Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/B0SDH2aRnWorkQimCU9ZaN8sN8Y.roa
File: B0SDH2aRnWorkQimCU9ZaN8sN8Y.roa (raw, json)
Hash identifier: I2N0LOYgt4RTmnxgI8qa7qZDcREZeIIkCXkZWjWAF+k=
Subject key identifier: 07:44:83:1F:66:91:9D:6A:2B:91:08:A6:09:4F:59:68:DF:2C:37:C6
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019EB6D71DBFC055A9E5CA93EC94AF90EB57
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/B0SDH2aRnWorkQimCU9ZaN8sN8Y.roa
Signing time: Thu 11 Jun 2026 13:20:11 +0000
ROA not before: Thu 11 Jun 2026 13:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200563
IP address blocks: 191.44.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:d7:1d:bf:c0:55:a9:e5:ca:93:ec:94:af:90:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: Jun 11 13:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0744831f66919d6a2b9108a6094f5968df2c37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:a7:97:c6:e3:dc:aa:6b:93:d8:4d:71:72:
5d:4d:0d:df:d2:8e:43:ba:a6:ff:4d:52:4b:2b:8b:
90:28:dc:83:dd:62:4c:f7:0b:1b:62:0b:19:a1:05:
3a:34:a0:c9:fa:c2:d9:9c:ec:da:dc:5a:71:10:f0:
d8:8f:bf:29:4f:17:fb:3c:ec:73:7b:55:c8:26:dd:
dc:26:05:72:3f:d1:9f:80:d3:b7:b2:e1:46:43:4e:
2b:9d:bd:b8:e5:2e:de:42:e0:4e:e7:c1:db:85:b3:
3f:a3:61:80:a9:af:6c:b2:cd:d6:5e:f7:ae:ba:05:
dd:24:e4:73:b1:d8:77:c2:2d:a3:fb:4c:4a:97:da:
94:7d:9c:ec:8c:bd:b8:32:cb:2b:2c:0c:5b:0a:cd:
ae:97:97:02:86:e0:b1:b9:d0:bd:81:57:1b:f3:85:
d4:39:4f:e1:0e:bb:88:76:16:3f:80:bb:23:b1:e9:
21:c4:5a:c6:cf:dc:5e:44:4f:fc:60:ac:9a:46:19:
83:e9:eb:2b:e3:dc:f5:a8:54:58:30:5c:8a:96:b8:
24:ca:ed:e5:40:36:bf:bb:7b:f3:cb:50:02:77:4a:
29:d0:bd:58:da:70:68:8a:fa:c7:e0:c6:08:ee:8f:
28:bf:6f:f5:d5:ea:a0:88:e3:e1:20:5f:58:ad:b3:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:44:83:1F:66:91:9D:6A:2B:91:08:A6:09:4F:59:68:DF:2C:37:C6
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/B0SDH2aRnWorkQimCU9ZaN8sN8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.32.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ca:00:21:c3:5f:10:f8:62:04:d4:b7:ca:73:0a:44:ca:e4:
5e:4b:da:c8:07:06:e3:ce:8f:98:57:1a:5f:23:48:41:7b:73:
b8:2d:42:e5:63:b2:e9:9d:64:69:f1:d9:12:b0:b6:3e:51:97:
5a:b0:0a:e3:95:23:b8:f5:e7:0b:35:ed:84:db:f3:6d:71:5d:
67:c1:94:26:3a:7d:71:bb:4c:8d:2e:ca:83:8e:de:5c:3f:e2:
a9:fb:43:76:11:39:42:80:24:c5:8b:1b:3e:ea:2e:e4:bd:96:
1c:ba:d3:b2:15:00:3e:2a:1a:f1:7b:e5:91:14:a2:7a:54:ab:
7b:a3:8d:ac:1e:b5:17:69:68:f7:c2:14:24:a2:79:d9:bc:a7:
8c:73:d6:5c:2b:42:ad:72:e7:91:c3:6f:90:72:8a:f8:cc:6b:
80:c6:86:fc:f2:3e:46:99:41:05:56:7b:1f:a0:9e:19:f3:93:
3f:bc:bc:79:86:9d:26:02:4e:d4:7c:d3:9f:4a:58:fc:0a:84:
26:b6:3e:3e:32:c9:87:4d:c1:55:b6:ee:8e:4b:1d:c9:42:9a:
e7:61:47:22:6b:60:71:56:b2:0b:66:48:23:54:1f:74:2c:dd:
9d:0a:23:58:62:92:4e:c1:9f:98:02:a8:f6:da:1e:ee:84:bc:
38:03:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:56 2026 by rpki-client