Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iZqURAiVD2BheCSHlzPp8snD6Ns.roa
File: iZqURAiVD2BheCSHlzPp8snD6Ns.roa (raw, json)
Hash identifier: s4HtMFYrD7OuZYaM08pt1w65Pa4Q2RYZZ0PhCAXzaJk=
Subject key identifier: 89:9A:94:44:08:95:0F:60:61:78:24:87:97:33:E9:F2:C9:C3:E8:DB
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A0AE837BE198D342367689C7760E0CD399
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iZqURAiVD2BheCSHlzPp8snD6Ns.roa
Signing time: Thu 17 Sep 2026 08:37:27 +0000
ROA not before: Thu 17 Sep 2026 08:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.133.210.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:83:7b:e1:98:d3:42:36:76:89:c7:76:0e:0c:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Sep 17 08:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=899a944408950f60617824879733e9f2c9c3e8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:4c:44:06:84:02:31:98:7f:6f:2a:b8:6b:
25:61:da:b4:c5:30:2e:92:12:a6:b4:ff:e2:0f:2b:
e6:b9:b5:98:4d:67:06:05:6e:b4:71:8d:8c:61:ed:
e1:b0:3e:0f:7b:ff:27:ed:97:33:53:89:f5:33:49:
6c:6a:d5:e5:ab:81:4e:94:97:96:f2:9e:4a:04:18:
06:3b:b6:23:b7:90:26:d1:08:b2:a8:ab:01:a6:dc:
81:df:20:4f:9c:34:63:a0:2c:68:07:ab:a9:a3:6d:
18:ed:cb:03:2b:74:84:6b:93:54:12:34:9c:d0:c1:
d4:5f:7b:46:55:46:71:f8:21:cf:e4:ce:09:ee:27:
a6:26:df:60:b1:3f:8f:86:32:e7:5c:f3:a7:fa:ae:
73:9d:01:8d:c1:95:df:84:77:e5:2e:9e:bc:f2:9d:
3f:ee:1d:b3:10:7f:d4:3a:c8:47:f3:24:54:b6:72:
f0:c1:81:c4:e2:12:3c:03:63:75:9f:74:ec:fd:b1:
5b:bc:d8:a8:b2:19:54:92:3b:07:b6:30:52:a3:4b:
f4:89:4a:58:e7:a2:10:78:8a:b4:bb:a8:18:e8:45:
a1:bb:5e:f9:e2:e5:5a:ce:b1:4a:a8:98:96:35:fa:
32:c4:8f:e1:56:1c:69:93:de:25:4f:e8:b1:17:65:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:94:44:08:95:0F:60:61:78:24:87:97:33:E9:F2:C9:C3:E8:DB
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iZqURAiVD2BheCSHlzPp8snD6Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.210.0/24
Signature Algorithm: sha256WithRSAEncryption
51:89:e8:ff:b7:ae:31:2d:40:3c:52:a6:c7:54:1b:ee:99:2e:
74:25:d4:29:7e:96:c6:fe:38:8d:6b:b4:3b:e6:38:22:fb:c0:
10:85:83:57:49:41:7d:95:58:2c:aa:cc:d7:98:a5:9c:d2:7b:
df:bd:6e:d6:b6:84:d1:3b:d1:03:cf:42:3f:87:7d:f9:f7:a7:
83:36:cb:9a:df:ba:7b:96:11:8d:fe:14:18:fb:25:e5:15:ab:
5a:99:eb:90:13:02:67:78:7e:28:74:ca:ca:23:95:44:32:3c:
3c:df:7c:a3:3d:ee:ca:5b:af:da:12:0b:68:4c:b5:af:ab:00:
2f:e8:da:ec:9b:f3:07:c5:17:53:98:21:18:5d:e0:de:7d:50:
9c:64:f8:18:f9:9e:2d:96:43:1d:aa:87:d2:8b:a1:f6:d8:41:
d4:46:56:a0:ad:6e:5f:87:a0:76:27:f0:ce:73:bc:a7:ee:26:
77:e3:aa:2d:92:fe:1c:1e:46:e4:f5:cd:46:15:db:5c:94:d6:
86:2a:41:fa:e7:4a:24:b1:0d:c0:ad:9d:0b:fd:57:20:2c:1b:
f1:7f:af:10:d4:a6:96:c2:bd:93:7a:72:b8:63:e5:0a:e5:79:
1f:9e:04:c2:cc:e7:7b:31:ff:a5:e7:3e:a8:ce:d5:ea:40:d9:
30:83:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:17 2026 by rpki-client