Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/taKgYCsZGDvagGUF19ZXEeasAPU.roa
File: taKgYCsZGDvagGUF19ZXEeasAPU.roa (raw, json)
Hash identifier: nJ/FzSD5iy11Q8Vrz1U8qvB/SWPV18wb+knyLGsBd54=
Subject key identifier: B5:A2:A0:60:2B:19:18:3B:DA:80:65:05:D7:D6:57:11:E6:AC:00:F5
Certificate issuer: /CN=8b18de6736e258b5f1a008d529922229a2932393
Certificate serial: 01A05D13C7102E12E350FA1F27D830E4943E
Authority key identifier: 8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/taKgYCsZGDvagGUF19ZXEeasAPU.roa
Signing time: Tue 01 Sep 2026 13:06:12 +0000
ROA not before: Tue 01 Sep 2026 13:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197700
IP address blocks: 193.22.180.0/23 maxlen: 23
193.22.180.0/24 maxlen: 24
193.22.181.0/24 maxlen: 24
193.22.182.0/23 maxlen: 23
193.22.182.0/24 maxlen: 24
193.22.183.0/24 maxlen: 24
2a04:ea00::/32 maxlen: 32
2a04:ea00::/33 maxlen: 33
2a04:ea00:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:13:c7:10:2e:12:e3:50:fa:1f:27:d8:30:e4:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b18de6736e258b5f1a008d529922229a2932393
Validity
Not Before: Sep 1 13:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a2a0602b19183bda806505d7d65711e6ac00f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:14:be:9e:c4:0d:ea:91:ad:2a:6b:11:d0:
12:e1:26:02:99:a6:97:2e:98:e3:f3:37:ec:a5:d1:
90:1c:a0:d8:59:08:a9:aa:06:4e:4c:2e:c0:1d:28:
c6:33:f3:db:1a:e8:b2:7e:7a:45:74:c2:0a:64:17:
1c:cb:34:2c:8c:e8:59:cb:b4:e5:0d:6c:d3:69:ac:
41:72:79:c7:93:44:a9:be:f4:a0:8b:93:25:fb:b4:
c3:13:de:39:21:6e:ad:89:49:22:41:0c:8b:cd:b4:
15:be:1c:8f:4f:0e:33:e1:51:72:70:ff:8e:bf:6d:
b8:eb:4c:7d:ca:17:b5:5d:f1:bc:76:89:12:6f:cb:
94:62:57:53:94:82:d4:f3:65:5c:53:b7:0e:9a:b5:
ea:3a:fa:71:ee:b5:d4:a8:1b:9f:b0:ae:8f:d0:ba:
c4:2e:13:e7:1b:04:4a:51:b1:b6:de:79:19:ed:97:
08:94:2b:74:df:e0:e4:18:4d:54:db:b8:89:f5:47:
53:38:61:31:15:97:92:19:94:de:a2:c7:69:4a:ab:
7f:f5:15:bb:19:8e:06:f7:49:e5:6a:e7:f0:31:f5:
c7:31:a5:f1:cf:b9:8d:eb:09:89:53:55:61:72:b9:
56:11:af:24:05:96:ee:e4:70:63:9a:cf:03:4f:ec:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:A0:60:2B:19:18:3B:DA:80:65:05:D7:D6:57:11:E6:AC:00:F5
X509v3 Authority Key Identifier:
keyid:8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/taKgYCsZGDvagGUF19ZXEeasAPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.180.0/22
IPv6:
2a04:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
6a:8c:24:0e:82:86:96:6a:b0:39:66:8e:cf:f2:2e:98:a3:84:
9f:f3:0a:8e:a3:53:ef:eb:11:9b:59:2b:3a:f7:94:5a:f4:7f:
dc:b9:82:f6:9b:76:70:8e:b2:0d:1a:bb:fe:ea:c9:1b:78:98:
89:d6:d5:fe:b0:3e:d1:94:18:25:5b:3c:37:fa:a7:40:16:9a:
17:ec:95:9d:80:8e:27:41:08:80:2b:0b:64:a0:d3:a6:af:ee:
d5:e1:35:30:bd:71:26:b8:f6:25:5f:8d:85:2a:5c:0a:c5:94:
b9:71:fd:08:21:b1:49:ea:7e:41:ab:4a:18:68:58:0e:9b:e1:
60:ef:93:e1:65:21:0d:96:1c:c6:d4:c9:34:4c:cd:2f:f2:a5:
36:d9:5e:15:0a:ad:dd:70:7c:96:74:bd:63:2f:4e:d6:b1:be:
f6:97:aa:d7:a0:57:44:8b:b1:c9:71:da:ee:37:e7:d2:a3:fe:
12:ee:8d:b8:21:12:13:68:21:c6:cc:19:21:d2:90:2b:85:6c:
17:ef:48:78:80:31:cb:ee:b2:fc:b0:50:b9:40:57:36:8e:b4:
42:78:23:5b:81:a4:46:de:b5:8b:61:86:35:0b:8e:c9:41:a1:
f0:05:0e:2f:8a:8b:e3:3d:4b:ad:19:d2:3c:ae:69:45:7b:d9:
08:9c:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:37 2026 by rpki-client