Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/tO5f34WcoDArj17_Kk9xK3LJajY.roa
File: tO5f34WcoDArj17_Kk9xK3LJajY.roa (raw, json)
Hash identifier: d5gEfnb2Ch2gcnS6kpVQ8XNJ465jpkE6vmZy39qjV3o=
Subject key identifier: B4:EE:5F:DF:85:9C:A0:30:2B:8F:5E:FF:2A:4F:71:2B:72:C9:6A:36
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 019B79EC118E61ED79A7BF1C96D831D2F804
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/tO5f34WcoDArj17_Kk9xK3LJajY.roa
Signing time: Thu 01 Jan 2026 14:17:52 +0000
ROA not before: Thu 01 Jan 2026 14:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32322
IP address blocks: 193.239.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:11:8e:61:ed:79:a7:bf:1c:96:d8:31:d2:f8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Jan 1 14:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4ee5fdf859ca0302b8f5eff2a4f712b72c96a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:86:b3:0e:33:d6:cc:08:78:35:f9:04:ac:
2b:41:24:c3:98:1b:fe:28:e3:5a:a3:54:c9:36:e5:
32:6c:e7:6e:f7:3f:04:64:10:0f:41:d8:aa:c7:52:
24:c8:e9:71:ed:3b:4c:1d:ac:cd:71:7e:5c:e2:e0:
02:d2:0e:00:b4:ad:f6:76:7a:0b:8b:fa:61:51:f6:
2c:fa:41:83:95:06:86:de:0c:53:94:fe:8d:ba:9c:
fe:f1:f9:02:d7:11:3a:b0:1b:8e:4d:8c:5d:95:4f:
df:ac:46:a3:c8:c0:0a:17:f0:2f:88:0e:47:9e:da:
75:e7:82:1e:38:c9:28:d7:5e:cb:0b:f1:b6:45:64:
23:ed:91:3b:e0:7f:fe:a4:de:7c:4e:ba:eb:00:e6:
1a:bb:57:7a:a1:51:c7:bf:38:82:ca:7c:2b:e9:9e:
63:01:b9:5a:99:e0:11:51:f1:e7:58:b8:ef:57:24:
db:e1:dc:41:e8:7c:52:b8:6a:00:5a:9e:0c:46:44:
e9:33:47:ac:9e:72:47:b4:ee:59:8a:45:91:d0:63:
c1:c9:03:b4:3d:f6:cf:78:47:6d:19:e4:d0:4e:f6:
0e:5f:a9:bb:c6:57:ec:f1:8a:f9:ff:ec:de:73:de:
4d:6f:22:cc:71:7a:14:86:77:cc:2d:54:58:c3:1a:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:5F:DF:85:9C:A0:30:2B:8F:5E:FF:2A:4F:71:2B:72:C9:6A:36
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/tO5f34WcoDArj17_Kk9xK3LJajY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0a:17:35:0f:89:1a:ae:4b:e3:5b:0d:85:b2:37:0c:07:53:
97:54:57:b4:79:04:90:f3:76:de:a3:00:28:41:74:da:66:cb:
50:42:6c:f2:e2:7f:bd:3d:fd:c8:d0:4a:86:71:64:cc:67:2a:
f4:8f:ee:f7:f7:b4:d4:75:f8:34:30:92:62:47:d6:89:3c:07:
c3:38:b4:b4:b8:04:66:68:72:83:e1:2c:4e:cc:d0:0c:49:e3:
29:10:6d:a4:00:3d:74:a0:fc:9a:b5:86:de:c9:68:53:4b:21:
d5:42:24:d3:26:e4:2a:35:66:c4:c2:6d:85:5c:cd:3a:76:f4:
04:15:45:09:f6:63:8f:c3:ea:b1:e3:c1:1f:73:df:8a:33:86:
68:74:0f:70:d8:b2:f7:f1:07:f8:a2:2f:21:00:86:c2:a3:66:
27:25:e7:d2:ad:aa:62:26:a2:ab:19:80:be:e3:b0:17:0b:21:
0f:06:f1:2f:86:33:ab:6e:02:20:c8:f3:a7:e1:cf:87:44:d0:
c7:12:75:5e:eb:0a:ae:b5:da:d1:96:dd:8e:97:88:b1:eb:74:
22:75:69:68:b7:58:2a:96:44:14:93:41:ef:a2:37:93:0e:f1:
3a:db:d4:21:1f:f9:aa:85:8a:bb:31:6d:9a:51:0f:3e:0b:b6:
67:fe:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:57 2026 by rpki-client