Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/IIzd337ndqahUTUYLMzPo6Cdln0.roa
File: IIzd337ndqahUTUYLMzPo6Cdln0.roa (raw, json)
Hash identifier: UWEgCoa1LHV7YeRQ9V+WSXpDfY1u+biM1IYHbQp0DpI=
Subject key identifier: 20:8C:DD:DF:7E:E7:76:A6:A1:51:35:18:2C:CC:CF:A3:A0:9D:96:7D
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 01A0383B550617AD75ED63AF9689BC724826
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/IIzd337ndqahUTUYLMzPo6Cdln0.roa
Signing time: Tue 25 Aug 2026 09:23:27 +0000
ROA not before: Tue 25 Aug 2026 09:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218990
IP address blocks: 158.94.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:3b:55:06:17:ad:75:ed:63:af:96:89:bc:72:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: Aug 25 09:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208cdddf7ee776a6a15135182ccccfa3a09d967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:79:2e:44:73:d9:0a:55:ca:4c:4a:23:ea:
d3:b4:6c:00:28:2b:c8:59:49:f8:5f:d7:0a:ba:bf:
2b:79:93:4c:83:bd:67:79:54:d3:d9:28:ba:86:2a:
2e:27:b1:16:68:dc:9f:f5:0c:35:ea:74:43:f2:68:
08:ec:f4:34:10:42:cb:a7:18:47:54:f9:53:95:d1:
48:fe:12:ee:4a:ef:81:4e:0a:aa:b6:27:14:5a:01:
28:65:0d:f0:c8:7e:56:f4:65:d8:99:7a:e2:a8:2a:
d7:c8:b3:c3:6a:16:d4:66:c6:47:ee:6b:26:ce:36:
2b:02:06:33:d3:50:35:ad:78:b7:ff:39:fa:b1:2a:
c1:56:38:81:cc:9d:ab:34:12:26:f6:13:14:bc:83:
97:e9:e9:a8:8b:ac:1d:99:8b:e5:93:3a:71:28:21:
28:5e:83:c9:96:1a:9f:c6:5d:c0:26:c0:b6:c1:cf:
a9:8d:d0:3b:ae:b6:be:cb:3e:20:fb:93:4a:df:d4:
e1:38:7f:0b:47:aa:21:b4:1a:d2:e3:08:99:12:78:
f6:81:08:5f:f4:a8:9a:da:f5:71:f8:d5:c8:25:99:
a7:3b:8a:fb:d9:f3:44:57:dd:a1:61:cc:79:71:8c:
ed:05:2a:cd:36:32:9b:28:94:24:a7:c0:a8:9c:83:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:DD:DF:7E:E7:76:A6:A1:51:35:18:2C:CC:CF:A3:A0:9D:96:7D
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/IIzd337ndqahUTUYLMzPo6Cdln0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.160.0/24
Signature Algorithm: sha256WithRSAEncryption
32:eb:7b:fb:8e:b1:7c:f4:50:f9:48:5f:49:05:2e:23:c5:ba:
d9:d8:1e:4b:34:3f:98:55:ad:ff:aa:92:a9:fb:89:68:a6:03:
78:14:5d:58:e9:45:84:64:75:ae:31:2d:36:ca:2e:72:08:a0:
7c:e3:be:45:1b:42:c3:b7:9a:da:cb:bd:3a:ef:e8:4f:42:a4:
53:4a:44:01:7b:04:1a:af:4c:07:7c:d3:2f:ec:c3:60:ff:35:
86:1c:48:36:b7:8e:74:cc:98:c2:3d:a6:af:47:7b:66:d4:70:
5b:2d:66:d2:a3:47:2d:52:f1:9f:40:ae:78:21:1c:17:54:af:
d4:bf:df:7b:0f:3f:0d:17:41:c2:40:51:8f:b6:94:73:de:d3:
f0:ca:74:bd:a4:8a:7b:e4:b8:0b:32:d3:a1:00:23:51:de:d2:
1a:6c:5b:67:81:95:50:0b:b9:dd:56:20:58:4d:75:3e:8b:29:
97:12:73:ef:f4:6f:39:bc:91:96:2c:08:50:a0:0c:8a:12:b7:
5a:87:9a:c8:e3:37:ea:2a:f6:df:a2:41:f4:21:f7:d0:6f:79:
06:6a:7b:64:37:c3:a7:d8:10:e9:56:38:39:d7:f6:ec:de:5b:
e4:74:e0:c1:d9:a8:d2:8a:b8:08:be:cb:04:01:f6:35:9f:a9:
04:d0:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:20:34 2026 by rpki-client