Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/itgGpKuGu8APbN-2Z-lODrOdXgc.roa
File: itgGpKuGu8APbN-2Z-lODrOdXgc.roa (raw, json)
Hash identifier: RvzpB5HrikZyt7XKBGBF/LebdVemHKHKwl6PufhR200=
Subject key identifier: 8A:D8:06:A4:AB:86:BB:C0:0F:6C:DF:B6:67:E9:4E:0E:B3:9D:5E:07
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019D6BBFB9386045F0C33EAC263EB58DFF83
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/itgGpKuGu8APbN-2Z-lODrOdXgc.roa
Signing time: Wed 08 Apr 2026 06:20:20 +0000
ROA not before: Wed 08 Apr 2026 06:20:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:bf:b9:38:60:45:f0:c3:3e:ac:26:3e:b5:8d:ff:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Apr 8 06:20:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ad806a4ab86bbc00f6cdfb667e94e0eb39d5e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:25:af:d3:1f:e8:d7:d9:48:a6:ce:ee:5f:
bb:ab:73:61:c8:ef:87:27:9c:65:20:d0:9a:d0:24:
e2:d3:38:d5:0f:6b:29:20:7a:a0:ce:8c:82:df:6f:
44:26:88:9a:82:8c:49:80:f3:e2:8b:28:3d:d0:46:
ac:2a:7a:7b:ba:6e:fd:3f:0d:c8:ab:34:25:d9:5b:
ec:0f:3c:33:ca:e7:63:57:3c:1a:5d:17:51:a3:c8:
de:52:c2:bc:7b:08:d0:08:96:5a:f9:39:9d:47:94:
a2:db:09:02:c6:7b:f9:37:39:d9:55:e7:8e:8f:94:
91:12:38:98:9e:4a:2d:3e:84:4d:71:e8:79:1d:89:
62:1c:12:5e:75:45:9b:d7:23:21:4b:44:d7:2f:ad:
81:ec:2e:54:ac:4e:c9:54:bb:12:6b:81:8c:3b:fd:
4b:f5:55:dc:87:94:7b:5c:bd:8c:fd:e0:33:c7:0a:
ea:09:cf:fd:9f:86:1f:5a:a6:58:44:46:a1:95:ee:
61:1d:18:2d:49:4f:e6:bf:10:09:f6:68:00:0c:9d:
6f:57:e4:4e:c5:23:4e:99:8a:23:9d:2e:29:ba:ca:
10:60:0b:31:b9:a1:76:4d:ab:a3:7d:5c:78:e9:ea:
9e:90:f3:43:dd:8d:ec:a1:a5:87:de:e6:e9:48:49:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D8:06:A4:AB:86:BB:C0:0F:6C:DF:B6:67:E9:4E:0E:B3:9D:5E:07
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/itgGpKuGu8APbN-2Z-lODrOdXgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1f:cc:d9:7f:b9:f4:ab:d6:f2:04:01:6b:2f:bf:de:b2:09:
68:f2:66:88:67:94:d9:a5:e7:1e:e3:df:fb:b3:9d:90:6b:dc:
92:02:58:f1:ad:bf:0f:6c:b3:f3:3b:f3:80:e6:5f:51:3a:3d:
4f:a1:32:2b:eb:ec:b6:d7:b6:04:70:11:5b:08:21:fc:71:41:
07:bd:11:86:19:a8:80:88:d5:c9:d3:ef:02:3e:ce:f0:af:54:
a5:99:d9:0c:30:72:4a:3c:24:2d:c4:51:80:be:23:33:5b:74:
37:f6:49:76:a0:9b:54:81:3b:42:0c:d1:cb:2f:8d:f8:df:4a:
7d:54:bd:3d:a8:ab:f2:fd:33:56:c8:4b:c6:fc:a8:db:d3:1b:
a2:33:98:49:b5:4c:e2:06:6b:c7:07:c2:e8:54:ba:97:3b:37:
da:fa:1d:6f:98:be:82:2c:26:c0:2c:b1:94:a3:4c:86:6d:b8:
97:c6:bc:9e:59:d5:dd:c9:6b:f3:b3:05:96:b8:df:59:00:ed:
45:c0:82:21:b8:d0:b6:d5:9b:ea:13:57:33:84:a7:98:56:cc:
10:45:69:c5:10:40:4a:5b:58:b8:66:ef:ba:6d:ed:54:33:ee:
34:4d:6d:06:bd:c8:ed:ae:3d:31:ad:94:0a:21:b8:b6:85:c0:
fc:c2:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:53 2026 by rpki-client