Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/Bi0r59rk8bSRcGt5iqOCAKGZ3eo.roa
File: Bi0r59rk8bSRcGt5iqOCAKGZ3eo.roa (raw, json)
Hash identifier: wWa46WQ/yBIgapM/N3qYecSRsH5DzdTi/Q/4EysDWKI=
Subject key identifier: 06:2D:2B:E7:DA:E4:F1:B4:91:70:6B:79:8A:A3:82:00:A1:99:DD:EA
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 01A04900ECE5975C4AD4CCC537D30F6F2E9F
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/Bi0r59rk8bSRcGt5iqOCAKGZ3eo.roa
Signing time: Fri 28 Aug 2026 15:33:12 +0000
ROA not before: Fri 28 Aug 2026 15:33:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 193.39.108.0/24 maxlen: 24
193.39.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:00:ec:e5:97:5c:4a:d4:cc:c5:37:d3:0f:6f:2e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Aug 28 15:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=062d2be7dae4f1b491706b798aa38200a199ddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:45:52:9a:b1:08:a3:22:5d:fa:bb:9d:87:
b3:55:32:17:98:72:bf:93:39:3d:5e:d4:cb:74:14:
50:f5:8e:3e:69:5c:53:a9:76:66:ed:ab:92:f4:c3:
f4:8b:19:50:4b:0a:0b:82:b5:92:80:76:34:6c:e3:
74:e3:09:49:6d:87:76:22:1c:78:5c:9c:6b:0c:e3:
55:02:be:93:6f:60:74:08:a6:f5:5e:94:06:f2:db:
1b:a8:5e:81:4d:92:cc:a9:f4:f3:ec:92:fe:be:0f:
cf:4c:80:b0:8a:e2:b7:ec:a4:c9:f3:20:ed:44:65:
66:b2:20:a3:46:b2:9b:1a:c8:59:94:9b:81:0e:a7:
5b:6f:77:60:5e:ee:ef:d3:61:96:db:49:5b:85:7d:
21:14:48:01:4b:e1:a4:18:9e:13:32:cc:38:6f:59:
5f:64:9d:ac:36:f4:de:98:fb:c6:a4:d0:a9:35:5a:
00:8c:7f:79:9d:6f:bd:5c:2b:12:3d:9a:a3:fd:0b:
6c:6e:24:5d:59:79:96:e1:d6:28:e3:00:27:12:42:
be:59:b1:2c:db:84:41:ba:87:2c:20:b2:1a:c6:86:
12:b9:5b:7b:4e:c5:7c:74:64:65:d5:f1:d3:d7:b1:
38:65:70:e8:99:25:fa:2f:c3:d4:50:ba:d4:7e:33:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:2B:E7:DA:E4:F1:B4:91:70:6B:79:8A:A3:82:00:A1:99:DD:EA
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/Bi0r59rk8bSRcGt5iqOCAKGZ3eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.108.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:3f:7e:51:d3:aa:66:20:f8:ac:a8:74:ed:e7:03:cb:62:91:
1e:37:7b:06:78:e5:32:d6:46:0e:eb:f4:3a:14:ce:ee:eb:68:
01:9f:8d:f6:4a:e4:da:ef:20:20:b4:fe:40:7d:0f:89:c5:ab:
e0:94:47:81:58:40:4f:09:93:8c:b7:ed:0e:ba:f9:a3:c6:de:
bc:5e:6d:ea:89:bf:5e:88:b2:a5:65:83:2a:fa:89:45:9b:a3:
19:09:2b:e6:59:bc:ec:21:65:70:49:81:a7:c7:30:55:4d:3d:
62:57:82:b8:f5:1c:a3:ab:3f:57:90:5a:e0:09:1d:da:c0:e8:
04:3e:11:10:46:58:81:e6:f7:25:20:1d:44:26:51:17:0a:54:
89:02:c2:19:06:a9:86:a4:2c:f4:5d:ff:19:dc:bb:12:c2:0a:
ab:76:ee:30:54:4e:dc:1f:33:3c:81:32:f6:f1:d3:14:dc:b8:
75:7c:e3:58:eb:e6:75:cf:bb:f7:cf:cb:b6:c0:6f:7c:7a:13:
fc:9d:82:05:c5:ce:ec:16:e5:ee:5f:8c:04:37:fc:99:b6:f3:
c8:46:73:fc:fd:d6:10:31:68:4a:c4:7e:2e:38:5c:24:d2:2c:
13:d1:0c:b6:eb:02:5c:87:35:75:99:99:57:62:61:38:34:83:
b3:9d:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:28:04 2026 by rpki-client