:83:9d:4b:11:b6:91:9b:57:ee:28:e0:80:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 8 16:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef7a46a6af3ed3027b951a0f542ba4b78cb3884e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:0e:35:b7:c8:f0:ef:24:00:e5:35:a9:ab:
18:d7:b8:f7:79:fe:55:eb:34:bf:45:e0:d2:5e:b9:
c4:35:0f:be:8f:25:ef:db:0c:0e:b4:a0:bf:76:fb:
ac:75:90:69:8e:65:d0:34:25:ee:60:6e:56:c0:41:
e0:81:2c:5d:52:b5:8c:2a:34:f9:96:e5:d9:52:a5:
c9:3b:bc:6e:d4:fd:1a:53:f1:2c:f0:f2:bb:3b:99:
86:cc:ba:ef:38:7a:30:87:c6:9d:11:50:71:bc:8c:
75:48:91:e4:1e:36:3a:f1:2e:95:bd:d0:d0:5a:fd:
06:fa:ad:26:64:3d:6f:6d:21:04:e1:d2:93:d0:d0:
40:63:fc:1b:ad:11:23:08:2e:8c:d6:91:e6:20:d5:
3f:7b:29:cc:a1:c2:73:79:48:f2:6c:b5:6e:74:ff:
f0:18:c0:47:12:4f:12:64:cb:b5:cd:61:9b:ca:7c:
ed:27:24:f1:12:a8:30:43:72:f4:f9:c5:7a:37:5d:
21:92:54:36:48:b0:95:a9:ab:fc:c5:01:91:b5:33:
86:16:65:73:e9:11:21:11:a1:6a:d1:98:9b:f1:62:
92:d1:82:89:f6:d6:e1:ab:f1:c2:aa:8f:92:ec:2f:
c9:8f:99:b6:d9:1f:99:22:d4:61:a8:37:1c:af:f2:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:46:A6:AF:3E:D3:02:7B:95:1A:0F:54:2B:A4:B7:8C:B3:88:4E
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/73pGpq8-0wJ7lRoPVCukt4yziE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8b:5e:db:4d:6d:22:40:9a:49:f2:50:71:4f:ad:35:9f:3f:
5b:30:8e:a6:95:6c:7d:08:9d:37:e4:2a:1c:1c:68:cf:25:6e:
a8:5f:15:e9:a6:22:62:08:b4:1c:ca:4e:16:a5:39:6b:86:cd:
e1:9b:37:d6:1d:a6:a1:41:c9:63:f8:e3:47:bb:09:dc:67:f7:
e8:d9:ea:1b:1b:44:80:82:39:2b:3e:48:c1:90:3e:fb:3a:ce:
28:e6:5e:28:ce:ea:24:b4:d5:95:31:93:aa:41:f1:1f:20:30:
c2:38:2b:5e:fc:d8:d0:e5:97:ad:91:ba:39:37:6d:e3:a7:73:
e8:e6:9d:79:2e:e6:f5:88:8f:69:53:bd:58:6c:c7:94:d7:84:
a3:93:ee:91:76:6b:f1:bc:c2:87:25:8c:1f:bb:68:7a:5f:77:
af:b9:2d:07:47:ae:9d:41:30:d4:7b:71:e5:0c:a6:05:b9:2c:
73:67:a4:85:ee:9e:2b:8a:f9:55:e6:8c:a0:98:1d:0a:cb:81:
e3:9c:8b:63:37:83:d8:dd:b4:02:1f:8c:ee:93:39:8c:9f:09:
45:ea:6c:3f:6f:13:df:07:a4:eb:26:7a:4d:c6:c3:9a:12:1f:
80:1b:c2:a1:49:c6:a6:b3:08:21:50:84:54:d2:ef:24:0a:c8:
d7:27:3d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:03:34 2026 by rpki-client