Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/IXAixtOPEsv7gt6BD6ensRZLEqw.roa
File: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (raw, json)
Hash identifier: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=
Subject key identifier: 21:70:22:C6:D3:8F:12:CB:FB:82:DE:81:0F:A7:A7:B1:16:4B:12:AC
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019EBA6267503675D190B84F77F63E6CDF03
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/IXAixtOPEsv7gt6BD6ensRZLEqw.roa
Signing time: Fri 12 Jun 2026 05:51:11 +0000
ROA not before: Fri 12 Jun 2026 05:51:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.219.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:62:67:50:36:75:d1:90:b8:4f:77:f6:3e:6c:df:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Jun 12 05:51:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=217022c6d38f12cbfb82de810fa7a7b1164b12ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:b5:b9:42:9a:e3:47:6b:e5:e3:c1:20:7e:
7b:e4:02:97:9b:01:24:2b:0a:1b:6a:89:01:8e:d0:
c7:ee:70:d4:92:41:67:83:81:31:a3:7a:6c:12:13:
ef:b8:a6:56:dd:ff:e4:6b:2d:8f:20:33:2b:95:bd:
8d:c1:e9:97:e9:cf:9f:52:1b:40:cc:13:27:ec:b5:
a1:be:d5:88:27:17:7c:b7:f4:a6:08:8d:a5:ea:c6:
cb:e8:e3:8f:65:60:94:77:c1:20:c4:05:7b:19:f6:
95:0d:7c:40:c9:39:77:ec:66:23:b9:c9:67:32:c3:
2d:ad:fe:52:81:45:5b:d5:c5:cd:c1:fd:6b:47:6d:
0d:bc:6a:9c:95:c4:f5:fa:b3:ec:c1:37:0a:2c:33:
ec:71:5d:0a:45:18:fc:53:e1:04:5e:36:36:d1:11:
ad:1f:22:9f:28:26:79:82:b2:59:c1:85:a6:c0:b6:
81:1c:2a:b0:dd:39:f3:4a:40:f4:82:72:40:dc:99:
e7:2f:8b:76:90:53:5c:c2:2f:6e:a6:00:aa:bb:24:
5c:0b:69:2f:01:ba:3f:9c:0a:72:7a:ce:cd:f7:60:
a0:fc:42:fc:3c:db:86:50:44:07:b1:f1:16:6c:36:
98:91:5b:76:0f:82:d0:b3:4b:ce:00:bc:e7:cf:ea:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:22:C6:D3:8F:12:CB:FB:82:DE:81:0F:A7:A7:B1:16:4B:12:AC
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/IXAixtOPEsv7gt6BD6ensRZLEqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.189.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9c:fe:e3:df:59:21:38:02:87:9c:81:19:b3:8b:16:4e:c7:
dc:25:fb:93:4b:7d:fe:87:ac:6f:03:9c:3c:eb:1a:77:e7:00:
12:0f:5d:fd:7a:a4:c8:51:ec:bc:b4:04:c7:7f:af:2f:63:c5:
c5:d1:a4:2a:78:70:fb:34:60:e4:2d:e5:ea:ac:74:1f:f6:49:
4d:aa:e2:6c:95:2c:f9:25:7e:e1:23:cb:f7:17:96:f9:03:62:
53:46:05:58:d3:12:f9:49:f1:d2:be:ad:e2:05:ec:33:ed:64:
ab:73:a4:b4:9d:9a:f7:9d:08:2e:28:fc:4e:75:0c:2e:4f:17:
8f:ec:f5:08:14:0a:c9:d8:57:fc:b2:d0:42:35:73:40:7c:7d:
10:f6:3c:8e:08:33:f0:6a:26:72:28:91:da:67:d8:63:b0:94:
ce:3b:a5:22:84:e9:51:a7:bb:97:7d:20:c4:a6:20:9f:74:67:
b9:d6:8d:eb:f1:4d:c7:93:05:ce:67:6d:56:09:0a:5b:94:68:
65:82:1e:dc:b9:07:22:1a:59:b7:b6:a0:22:ed:43:e9:99:9d:
23:e0:b9:d7:1c:5c:9f:3a:d2:79:d5:70:7c:4c:db:ad:66:fa:
79:f4:44:36:0a:b1:bf:5e:de:d5:f4:26:f9:94:d9:d6:05:8f:
85:62:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:00 2026 by rpki-client