Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/67mS5fsZltU_-kwbfaIPPxKzh7s.roa
File: 67mS5fsZltU_-kwbfaIPPxKzh7s.roa (raw, json)
Hash identifier: wdr2hYEvrPtVW+B9M61tFl1nk10pFCbEkbxLj6jpw1E=
Subject key identifier: EB:B9:92:E5:FB:19:96:D5:3F:FA:4C:1B:7D:A2:0F:3F:12:B3:87:BB
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D76662A480DC3598376EF4C90A164602E
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/67mS5fsZltU_-kwbfaIPPxKzh7s.roa
Signing time: Fri 10 Apr 2026 07:58:20 +0000
ROA not before: Fri 10 Apr 2026 07:58:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 193.25.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:66:2a:48:0d:c3:59:83:76:ef:4c:90:a1:64:60:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 10 07:58:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebb992e5fb1996d53ffa4c1b7da20f3f12b387bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:c3:17:eb:cb:fb:ff:88:c9:97:18:00:32:
35:d0:b2:a8:5f:81:b8:ab:e4:a7:c1:5d:7e:cc:1f:
cd:8a:08:49:92:b4:18:19:64:73:66:c7:fd:3c:56:
f4:3e:f3:3c:f7:4e:e3:19:6a:2c:cd:e8:f9:49:dc:
74:50:d6:b4:b9:95:fc:e1:8a:cf:ed:68:84:19:ce:
cd:ad:40:01:69:c6:9c:e4:31:85:ea:21:46:f5:40:
9c:58:ff:3e:d3:bf:94:41:03:cb:69:b9:14:03:8a:
cd:64:68:a7:84:f9:d9:91:4b:f3:15:8a:69:a8:90:
91:e4:79:00:2f:9e:87:4e:ae:e1:e6:af:9e:3c:c1:
f9:45:8e:c5:76:19:70:ba:ce:35:03:69:cd:3b:a5:
56:de:72:e5:bb:bc:c8:af:1b:7a:29:95:94:d1:bc:
b4:85:81:2b:5d:8c:19:5a:21:77:1b:be:4e:86:72:
02:8d:82:83:8f:ac:fd:46:2d:f3:59:3c:82:4a:09:
03:42:01:46:a7:4b:0c:f8:cc:ea:89:c4:3f:db:df:
4d:b5:11:c0:47:a5:9d:02:32:fe:df:22:ad:c9:36:
32:e9:3b:60:75:e4:5b:58:94:04:f4:e3:b2:81:38:
b0:07:83:b3:b1:eb:d8:ab:da:e2:77:fe:84:82:f1:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:92:E5:FB:19:96:D5:3F:FA:4C:1B:7D:A2:0F:3F:12:B3:87:BB
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/67mS5fsZltU_-kwbfaIPPxKzh7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1a:3c:8a:e0:87:e2:f3:9b:76:0a:2e:c1:0f:59:e2:08:e9:
6e:0c:44:b1:a1:36:21:33:16:36:20:35:5e:5f:8d:df:97:33:
d7:0e:6b:44:8c:b6:e8:8d:45:5d:c5:f5:41:67:e3:c5:6d:5f:
1a:dd:41:ad:ed:99:24:57:8e:c0:73:1d:ba:ca:04:c1:4c:50:
bd:27:e9:60:4a:01:84:d5:c9:83:52:db:e6:69:56:27:70:90:
3f:31:a7:c5:99:63:e0:3c:62:29:28:74:9e:6b:78:30:fb:78:
34:c9:fc:d5:69:70:71:87:1a:2d:8b:60:66:bc:cb:2b:2c:e4:
7b:c5:0e:f9:08:21:83:2b:28:16:77:64:76:fd:cd:c0:e8:cd:
1e:a4:db:d6:36:35:04:bb:1c:8c:b7:74:9b:5a:28:99:23:31:
d3:db:de:81:0b:1d:79:d8:ff:5b:20:d9:17:89:42:a0:c5:cc:
7b:f4:fd:ba:f9:39:30:0c:c0:50:55:96:6c:95:6e:df:e3:df:
0b:f6:49:45:4d:4a:de:6a:72:07:56:c5:22:45:d4:7a:ac:f4:
62:f8:12:89:64:68:90:b6:a5:73:cb:ab:be:1e:b4:50:d2:45:
50:75:e7:8b:87:f9:b4:5f:16:72:1b:38:0c:09:a0:db:d0:63:
c0:aa:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:17 2026 by rpki-client