Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/IqCUdBuN6Vd_3fBmcNHbMSaSYXg.roa
File: IqCUdBuN6Vd_3fBmcNHbMSaSYXg.roa (raw, json)
Hash identifier: QTmfXP7ucKMXGRXHzNc5Zcmn4GVOCNfHN2w7u+9ec/A=
Subject key identifier: 22:A0:94:74:1B:8D:E9:57:7F:DD:F0:66:70:D1:DB:31:26:92:61:78
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A096099C49F7F474926CD0419B1252010D
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/IqCUdBuN6Vd_3fBmcNHbMSaSYXg.roa
Signing time: Sat 12 Sep 2026 14:33:27 +0000
ROA not before: Sat 12 Sep 2026 14:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 195.238.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:09:9c:49:f7:f4:74:92:6c:d0:41:9b:12:52:01:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Sep 12 14:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22a094741b8de9577fddf06670d1db3126926178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:64:44:06:29:d6:82:db:4b:93:50:8f:86:
af:51:de:af:45:c4:6d:4a:df:5d:81:9e:48:59:fb:
8e:e2:1d:e7:0c:05:16:4e:6e:17:fa:9b:78:04:ff:
5a:36:b3:32:fc:16:68:96:4a:be:a7:19:b6:2f:49:
51:9f:6b:9e:e5:16:42:36:12:df:59:58:12:b3:e9:
8f:1a:31:f6:90:c0:c5:ae:9c:fc:ac:16:30:8f:c5:
ad:54:d3:d4:a8:23:c0:d1:18:21:a0:4e:9a:2a:f8:
72:51:a7:7a:78:5e:9e:56:f6:32:66:88:60:a8:e6:
ae:76:b3:fc:bc:98:e7:e8:6c:aa:a7:6c:60:69:3f:
2d:bc:38:21:12:be:56:97:e8:7c:84:1e:14:75:70:
59:ac:e3:73:1f:c3:70:1c:e4:b9:9d:25:70:18:a4:
26:63:3a:84:45:e0:3d:c4:cc:f3:89:d9:cf:db:28:
a6:0e:ed:9c:05:05:d2:0e:ba:60:76:78:bc:1f:97:
84:6d:ed:5f:2c:d5:df:94:30:c5:40:b9:10:95:56:
19:a8:8a:89:fe:f8:4f:67:14:e7:6f:91:84:fd:d3:
3e:e0:ed:cc:56:95:1b:b9:02:19:41:4c:99:65:02:
97:6d:f7:67:38:a8:c1:76:75:e3:2c:36:5e:51:a7:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:94:74:1B:8D:E9:57:7F:DD:F0:66:70:D1:DB:31:26:92:61:78
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/IqCUdBuN6Vd_3fBmcNHbMSaSYXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.99.0/24
Signature Algorithm: sha256WithRSAEncryption
06:24:c3:f0:57:8e:ff:3f:70:d4:11:33:b4:b9:77:3c:e1:db:
5d:86:ba:a9:11:81:5d:84:2b:79:de:4c:57:c9:da:e5:6f:bc:
0e:11:56:c8:68:ee:f5:7c:18:7b:e7:59:ee:45:98:22:e6:ac:
53:05:36:4e:da:32:ed:b8:56:69:14:3d:45:63:df:d8:67:01:
0f:0d:25:45:99:79:73:f0:53:6a:5e:30:5b:03:16:4b:cf:2a:
50:7c:95:6f:cf:d8:4d:cf:be:61:6b:f6:23:16:58:ca:d1:aa:
25:ef:91:7b:dc:45:e1:70:36:c0:37:ea:f1:da:10:99:11:1d:
69:17:28:9c:4a:63:ab:f3:bc:61:c2:7c:40:25:9a:20:57:0a:
2f:c6:48:16:2d:d0:a5:5b:bd:2b:e0:33:81:63:68:26:11:e9:
4e:22:ab:92:41:73:15:f5:68:ac:0f:34:ac:06:f5:37:84:70:
bd:b2:af:bc:e6:fa:9a:5e:fb:1e:a3:c5:33:66:ad:9f:72:c9:
38:f1:c2:d5:95:be:c0:87:22:b2:c2:d6:ad:fa:f0:56:79:cf:
41:31:cc:fa:b3:57:9f:bc:50:5c:58:6b:17:bf:64:14:9d:05:
c8:07:ce:c7:0b:97:c6:a2:de:2e:5c:81:8c:47:9e:9b:da:00:
b4:b8:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:43:16 2026 by rpki-client