Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa
File: 0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa (raw, json)
Hash identifier: mtyUt15yu+f0GpFvD8FnDUSV4lO4SlvX/nIEW6w5cbU=
Subject key identifier: D1:22:B1:E2:E1:C8:52:A2:42:C3:36:EE:0D:50:F3:0C:D1:8F:B1:BF
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 019B7AC79FBEAECA5E958141102E4F681F49
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa
Signing time: Thu 01 Jan 2026 18:17:41 +0000
ROA not before: Thu 01 Jan 2026 18:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210748
IP address blocks: 193.163.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:9f:be:ae:ca:5e:95:81:41:10:2e:4f:68:1f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Jan 1 18:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d122b1e2e1c852a242c336ee0d50f30cd18fb1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:8e:4b:08:f5:f1:14:43:a2:29:e8:c5:a3:
a9:39:9c:65:31:ac:3b:c0:cf:22:f0:54:fd:95:63:
11:f0:1a:d9:69:ad:ee:c8:9f:4f:ee:1c:2a:88:5a:
20:e1:6d:bc:82:fb:b4:44:06:de:e6:96:ea:f9:f1:
dd:f0:79:b8:d0:21:00:66:25:60:0d:d5:82:9e:7d:
66:ba:d3:49:bf:4e:d0:f8:74:14:27:0c:17:d1:ed:
39:2f:96:f3:de:61:d1:e5:6f:7a:2a:a4:2b:b6:fa:
24:47:b1:f2:90:1b:0e:d3:ed:c4:2a:9d:40:ce:e7:
91:0b:12:ed:0b:3f:99:24:82:19:1d:35:e5:80:e9:
c5:b5:43:18:88:35:5c:98:40:62:84:42:07:da:d9:
92:af:41:d3:40:d0:80:92:50:b8:5f:f4:54:65:6b:
3d:57:22:f5:74:5f:e2:f3:f3:19:74:c7:17:2a:10:
7d:83:5e:68:02:a6:46:3b:2a:a5:ea:73:c4:43:f1:
cb:65:1c:9d:37:17:ae:7f:21:ac:fe:a6:9f:8c:d6:
10:7f:89:b5:04:66:e2:4a:aa:e2:7f:9d:df:98:00:
ff:06:b6:4c:df:23:05:c4:05:01:04:b8:cb:67:b5:
6c:fb:89:66:0d:84:d2:9f:30:1e:b2:f6:89:06:85:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:B1:E2:E1:C8:52:A2:42:C3:36:EE:0D:50:F3:0C:D1:8F:B1:BF
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a9:5d:1c:52:37:d6:c6:bf:b4:79:03:a8:94:58:e3:55:55:
f2:23:b2:c3:e4:b3:27:50:6f:fa:2b:5d:74:98:08:b6:8e:62:
33:20:cc:e7:8a:d7:f2:08:8b:4e:86:5a:b4:93:e6:7a:9e:33:
38:6d:c0:7d:dc:7e:fe:82:a9:c6:f0:04:a9:3c:65:8f:1a:43:
63:a0:38:22:aa:a2:49:c6:d8:6f:69:5d:62:da:d5:3e:fb:d4:
9e:d8:3c:f5:c5:55:71:a5:94:e3:d4:39:1a:d6:31:da:e4:46:
6e:a4:ca:46:e8:8b:a1:1e:30:30:22:75:9c:69:42:e4:51:1a:
30:6b:b4:33:b2:e4:e7:24:8d:ad:1a:68:13:dd:82:11:91:89:
17:7e:43:ee:ec:45:6a:c0:d0:62:e2:82:d1:c3:10:ce:f6:1c:
bb:c9:dc:52:0e:30:8a:a6:e9:e0:f7:3e:1d:a7:ed:fd:7c:be:
41:98:2c:5e:03:ed:db:ef:68:83:31:de:f3:6c:20:14:03:5c:
fd:16:2a:c7:c7:51:87:d1:36:a1:f6:43:ad:36:69:a4:a9:67:
1e:83:af:74:9c:5b:f9:54:47:18:65:14:3b:1e:de:ab:cc:ed:
36:ae:f5:7c:3f:09:52:09:df:5d:85:eb:56:b3:8f:96:15:4f:
16:6e:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:19:58 2026 by rpki-client