Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/hEnie4lAKWMfLCKJsCCZKZxiu1g.roa
File: hEnie4lAKWMfLCKJsCCZKZxiu1g.roa (raw, json)
Hash identifier: LVdc2gIDM4zgTqHBAYOGjuQI7H2q3tdcKwkXIssuGwo=
Subject key identifier: 84:49:E2:7B:89:40:29:63:1F:2C:22:89:B0:20:99:29:9C:62:BB:58
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019E87FB32787680D452D9C889C8329F468A
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/hEnie4lAKWMfLCKJsCCZKZxiu1g.roa
Signing time: Tue 02 Jun 2026 10:57:27 +0000
ROA not before: Tue 02 Jun 2026 10:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 193.43.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:fb:32:78:76:80:d4:52:d9:c8:89:c8:32:9f:46:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jun 2 10:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8449e27b894029631f2c2289b02099299c62bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:7c:0c:ad:41:e5:8d:bc:e1:9b:7d:e3:97:
ca:04:b9:8b:22:5c:ee:7e:38:59:fe:e4:e9:2d:cf:
0d:0a:19:78:3a:07:39:ac:57:81:61:6b:7b:19:ea:
d3:13:8a:3a:97:8e:c9:e0:a2:96:25:91:2f:7f:9e:
c4:86:12:45:b0:1f:ed:84:5a:bb:02:ac:9d:17:aa:
53:98:10:9c:ea:51:d1:61:8b:f7:4d:79:ae:8b:36:
2b:13:5a:2b:1b:50:81:a8:8b:eb:a6:0d:93:32:f1:
5e:39:0f:f3:5d:c8:f6:7c:38:8c:b6:2b:d3:30:b6:
d5:ba:43:6d:c6:18:37:f9:88:49:e5:97:0f:58:5b:
73:7d:d2:03:4b:d6:5b:a5:17:b8:68:fd:45:b8:f0:
73:b1:50:80:ee:e2:bd:52:d5:2f:e9:57:d8:17:4c:
27:b2:9e:98:69:ff:b7:c2:5b:01:b0:3f:1a:9a:d3:
d1:07:90:de:38:67:a9:6f:12:3d:e7:1c:75:3c:d1:
78:a4:15:fb:27:38:3e:a0:87:4c:2d:1b:8b:ce:16:
de:c8:80:09:72:c8:07:0b:6e:a7:b1:a2:64:1d:2d:
4d:30:25:32:39:15:a8:3a:25:73:17:ce:8a:bc:24:
9d:17:8f:e9:2e:d3:4b:9c:c4:63:52:a7:51:f3:65:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:E2:7B:89:40:29:63:1F:2C:22:89:B0:20:99:29:9C:62:BB:58
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/hEnie4lAKWMfLCKJsCCZKZxiu1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:db:f3:82:43:30:95:e0:84:b6:1c:84:3f:94:96:dd:c1:62:
42:0f:58:b4:0b:b4:a1:71:04:c4:ed:8d:59:c3:89:73:f3:ac:
3e:96:b5:76:30:aa:25:b8:94:ba:0c:dd:39:a7:d7:eb:8a:44:
eb:01:e9:23:61:7e:24:37:11:7d:19:5f:9a:73:91:a9:20:f8:
e7:73:bc:eb:6a:92:98:79:00:61:bf:40:d8:17:0a:47:97:55:
b6:ed:09:58:ba:1a:61:a8:b9:46:19:41:15:5b:fb:54:74:5a:
4e:24:1f:6f:21:45:34:10:ca:06:08:a8:36:77:69:dd:dc:d2:
1b:b7:7a:f9:43:c7:cc:a9:ac:c4:bf:b7:99:dc:96:ea:e9:b6:
8a:8a:4d:72:74:91:b7:59:1f:a4:59:6f:bb:c8:ca:d5:9f:6f:
d8:7a:b3:96:ca:86:d2:ba:36:67:cf:d7:95:d4:18:74:cb:26:
1b:eb:7f:61:c2:5e:94:ff:2c:8b:c5:63:5f:11:3d:d2:e5:58:
71:51:6e:22:be:9f:28:54:d2:84:04:c5:58:a5:c4:c3:a6:5b:
80:1f:c8:08:98:2b:aa:af:68:71:ea:7b:51:18:9c:1b:b4:c3:
91:41:4b:b4:aa:aa:d7:82:23:39:19:93:bb:20:26:64:01:92:
d3:95:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:04:32 2026 by rpki-client