Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/sZcKQ6cgnSFOArUoubXO-7UtF2w.roa
File: sZcKQ6cgnSFOArUoubXO-7UtF2w.roa (raw, json)
Hash identifier: i70yL5ZQtlkXeA37PkWypyq+6GqmS0P1o3XFiLGyrFY=
Subject key identifier: B1:97:0A:43:A7:20:9D:21:4E:02:B5:28:B9:B5:CE:FB:B5:2D:17:6C
Certificate issuer: /CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Certificate serial: 019E4FA7305990501DED4BB80F94962F6FBE
Authority key identifier: 5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/sZcKQ6cgnSFOArUoubXO-7UtF2w.roa
Signing time: Fri 22 May 2026 12:26:57 +0000
ROA not before: Fri 22 May 2026 12:26:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50433
IP address blocks: 193.106.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:a7:30:59:90:50:1d:ed:4b:b8:0f:94:96:2f:6f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Validity
Not Before: May 22 12:26:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1970a43a7209d214e02b528b9b5cefbb52d176c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:ee:84:0c:25:9d:f7:eb:98:14:36:05:52:
68:2e:c5:ad:9a:5e:5e:db:21:45:87:2a:b0:82:5c:
05:35:5c:73:08:8d:aa:39:17:c5:84:4a:8c:8b:25:
a2:b8:da:87:12:34:c4:9e:f0:44:2b:bb:1a:e4:25:
87:ca:7d:51:20:c8:ac:47:88:8e:ce:23:b6:0a:a3:
4d:60:54:32:f9:d3:35:8a:89:d3:6c:1a:65:c3:6b:
30:7b:95:05:9c:cb:27:02:62:5f:69:71:d4:1c:d9:
19:6f:60:56:61:dc:40:2f:36:19:de:ba:88:d2:1a:
0d:12:5b:81:fe:ab:3c:72:65:d9:fc:bb:21:ae:c2:
82:68:90:fe:d0:9e:ba:53:e1:80:e3:c4:1b:27:8e:
eb:22:6d:f4:bb:42:a8:2e:4e:0d:ef:a0:ad:9e:42:
3a:d8:ce:22:bc:38:7a:09:b3:27:23:ef:99:f3:d6:
3c:4e:48:0e:e4:6d:52:62:1c:dd:b1:d0:96:21:c5:
d0:f8:cc:b4:34:6a:10:b8:85:bf:32:42:6a:1f:12:
d1:5b:0d:2e:99:18:57:5a:45:0c:55:56:23:61:3c:
b3:ac:7f:9a:99:ff:2f:76:0a:32:27:03:f8:5c:e2:
81:bc:8e:c0:e5:56:f5:0e:db:e5:b9:11:2d:b5:73:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:97:0A:43:A7:20:9D:21:4E:02:B5:28:B9:B5:CE:FB:B5:2D:17:6C
X509v3 Authority Key Identifier:
keyid:5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/sZcKQ6cgnSFOArUoubXO-7UtF2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:1a:8c:3b:96:2d:37:45:9b:d7:78:29:1d:80:f0:16:12:bb:
c8:93:81:77:1e:f9:a1:72:42:53:a9:50:e9:a6:02:ad:22:2f:
7c:84:ba:bf:e5:26:19:d3:c8:1c:02:c6:6b:59:5c:be:1c:f8:
f6:8b:27:f5:79:e4:5c:f2:61:24:37:bf:12:72:2d:b8:ff:90:
b4:ac:95:70:ef:ab:48:80:59:ae:8a:a1:1f:8d:75:29:78:6d:
3a:56:10:65:27:70:0e:ec:ad:42:f5:d7:cb:69:67:b1:5d:30:
b2:65:3d:8e:b9:d1:ac:e7:7d:e8:5a:8d:da:29:44:76:2b:fd:
f0:1e:05:74:de:44:7b:2d:cc:ec:cd:fe:51:08:13:59:61:e0:
7a:26:09:e2:14:be:a4:4e:8d:67:4d:82:71:3c:c6:cf:1b:7f:
18:e7:50:64:5e:1d:f5:1f:e2:ef:de:96:82:66:08:b4:70:a5:
f1:d0:61:a0:cf:bd:cf:3e:9d:8c:7a:72:dd:cd:a3:4e:fc:bc:
a6:ab:83:cf:3a:e7:48:4d:e6:d5:73:84:b9:ce:29:f2:48:80:
d2:30:83:ba:df:ba:5d:ba:47:c2:6a:35:01:05:30:9d:ef:75:
56:6c:1a:5c:1f:bf:9d:d5:de:1c:63:00:31:74:97:db:fc:7f:
57:11:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:32 2026 by rpki-client