Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/I0KwTqxUocsvcaYGRR4zapPMMqg.roa
File: I0KwTqxUocsvcaYGRR4zapPMMqg.roa (raw, json)
Hash identifier: dmUgwCvOQahbw3iSzZonSHUNI6WWUEQvrZXsD8lNy/k=
Subject key identifier: 23:42:B0:4E:AC:54:A1:CB:2F:71:A6:06:45:1E:33:6A:93:CC:32:A8
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 01A057088A02165913CC225F386A0E97EE58
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/I0KwTqxUocsvcaYGRR4zapPMMqg.roa
Signing time: Mon 31 Aug 2026 08:56:12 +0000
ROA not before: Mon 31 Aug 2026 08:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219127
IP address blocks: 193.201.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:08:8a:02:16:59:13:cc:22:5f:38:6a:0e:97:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Aug 31 08:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2342b04eac54a1cb2f71a606451e336a93cc32a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:82:5e:ca:ae:6a:f9:80:87:50:1b:3b:36:
35:60:61:a6:e1:45:44:cf:d0:82:90:58:0e:b2:62:
d3:be:e2:9f:f0:6b:70:24:b5:3b:8c:53:a5:30:24:
13:7c:b4:cc:b1:b4:62:75:d5:a4:de:3b:c5:8c:69:
6b:b7:d1:c2:3c:87:20:8a:f7:ae:f6:dd:6b:68:22:
c0:cd:e9:1d:9b:99:cb:ad:89:ac:b7:d9:b1:86:3c:
d1:5f:a1:b2:95:85:c7:a6:c0:a3:3b:17:e8:c3:a1:
fc:92:e2:0a:ad:1b:6f:61:be:ec:50:50:44:25:ef:
e1:e7:14:73:62:a0:d0:b3:0b:b4:25:9e:d6:a5:73:
ac:22:5b:5e:41:9d:1d:d7:a9:7a:52:10:55:40:b0:
cb:07:c5:4a:ee:41:2e:41:be:51:ad:25:3b:45:f5:
ab:a5:61:01:7b:5c:53:d6:2c:23:18:af:35:2d:ff:
d8:42:9d:6e:d2:1a:4c:eb:a8:45:d2:8a:0a:1c:10:
ab:0a:86:45:47:fa:40:7f:72:50:b5:f9:bd:d9:63:
13:15:90:a8:1b:a5:44:14:44:4e:9b:2d:fb:6a:f9:
e6:d7:aa:87:0a:85:4f:a9:5e:60:94:29:79:c2:7d:
bf:af:ec:b3:48:56:f2:8c:da:4d:12:23:a7:7a:6c:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:B0:4E:AC:54:A1:CB:2F:71:A6:06:45:1E:33:6A:93:CC:32:A8
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/I0KwTqxUocsvcaYGRR4zapPMMqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1f:3c:3b:b3:99:25:49:31:32:4d:b7:e6:8d:b9:d7:bd:36:
ad:a0:ee:2f:21:c9:64:e8:2e:45:c5:69:95:16:62:8e:64:22:
f8:20:9a:04:fd:d9:3e:ac:01:99:a0:e1:12:33:fe:0e:82:db:
a1:af:29:41:83:a6:0d:85:fb:8f:92:3c:b9:61:56:72:19:4d:
ab:db:2d:69:80:40:66:4c:14:9b:20:23:d3:c9:18:3e:6a:18:
e1:72:01:e8:24:64:73:76:7f:2d:a7:84:c4:d5:89:46:3c:4f:
09:ba:69:84:c6:71:db:39:20:d7:53:fe:dc:a2:28:fb:39:bd:
56:96:22:b9:8c:bb:9b:84:a3:ce:2a:ac:e3:f2:a3:db:18:36:
a3:2a:79:16:2c:e7:a1:56:a0:6f:e9:3c:e0:05:13:df:a9:c9:
3d:0c:c5:78:70:62:04:26:5c:94:5c:12:e9:c6:0a:b7:75:99:
51:d6:90:0d:d5:8c:32:0b:9a:93:d9:f8:6d:94:98:bd:aa:20:
4d:37:a8:88:a5:d3:a8:33:51:3c:fb:c7:d8:36:2e:2e:25:e0:
34:be:2d:05:fe:f8:09:59:0d:8f:e2:b6:37:98:b3:02:3b:66:
6c:3a:96:e1:42:e1:b9:dd:2c:a5:e9:5b:9f:98:44:14:ad:52:
99:79:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:19:11 2026 by rpki-client