Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/4tc9b1J3g8HKGW78h2gsUdsi-So.roa
File: 4tc9b1J3g8HKGW78h2gsUdsi-So.roa (raw, json)
Hash identifier: N3RkDkRR8pXlGO0DiXAf3GkUlZHp63KpZjhj0rT9HOU=
Subject key identifier: E2:D7:3D:6F:52:77:83:C1:CA:19:6E:FC:87:68:2C:51:DB:22:F9:2A
Certificate issuer: /CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
Certificate serial: 019E65637270680BE539A9EA33B28D5696F0
Authority key identifier: 3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/4tc9b1J3g8HKGW78h2gsUdsi-So.roa
Signing time: Tue 26 May 2026 17:44:36 +0000
ROA not before: Tue 26 May 2026 17:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201040
IP address blocks: 193.93.253.0/24 maxlen: 24
193.93.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:65:63:72:70:68:0b:e5:39:a9:ea:33:b2:8d:56:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
Validity
Not Before: May 26 17:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2d73d6f527783c1ca196efc87682c51db22f92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:62:40:fb:d6:a7:1b:75:3b:78:87:17:fb:
5e:1b:87:09:52:15:67:b5:0a:43:d7:b1:fc:b1:ed:
3f:c8:35:2a:56:64:59:58:9f:3d:7a:1a:e8:05:7a:
f7:c6:45:09:51:a3:02:29:73:7a:dd:4d:fe:09:36:
d7:8d:a4:d2:c4:9e:07:a7:d5:a1:a4:e3:85:98:57:
87:a6:79:4d:60:57:81:ec:f3:9a:0b:5e:a1:a9:79:
e7:f9:c3:b3:56:bc:ba:62:46:c2:6a:30:1f:83:29:
05:29:8d:a3:2b:1e:b7:73:c5:94:49:15:f9:04:93:
5e:7d:3e:a5:55:59:63:46:45:5a:de:3f:82:21:47:
1a:79:52:51:47:e2:93:9c:8a:c1:3b:44:a5:e7:7f:
50:16:7c:aa:e1:b5:db:32:8f:33:6e:05:d8:24:28:
5e:bc:f5:85:e5:20:62:f1:05:94:3d:9c:64:d6:3c:
2b:98:46:07:1e:9b:18:34:32:91:f3:63:c8:9c:c2:
69:1d:50:84:63:07:3b:80:4c:16:64:5f:4d:ce:95:
4d:1d:a8:7b:87:2c:08:2f:2b:35:fb:f6:8b:65:58:
67:84:c6:07:6a:0b:e4:e7:15:35:c0:53:d3:c4:c7:
60:2f:05:67:3e:86:b0:5b:72:9c:c5:e1:d5:5e:bf:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D7:3D:6F:52:77:83:C1:CA:19:6E:FC:87:68:2C:51:DB:22:F9:2A
X509v3 Authority Key Identifier:
keyid:3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/4tc9b1J3g8HKGW78h2gsUdsi-So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.253.0/24
193.93.255.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1f:02:da:42:48:0e:e6:4c:d0:17:4d:de:84:3c:62:17:d5:
b4:02:fd:5b:57:9b:5e:8f:67:e9:d2:0b:d9:54:fd:9b:ce:78:
41:59:e5:a7:0a:0b:0b:66:7d:a1:4f:e2:28:ad:d5:0e:fd:74:
c0:08:2d:88:70:f6:11:03:3d:77:ee:73:b0:23:7f:8d:1b:6b:
16:84:0f:65:0b:06:45:cb:12:40:e7:1a:0c:f3:e4:08:0c:0f:
64:41:50:16:a3:47:d9:32:f8:57:a6:bf:18:03:6d:7b:91:74:
bf:cd:7e:11:6c:d0:e2:0d:b7:9d:99:77:e6:de:e3:59:d7:32:
fd:ea:e8:b1:fa:0f:08:e0:a3:ea:6e:b6:17:b3:be:26:ee:a9:
08:d2:66:4c:46:6a:7b:82:9a:d3:ba:54:0d:15:3d:21:26:33:
fb:a3:11:68:db:bb:9c:42:54:a0:0f:91:06:e2:5d:f0:f0:12:
33:65:07:31:21:e3:d3:31:cf:9a:f2:a0:0a:43:01:ac:dd:54:
6a:85:c9:6f:a6:dd:c9:7f:b8:08:49:53:f4:c5:43:71:e2:35:
5d:fc:67:80:d0:3a:7e:22:48:56:80:e6:86:7f:34:d3:a3:c6:
66:90:14:13:d4:45:9d:ff:19:2f:51:9c:d6:af:cf:b3:ad:bb:
32:ee:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:11:12 2026 by rpki-client