Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/iyysDYrQJ9_ixlB78L1f-meC5c8.roa
File: iyysDYrQJ9_ixlB78L1f-meC5c8.roa (raw, json)
Hash identifier: aP1rxpDkJzA1LEuMNoIRCJz58iWpFPnWEPl8DBFxP2o=
Subject key identifier: 8B:2C:AC:0D:8A:D0:27:DF:E2:C6:50:7B:F0:BD:5F:FA:67:82:E5:CF
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 01A1CA5E9C63876C3934911E3435B607C603
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/iyysDYrQJ9_ixlB78L1f-meC5c8.roa
Signing time: Wed 11 Nov 2026 11:29:20 +0000
ROA not before: Wed 11 Nov 2026 11:29:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214914
IP address blocks: 83.174.155.0/24 maxlen: 24
83.174.159.0/24 maxlen: 24
185.42.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:5e:9c:63:87:6c:39:34:91:1e:34:35:b6:07:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Nov 11 11:29:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b2cac0d8ad027dfe2c6507bf0bd5ffa6782e5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:34:a7:59:7e:5b:ad:e4:c8:58:ed:7a:b1:
ab:70:e1:3f:a2:aa:48:00:b1:3f:bd:b4:43:85:9a:
9d:fe:57:4c:cb:35:bf:00:cc:f5:9d:bf:49:26:41:
9b:4f:d2:94:12:8f:95:b3:b9:97:bf:a8:13:65:8c:
52:3a:d6:e2:32:7e:60:44:48:60:0a:cd:8e:31:78:
77:ce:72:82:78:62:e3:e0:22:87:e9:ab:54:9e:d0:
7c:45:65:3e:84:41:3c:42:4b:df:42:6b:d2:fb:ef:
07:67:fe:38:91:9f:15:c6:ac:4b:d7:5e:88:ea:b6:
ff:ce:ea:0b:fc:20:09:0f:34:65:79:10:1f:07:bd:
b6:9d:3c:8d:7e:df:61:d8:c9:3e:1e:84:e4:3a:08:
86:74:42:50:ff:d3:59:5c:b8:d8:4f:b3:43:09:fd:
0b:fa:d4:9e:1a:8d:24:e7:ad:d4:b9:79:f8:b8:64:
24:a2:22:d1:3b:61:52:54:b3:ea:79:c6:f9:62:da:
3d:58:23:ec:cc:3e:f7:3d:28:64:5b:7f:69:3e:3b:
3b:b3:51:47:24:d5:a5:d5:eb:21:1a:4c:15:07:57:
9c:c4:95:8a:96:2c:2a:50:db:43:eb:8d:aa:d3:86:
e8:fd:e3:90:dc:1c:5b:23:49:65:eb:a4:6e:3b:1a:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:AC:0D:8A:D0:27:DF:E2:C6:50:7B:F0:BD:5F:FA:67:82:E5:CF
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/iyysDYrQJ9_ixlB78L1f-meC5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.174.155.0/24
83.174.159.0/24
185.42.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:db:52:2b:50:72:82:bd:de:60:a3:97:17:40:3a:04:c4:45:
dc:3d:00:10:f1:e0:86:75:8c:36:19:9f:99:95:3b:ec:67:0d:
46:5c:4b:3f:f3:e2:4d:b2:da:11:b1:8e:10:43:ec:f5:65:ea:
cb:b0:b9:1f:b2:71:fa:6c:e5:bb:ce:34:1d:0a:03:cb:cb:d4:
d0:69:4d:e4:95:eb:80:c8:fb:cd:27:12:1b:9f:18:15:10:f2:
03:08:0c:59:4a:a2:1d:4b:0c:d8:0e:e8:39:fb:a0:8a:4c:ff:
41:27:11:71:06:c5:de:6a:4f:d1:83:c0:2f:51:22:3c:76:64:
a4:50:8e:18:8d:4a:0c:7d:8f:f7:be:68:a6:f5:34:3a:f6:fe:
8e:c0:de:e7:4e:11:ca:e5:ce:b4:eb:5e:10:07:11:3b:b2:6a:
c4:87:c0:d8:3f:2b:6d:c8:aa:0b:f1:5a:63:47:35:99:c9:59:
92:78:63:a6:92:99:61:9b:3c:a2:c5:f2:51:40:f8:6f:61:c3:
80:04:d5:60:bd:50:3e:d9:17:d3:1e:fa:1c:5c:1e:36:ef:60:
5b:a7:9a:cd:ba:da:14:f2:24:ac:39:2c:c9:07:7f:65:2c:56:
7b:9d:d1:98:0f:95:81:45:e9:69:ac:ba:bc:23:54:58:8f:68:
14:bd:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:22:16 2026 by rpki-client