Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IaRM0dSlyQa9oJxvK6Pli1jkOms.roa
File: IaRM0dSlyQa9oJxvK6Pli1jkOms.roa (raw, json)
Hash identifier: CxhYq9OvoMu7w9/TNTUsqcTCaEwejxUa/LmQt6N3Lxs=
Subject key identifier: 21:A4:4C:D1:D4:A5:C9:06:BD:A0:9C:6F:2B:A3:E5:8B:58:E4:3A:6B
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A07C273C90AB9E27AB445B80C075A9A2AD
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IaRM0dSlyQa9oJxvK6Pli1jkOms.roa
Signing time: Mon 07 Sep 2026 13:55:41 +0000
ROA not before: Mon 07 Sep 2026 13:55:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 2.17.224.0/22 maxlen: 22
2.17.228.0/22 maxlen: 22
2.17.232.0/22 maxlen: 22
2.20.24.0/22 maxlen: 22
2a02:26f0:c700::/48 maxlen: 48
2a02:26f0:cb00::/48 maxlen: 48
2a02:26f0:d100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:27:3c:90:ab:9e:27:ab:44:5b:80:c0:75:a9:a2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Sep 7 13:55:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21a44cd1d4a5c906bda09c6f2ba3e58b58e43a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:12:23:76:f0:93:69:16:e0:f8:83:21:85:81:
74:75:26:c8:6e:db:aa:6b:f7:ba:d2:28:37:9c:e1:
d6:ca:12:56:f2:f3:fd:4c:d8:bb:b8:1e:55:f6:93:
4f:ac:66:b6:12:00:9c:db:70:f0:55:f9:7b:d2:6e:
30:ae:47:29:ed:8f:2c:10:5b:c2:86:67:72:78:4d:
1a:96:7f:86:39:bc:8a:f2:a4:d7:a5:39:b3:f8:9c:
12:fb:1c:f4:4e:f4:60:7e:08:76:f3:26:f4:4e:cf:
f5:49:63:d7:43:20:4e:01:78:04:35:90:d5:25:d4:
7a:a8:50:8d:94:8f:0f:75:97:a2:f5:79:5b:db:6d:
2e:c4:24:f0:fc:80:9f:89:17:15:a7:14:b1:60:49:
80:fb:1f:4e:bc:30:6c:50:5c:08:97:b9:00:20:21:
da:8d:84:cd:cd:98:65:4d:d4:da:b5:d6:b2:44:80:
d9:36:5e:44:30:63:d7:ca:41:cd:1a:16:4d:c2:f3:
06:5e:18:ff:04:94:cc:7d:9e:83:51:05:f4:c9:56:
57:4e:3f:cc:9c:f8:38:d5:a0:66:ab:51:2f:1e:1d:
15:5f:8f:c5:1d:49:2c:b6:05:ef:27:c5:29:e9:73:
3f:36:03:6b:24:f5:5f:84:a3:23:6e:29:4f:42:7a:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:4C:D1:D4:A5:C9:06:BD:A0:9C:6F:2B:A3:E5:8B:58:E4:3A:6B
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IaRM0dSlyQa9oJxvK6Pli1jkOms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.224.0-2.17.235.255
2.20.24.0/22
IPv6:
2a02:26f0:c700::/48
2a02:26f0:cb00::/48
2a02:26f0:d100::/48
Signature Algorithm: sha256WithRSAEncryption
85:1e:31:27:3e:2c:5e:f9:d5:85:93:04:37:65:70:cd:99:59:
d2:15:c3:66:08:aa:e7:fe:c1:9e:53:bb:3f:e3:98:21:54:c5:
3f:b9:a2:70:e4:ff:9d:de:eb:ff:5a:54:7c:0c:cb:e4:f8:bc:
ae:c4:fd:9e:9f:a8:9b:11:1b:68:d2:fc:2c:78:a1:d4:8d:44:
e6:b6:2c:3f:38:80:27:63:b6:aa:6b:31:9e:a5:8a:db:89:3c:
94:a4:07:41:43:8e:0b:7a:bc:30:ec:50:ef:06:04:21:ca:ab:
ec:eb:52:d7:88:5e:c6:d6:35:4e:b6:a7:f9:7e:bc:66:b4:06:
fa:15:f5:02:da:9b:d1:e4:70:5c:30:b9:3f:0b:2b:46:5d:b6:
48:1b:26:37:52:d4:ed:70:a3:02:3c:66:9e:60:ec:e1:fb:f3:
2c:1d:65:c5:87:59:cd:7b:cd:e7:7a:8b:de:78:2f:2c:40:8e:
49:71:35:9c:4e:35:7f:58:c8:80:4e:57:da:a8:37:97:7c:e5:
42:1d:77:69:4b:1d:35:a2:ff:f3:f7:57:55:44:f1:42:7b:0c:
3f:ec:81:57:9b:46:f5:f8:b1:5b:f1:1e:25:8f:01:35:c5:d3:
08:1c:10:00:50:2f:11:ff:fc:73:f1:fa:c5:37:9f:d0:3a:02:
4f:e7:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:45 2026 by rpki-client