Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/iZV4JNu7XUVZE3fbeE9-06JFkYo.roa
File: iZV4JNu7XUVZE3fbeE9-06JFkYo.roa (raw, json)
Hash identifier: A+3MSHH1rEWOfKk/RKA4Dki25SqSQAWMcNK8kcpk7g0=
Subject key identifier: 89:95:78:24:DB:BB:5D:45:59:13:77:DB:78:4F:7E:D3:A2:45:91:8A
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 01A1202765BA649DF0387F4B235CF98F15A2
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/iZV4JNu7XUVZE3fbeE9-06JFkYo.roa
Signing time: Fri 09 Oct 2026 10:13:35 +0000
ROA not before: Fri 09 Oct 2026 10:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 185.124.92.0/22 maxlen: 22
193.142.176.0/21 maxlen: 21
193.142.184.0/22 maxlen: 22
2a06:b100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:27:65:ba:64:9d:f0:38:7f:4b:23:5c:f9:8f:15:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Oct 9 10:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89957824dbbb5d45591377db784f7ed3a245918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:98:d0:f1:a7:77:4d:3b:af:f7:49:99:53:
86:68:d2:dc:b6:c9:2f:c1:cf:ab:87:ad:c5:87:10:
5a:56:2f:c3:7c:93:3e:51:c1:62:c5:80:09:9c:6d:
0e:c5:4c:fa:6e:c2:df:28:98:82:af:24:24:89:4f:
dd:33:dd:a1:ec:42:4f:4e:fe:9e:06:83:61:05:59:
7f:13:40:c9:99:34:4e:11:34:e0:a5:01:5f:b7:df:
e6:01:60:c9:b8:f3:73:f2:69:b0:54:52:27:c8:fa:
9b:27:4f:58:e0:ef:3e:49:c5:37:0c:6e:79:2c:a3:
2a:9b:39:69:7a:28:5a:0c:84:65:2e:35:f9:b1:87:
22:bf:18:8a:90:62:40:36:b6:5f:e1:d6:a0:94:9e:
e7:76:73:68:5c:56:b6:fe:20:af:74:5b:20:f4:37:
13:fd:6d:b8:bb:36:b7:78:a0:47:00:f9:0d:7b:ef:
04:b7:6f:cf:1d:dc:01:c8:6f:a5:55:8f:5b:7f:83:
02:44:1e:e3:ba:16:a9:28:aa:93:e2:05:57:1d:79:
08:7c:bd:3b:e1:c1:b9:b4:99:c4:1a:7b:de:3c:fe:
85:73:31:1d:bf:16:10:71:d1:3c:43:b6:5f:d0:80:
4e:6f:de:ff:62:89:43:d3:3a:f2:53:4b:bd:4a:d9:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:95:78:24:DB:BB:5D:45:59:13:77:DB:78:4F:7E:D3:A2:45:91:8A
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/iZV4JNu7XUVZE3fbeE9-06JFkYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.92.0/22
193.142.176.0-193.142.187.255
IPv6:
2a06:b100::/29
Signature Algorithm: sha256WithRSAEncryption
60:23:6b:4b:ac:43:35:63:f8:66:c8:23:11:31:49:7c:d8:ce:
26:dc:40:4b:a2:be:d7:b9:cb:d4:9d:dd:76:c5:af:7e:d1:c4:
41:0f:03:7d:21:4d:cb:b8:73:37:e3:92:0c:cf:bd:f6:e9:30:
98:3c:71:ef:fb:e1:3a:d9:52:88:d3:44:a2:58:3f:68:51:49:
f9:ad:83:06:87:87:1e:02:89:c9:f2:cd:04:9b:d3:a0:b1:25:
82:7c:64:32:f4:df:db:f6:4f:de:a4:3f:04:d4:12:83:14:c5:
06:f0:da:d1:72:68:d7:9b:6f:28:b4:6c:53:6f:47:b3:fc:b2:
3b:53:60:f5:fb:ae:26:36:02:ad:38:7c:44:08:3c:7b:bd:3a:
e3:7b:ee:38:01:35:e5:7c:41:dd:8c:7d:69:c1:f2:05:03:e5:
f6:5b:77:3f:78:f6:94:a7:80:01:a0:e1:cb:e5:8c:5d:ea:e8:
81:1c:be:59:f5:a0:7b:a6:26:45:77:70:0b:df:20:9e:bb:b3:
7d:21:cc:57:3b:90:bd:3c:a9:4d:33:fb:0d:2c:ec:b3:4b:bb:
53:a4:23:bc:c5:b1:de:a7:dc:f7:f6:39:34:34:b8:17:e0:58:
e6:d2:6d:ec:f4:f4:3c:9d:4a:ed:da:f2:ac:92:21:8f:76:5e:
de:c5:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:07:48 2026 by rpki-client