Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa
File: 1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa (raw, json)
Hash identifier: uANSR1y8ArwMRJWs9G2MLV5dcv0JI9ZhZL82nYHfPJ4=
Subject key identifier: FB:04:78:71:3C:37:72:74:4A:A5:F9:CC:E2:41:64:0E:5A:8E:9A:93
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A0A6BB4B776F542221E16475D99B97581C
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa
Signing time: Tue 15 Sep 2026 20:21:27 +0000
ROA not before: Tue 15 Sep 2026 20:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 193.57.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:bb:4b:77:6f:54:22:21:e1:64:75:d9:9b:97:58:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 15 20:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb0478713c3772744aa5f9cce241640e5a8e9a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:ec:c9:16:64:33:74:fd:04:1b:c2:92:a7:
69:02:15:29:56:64:92:7a:be:03:ca:87:4a:ec:f1:
59:d6:d8:9b:c0:bf:65:fa:90:2a:f3:1f:92:b9:1b:
15:38:0d:0a:42:d8:e1:30:15:54:f5:24:19:28:0f:
5b:69:4f:1c:32:ea:23:22:52:cd:63:d4:31:ad:04:
cc:66:25:9c:e4:c8:29:df:6e:b9:40:96:db:93:31:
6c:e6:d2:e8:c2:e5:86:b2:6c:33:98:8c:87:55:c1:
46:6b:1f:ba:ab:b3:45:b9:0c:28:88:33:ca:8f:96:
fd:37:d1:a3:39:8f:49:ed:6e:cb:15:4b:c7:04:d1:
4a:74:60:91:a5:4c:4e:11:b9:0d:c5:b8:f7:df:49:
49:8c:f4:08:7f:27:1c:f8:36:59:22:95:57:5d:ee:
73:4a:a2:f9:69:3c:22:a5:11:66:f6:b0:27:7e:7e:
47:12:35:c6:eb:b7:11:3b:f8:5b:45:ae:6f:32:13:
c0:08:d5:fc:dc:dc:bf:3d:75:0f:9d:d8:3a:d3:88:
3a:18:69:cc:aa:20:cb:25:5f:36:8b:1b:86:ea:70:
df:a9:89:17:2b:c3:28:0b:ed:88:35:36:10:bb:d2:
b3:c6:ec:60:80:80:1d:1c:f6:30:8b:55:9f:c4:b1:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:78:71:3C:37:72:74:4A:A5:F9:CC:E2:41:64:0E:5A:8E:9A:93
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.136.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:bc:07:46:47:ac:14:2c:be:c9:5b:2c:3b:09:85:60:f3:ff:
d8:47:eb:01:5f:ca:4b:23:bd:cb:63:27:d2:d0:fe:fb:29:d9:
ae:53:5e:85:83:2d:0f:35:be:ec:bf:76:e2:28:a5:ab:55:48:
19:89:71:d4:1b:f7:c3:53:f3:79:a4:2e:eb:ce:25:44:b3:9e:
fa:b2:08:50:77:c6:cd:1b:eb:23:16:98:8e:59:17:af:33:9f:
39:6e:8a:27:64:b1:7c:80:40:6c:99:ff:90:42:53:4d:b2:9b:
c4:54:01:f2:73:b7:53:aa:86:f8:65:20:0d:dd:75:9f:fc:ce:
80:24:69:6b:14:c1:f0:f5:fb:01:c1:f9:67:a8:da:8f:2c:5a:
20:d8:82:7a:ee:5c:dd:c4:72:4f:da:5c:46:f9:e1:c7:e2:7a:
50:99:5a:d2:9b:17:87:1e:b6:cf:4d:70:fd:3d:a0:0c:33:0c:
4b:74:40:3e:10:8b:97:0f:ae:0f:2e:98:de:de:70:39:15:5e:
86:41:9f:ad:73:60:0d:ff:75:05:c6:60:5f:89:71:d0:5a:e0:
fe:9a:20:d4:75:71:ed:86:57:84:0f:3e:5e:f9:1c:ae:39:97:
bf:95:d0:94:47:ce:7b:e1:91:56:44:a6:4c:52:bf:f4:06:6f:
15:5f:98:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:23 2026 by rpki-client