Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/CrC859iwura8utiNXwAp9XhCbZk.roa
File: CrC859iwura8utiNXwAp9XhCbZk.roa (raw, json)
Hash identifier: 4wQ2Q51abo9j82n9d/B6laPcF67YY85HaISdSCDeXwE=
Subject key identifier: 0A:B0:BC:E7:D8:B0:BA:B6:BC:BA:D8:8D:5F:00:29:F5:78:42:6D:99
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019EA149359972E7210455910FC92C7233EF
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/CrC859iwura8utiNXwAp9XhCbZk.roa
Signing time: Sun 07 Jun 2026 08:53:09 +0000
ROA not before: Sun 07 Jun 2026 08:53:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42474
IP address blocks: 141.133.174.0/23 maxlen: 24
2a06:dd01::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:49:35:99:72:e7:21:04:55:91:0f:c9:2c:72:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 7 08:53:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ab0bce7d8b0bab6bcbad88d5f0029f578426d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:6f:4e:84:c4:f3:56:2b:24:3b:af:c2:89:
34:a3:45:32:25:90:c9:dd:d5:7f:ba:6d:7e:67:9e:
d2:62:06:09:68:cd:cd:ac:a9:fa:68:ec:f6:a3:3a:
68:c1:d4:f8:f9:21:33:d0:5f:e5:d4:6b:0a:82:38:
c5:74:c5:0a:2a:ef:96:a3:38:9c:91:56:c6:d4:c4:
a0:87:88:da:2a:01:e1:9d:b5:34:c6:ad:0b:77:65:
a7:5d:f5:ab:7c:5e:73:83:69:07:8b:5d:43:20:6d:
dd:09:8a:02:e6:85:3d:fc:0f:9a:e7:21:32:0f:f0:
ef:39:fd:b3:6f:12:4a:4a:65:c4:df:36:08:aa:db:
d7:38:38:34:31:e8:0f:95:39:37:a9:ca:db:48:e0:
0b:bb:08:37:0e:a6:f6:fc:21:7c:5b:6d:4c:3b:a9:
73:d3:a1:e9:59:b4:2c:ed:fc:36:42:64:ee:dc:46:
59:04:12:a2:05:f2:98:18:eb:3c:83:ed:a1:ed:46:
c0:70:9c:fb:53:14:09:81:06:01:c7:3b:24:07:e5:
41:ff:2b:62:9c:ea:9d:ae:bf:52:7a:7e:52:7c:c7:
e2:18:a6:6c:11:a0:00:ed:6c:d9:c8:1a:7b:f5:e0:
ab:3c:f5:5c:e1:6e:d2:21:64:f7:38:da:03:9f:40:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:BC:E7:D8:B0:BA:B6:BC:BA:D8:8D:5F:00:29:F5:78:42:6D:99
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/CrC859iwura8utiNXwAp9XhCbZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.133.174.0/23
IPv6:
2a06:dd01::/32
Signature Algorithm: sha256WithRSAEncryption
70:01:f7:fe:6e:6c:b4:2a:0f:17:46:fb:66:10:85:8d:d6:b5:
b3:c7:85:6d:7c:02:d3:05:e8:19:fe:c9:b8:2d:5d:a4:94:6e:
86:a7:83:4e:89:f8:08:7a:50:7b:de:54:06:68:99:a2:95:e6:
0b:08:b1:63:08:0b:83:35:3a:4e:7c:4d:88:b0:9f:ec:50:70:
e0:82:ca:a7:7a:ac:1b:bc:14:cc:f1:14:97:ac:d4:3d:f4:20:
8b:2a:c8:86:27:3c:df:d4:99:4b:13:62:cb:40:89:67:97:34:
06:be:9f:80:a2:9c:e3:ad:e7:1e:99:1b:54:4e:50:82:39:61:
bd:6d:13:1a:ee:65:65:9a:7f:3e:bc:b5:d7:33:96:f6:5b:c1:
a4:e5:ac:3c:76:0a:1c:22:f9:c8:64:b8:c5:84:71:6f:50:ca:
64:c1:66:bb:59:3f:1c:13:cd:28:6d:ce:fc:8f:fd:0c:59:0a:
39:cc:31:f2:30:08:d9:f3:35:6d:69:c7:58:48:a7:d7:e0:95:
84:cd:42:b6:57:a4:33:97:89:3c:2f:06:46:a3:ab:58:f3:fe:
be:e2:82:91:74:7d:20:3f:8f:93:8c:fc:91:60:28:82:ee:d3:
df:cc:0c:0d:8a:bf:1f:40:ab:ad:c5:aa:66:f8:10:4c:ed:14:
91:1c:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:52:02 2026 by rpki-client