Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/I6oLG3dm7ddv6spHYQtsETlJMWo.roa
File: I6oLG3dm7ddv6spHYQtsETlJMWo.roa (raw, json)
Hash identifier: keMPx8DSwHVMHVz8Rsk2ht0T92tQ/T9DceCxLpXjRwI=
Subject key identifier: 23:AA:0B:1B:77:66:ED:D7:6F:EA:CA:47:61:0B:6C:11:39:49:31:6A
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A0B11CC4062CE19243607583517FB7F7B9
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/I6oLG3dm7ddv6spHYQtsETlJMWo.roa
Signing time: Thu 17 Sep 2026 20:44:07 +0000
ROA not before: Thu 17 Sep 2026 20:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 185.7.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:1c:c4:06:2c:e1:92:43:60:75:83:51:7f:b7:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Sep 17 20:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23aa0b1b7766edd76feaca47610b6c113949316a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:07:65:1c:11:d9:76:38:ff:c9:61:4c:8a:
be:8c:3d:74:fe:4e:ba:36:fc:0c:93:e2:c0:b6:b9:
e3:10:36:f5:c5:ac:4d:d0:b8:19:5c:f1:36:bc:87:
f5:76:96:f6:af:f7:4d:cb:80:09:f2:08:19:f9:f3:
6e:ef:36:b7:93:0c:da:3a:de:a0:b5:be:ac:59:40:
78:7d:25:e0:76:d6:53:ed:ca:59:b5:d2:87:44:74:
14:75:ac:61:04:41:c4:ae:42:12:3a:86:bf:59:11:
c8:c6:5c:b4:2a:e1:4a:b6:4a:30:ed:85:36:61:2d:
30:22:5d:99:f4:dd:e4:98:29:c2:3f:33:d0:b1:38:
d6:0c:7a:1c:47:4c:d1:52:bd:56:a2:7c:71:73:95:
e4:3e:0a:82:ce:a5:c1:bc:d2:72:72:cb:cb:ca:cb:
a5:b4:1c:a2:6f:3b:24:b8:33:ea:be:88:12:e8:b6:
c5:dd:d9:5c:86:22:43:45:32:71:ec:cc:9a:03:27:
4e:3c:0f:ea:5d:54:0d:c5:d3:eb:52:a3:80:fa:cc:
17:3f:cd:e7:df:07:5e:e0:11:f2:ae:7b:8e:b3:02:
56:4a:dd:f1:43:1f:91:b0:18:5b:e3:06:6c:85:31:
72:b8:8f:bb:db:e5:cf:86:3c:8c:01:04:42:17:d3:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:0B:1B:77:66:ED:D7:6F:EA:CA:47:61:0B:6C:11:39:49:31:6A
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/I6oLG3dm7ddv6spHYQtsETlJMWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.242.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a5:9f:6e:51:d5:5a:10:9b:6d:33:1b:cd:6a:0d:ba:cf:20:
1c:b9:9b:96:c4:36:29:28:ca:29:a3:8a:af:32:67:d9:77:1d:
63:a9:c2:3f:83:51:80:90:e1:41:42:b0:46:02:df:16:11:0a:
6e:01:2e:74:92:f8:cd:ce:4f:15:99:99:ca:c7:a2:7f:86:24:
7d:ea:53:8d:16:09:a4:b6:7a:74:71:82:5e:ff:11:66:66:ee:
af:6d:30:02:fa:0c:37:2e:9f:ee:57:e7:6a:46:3e:3d:f0:25:
cd:c8:2a:51:54:97:0e:0e:fb:19:25:d1:97:04:77:92:c1:9e:
55:1b:a5:de:a4:6d:b3:44:da:f6:e3:64:aa:00:63:42:2b:f6:
51:60:9f:64:60:4c:19:c7:db:99:28:3f:f3:88:9a:ea:ae:5f:
27:3b:f7:38:68:76:d9:31:9f:14:ee:c7:e8:5c:1a:61:20:94:
dd:ee:8a:50:0e:33:e8:d4:6e:05:4e:63:49:58:56:d9:e4:ab:
57:13:56:f6:29:bf:8c:eb:4a:da:2e:11:2a:1a:52:1b:fe:c8:
4c:0e:03:69:0f:52:15:f8:5d:1e:62:50:e3:24:fc:6f:6c:a0:
d7:8d:52:de:3f:54:b1:48:93:bf:fc:5e:3a:20:b5:dd:d9:b9:
63:95:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:09 2026 by rpki-client