Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/iGxz-Xn1SdPPw42vilhkPwqnJ1E.roa
File: iGxz-Xn1SdPPw42vilhkPwqnJ1E.roa (raw, json)
Hash identifier: 2VaJ9V6ISr3oRV3RjWRWjl8vZMcqlKQJOnXDvZit6Xg=
Subject key identifier: 88:6C:73:F9:79:F5:49:D3:CF:C3:8D:AF:8A:58:64:3F:0A:A7:27:51
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019D71E9794623E2478957434444AF6041C1
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/iGxz-Xn1SdPPw42vilhkPwqnJ1E.roa
Signing time: Thu 09 Apr 2026 11:03:39 +0000
ROA not before: Thu 09 Apr 2026 11:03:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 109.122.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:e9:79:46:23:e2:47:89:57:43:44:44:af:60:41:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Apr 9 11:03:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=886c73f979f549d3cfc38daf8a58643f0aa72751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:9b:27:56:19:d5:18:e0:17:dd:ee:7c:db:
ed:f9:f1:83:da:58:42:f9:7d:fd:a3:99:17:33:e7:
41:13:4a:b7:b0:17:7d:3a:d0:17:31:62:b4:e4:d4:
b3:8d:b3:3a:dd:33:91:75:ab:ad:3f:72:4f:0f:20:
64:69:dd:23:50:18:70:22:a1:98:9a:6c:c1:0f:00:
c1:de:a4:30:e7:ed:87:58:6f:1c:83:0a:82:79:35:
8e:06:a4:a1:9f:81:be:7a:61:3a:c2:a7:2b:c9:d5:
19:19:b2:46:b6:21:1e:2e:94:f4:70:a3:10:c1:ad:
8b:ff:76:97:0a:2c:1e:0e:94:86:a2:f3:ae:c9:bc:
87:a1:7b:8f:2d:90:04:62:60:bb:62:87:ff:3f:b5:
87:a2:ab:ad:b2:19:cc:16:e4:5e:f4:45:e6:41:03:
ab:cf:b6:62:22:ff:03:64:1a:6c:e1:ad:13:48:e0:
7b:8f:8c:df:48:e5:f4:fb:b8:b5:f0:69:23:4f:78:
8e:e5:30:f7:c1:03:64:9c:0b:ce:15:94:65:51:af:
1b:e6:71:6e:61:22:08:65:b5:02:90:ed:56:49:87:
a8:fd:4f:4e:f6:8b:96:d3:20:de:27:fe:8e:0d:f9:
50:be:50:02:e8:51:07:ca:71:b2:77:a6:da:49:02:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:73:F9:79:F5:49:D3:CF:C3:8D:AF:8A:58:64:3F:0A:A7:27:51
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/iGxz-Xn1SdPPw42vilhkPwqnJ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:d5:c7:c5:63:dc:d4:86:09:57:48:98:8c:1d:b6:01:9c:dd:
d2:5d:e0:59:bc:71:27:66:24:3b:58:4a:19:e9:a1:04:5c:b9:
51:72:10:60:df:cd:77:13:7c:d9:23:00:96:56:a6:c8:b7:50:
c7:5d:c4:64:84:2b:2b:e3:b8:01:f5:62:cf:90:10:4a:65:f6:
7d:af:c9:49:95:b8:79:a3:3a:d5:cd:e3:64:f0:f0:d1:88:a7:
83:85:4d:e1:51:3d:9a:0a:78:c7:cb:e4:8e:b1:b7:a8:d4:17:
07:3b:e5:04:2b:0c:1d:3b:03:27:a9:9c:7d:51:5d:39:c4:3e:
ae:34:56:c4:e6:23:48:f1:6a:8b:f2:12:c8:56:a0:c6:d1:a8:
2b:e2:52:51:9d:64:20:bb:a8:b5:24:ca:76:a9:e3:11:ce:37:
f3:86:5a:40:3b:c6:9d:ad:6f:01:a7:ca:7e:26:2d:69:d8:d7:
12:12:58:1a:c5:d8:ee:8d:dc:d9:18:22:32:69:1c:5b:09:43:
52:35:25:3c:6b:19:ad:88:7e:88:81:d6:12:b1:a5:11:9b:03:
fe:a9:58:02:ff:35:15:9e:e4:e5:3f:6c:e1:bf:91:af:31:82:
34:a2:53:61:c8:eb:1e:29:94:d8:08:4f:b4:cf:18:a4:81:b5:
f4:31:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:14 2026 by rpki-client