Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/iXaj_kYTlkm0fAGHBa2-E20g17Q.roa
File: iXaj_kYTlkm0fAGHBa2-E20g17Q.roa (raw, json)
Hash identifier: eFFfAbmshTsHNFLpZKWGQ2ZVnPIvFCyKX8Nbj611da0=
Subject key identifier: 89:76:A3:FE:46:13:96:49:B4:7C:01:87:05:AD:BE:13:6D:20:D7:B4
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0C2E2EE8D41212B3851B1345F22719957
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/iXaj_kYTlkm0fAGHBa2-E20g17Q.roa
Signing time: Mon 21 Sep 2026 07:34:07 +0000
ROA not before: Mon 21 Sep 2026 07:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30088
IP address blocks: 195.180.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:e2:ee:8d:41:21:2b:38:51:b1:34:5f:22:71:99:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 21 07:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8976a3fe46139649b47c018705adbe136d20d7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:47:37:9f:c2:04:5b:dc:63:08:0f:97:78:
d3:3f:77:22:d2:8a:e0:ce:f0:ed:63:db:15:d6:8c:
94:07:52:97:83:30:9b:5f:c6:e9:0a:f8:ff:b0:38:
3b:ef:e3:f4:da:a7:74:48:94:cd:7c:63:7a:8d:dc:
04:12:54:a4:60:42:1f:e6:1c:0e:c2:e3:3e:15:38:
08:5e:f5:b3:90:96:2d:b8:8a:71:cb:59:c2:04:62:
eb:f8:35:de:2e:20:f8:d2:c4:79:47:f9:74:bd:14:
e6:0c:ab:ee:1d:fc:e2:a9:94:df:c1:c3:73:c5:7d:
6b:93:75:0d:d6:bb:38:69:bb:3c:c7:67:32:29:80:
df:15:56:2e:5c:0f:fd:b4:03:29:83:13:a0:77:09:
4a:f2:f1:6e:03:d2:50:9a:f5:7a:eb:91:47:10:8c:
5b:b4:8d:34:a1:3b:c3:6f:ea:9d:51:51:fb:57:c1:
6c:dc:e1:45:ec:c4:72:6a:65:38:86:5e:fd:88:50:
ac:84:6e:43:48:07:9e:e6:dd:70:18:c3:5c:6e:b6:
9f:9f:c9:87:53:36:17:21:4a:c6:94:22:77:39:a1:
da:b0:f4:b1:f8:d2:10:f5:c3:ac:1e:55:2c:08:95:
0b:ff:03:e4:d5:24:84:50:33:97:46:69:c4:ca:08:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:76:A3:FE:46:13:96:49:B4:7C:01:87:05:AD:BE:13:6D:20:D7:B4
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/iXaj_kYTlkm0fAGHBa2-E20g17Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.136.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bd:f6:5d:ab:f4:83:b3:46:ec:d2:80:f6:3d:ee:81:14:dd:
08:63:e1:ec:8f:2a:2c:56:41:b3:04:ba:89:aa:ba:47:41:b0:
19:d0:f0:24:53:c7:84:38:99:68:65:35:92:f8:6c:7b:a4:b8:
6d:41:85:7a:c2:e6:9b:9a:25:d9:34:e6:9a:7d:5f:79:d5:be:
60:19:9e:69:0b:a9:03:c4:a0:2f:4e:e0:33:af:40:8d:be:8e:
72:45:a0:23:bd:81:8d:18:8e:11:79:f7:45:22:91:25:a2:99:
0f:c1:e9:d6:3d:d4:b8:71:65:f9:a4:a3:32:f5:a5:d9:7f:d2:
43:4b:1f:34:31:21:ae:e9:46:eb:37:2a:dd:69:1a:5b:83:aa:
66:87:04:be:64:0d:bc:0e:df:65:ca:3e:22:1f:61:3e:bc:cf:
db:c8:51:e3:19:b7:3c:98:81:f3:7e:ca:1f:85:c9:97:ae:cf:
3b:a2:46:0d:17:c2:86:69:f7:b0:a9:a5:60:70:87:8a:9e:9b:
e0:ce:8e:96:b5:63:85:2e:3a:4a:62:29:fe:19:3f:fe:26:13:
65:a3:43:c4:e9:69:04:77:bd:10:82:bb:b6:9d:8a:53:b7:6f:
a3:f1:cc:8a:af:1d:ec:5b:70:78:9c:7e:c0:92:13:40:0a:4a:
b6:c8:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:40:20 2026 by rpki-client