Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/x_1M9RRJIIpTocCZXPLsBX6ztLM.roa
File: x_1M9RRJIIpTocCZXPLsBX6ztLM.roa (raw, json)
Hash identifier: qZsoduGUCBAJMXBIGG/9ZlHZs7W5OTiaFIuJE4vUirA=
Subject key identifier: C7:FD:4C:F5:14:49:20:8A:53:A1:C0:99:5C:F2:EC:05:7E:B3:B4:B3
Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial: 019B79ED16384DEF86F9DA66AC1BA53D077C
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/x_1M9RRJIIpTocCZXPLsBX6ztLM.roa
Signing time: Thu 01 Jan 2026 14:18:59 +0000
ROA not before: Thu 01 Jan 2026 14:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201261
IP address blocks: 185.80.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:16:38:4d:ef:86:f9:da:66:ac:1b:a5:3d:07:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Validity
Not Before: Jan 1 14:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7fd4cf51449208a53a1c0995cf2ec057eb3b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:ea:d8:47:a8:df:47:24:b6:3b:12:85:30:
b5:aa:3d:82:41:79:ab:4a:5a:c4:da:48:7c:86:a2:
63:bd:b6:e7:05:90:1a:e0:84:02:55:06:59:e1:8b:
b7:e4:63:1f:19:60:aa:e6:b7:39:7f:e1:8e:8f:ca:
60:0a:ad:38:b3:c2:6a:77:9e:8f:cc:57:cb:ff:70:
7d:31:bf:05:81:c3:0d:ca:8b:1e:c3:82:cc:e9:e4:
d1:c9:dd:73:5e:9b:7f:0a:27:4f:cf:f9:fa:ca:ae:
74:00:8d:29:64:b8:fd:fa:12:a8:70:67:a6:96:c7:
41:58:8d:c2:a9:c5:b9:db:7a:da:05:1e:3f:ed:19:
08:d0:a3:fb:58:bb:3d:2e:b1:1f:73:e6:8e:90:7c:
2b:ce:53:a5:5a:11:49:e4:56:20:bf:ce:75:c1:e5:
d1:09:ce:2e:0a:8c:95:54:eb:97:e6:7e:ba:27:25:
3a:ed:6e:ea:b4:b2:54:00:8e:bb:46:f7:32:05:20:
5f:c3:0b:c3:dd:14:7e:fb:0f:a8:69:fa:29:97:da:
25:23:b0:dc:4f:80:67:0e:57:60:17:77:26:61:17:
7f:f4:f7:7a:32:3e:98:05:8c:88:20:5d:0f:62:a4:
e6:6b:0f:f9:05:2f:b8:2b:ec:91:f7:f8:f9:7c:38:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:4C:F5:14:49:20:8A:53:A1:C0:99:5C:F2:EC:05:7E:B3:B4:B3
X509v3 Authority Key Identifier:
keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/x_1M9RRJIIpTocCZXPLsBX6ztLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.132.0/22
Signature Algorithm: sha256WithRSAEncryption
41:15:5f:0a:ad:5f:84:2f:ad:2e:e1:36:87:cd:03:a3:56:ee:
78:27:93:ca:7e:6e:c7:64:0d:53:3b:d3:42:72:01:26:8a:50:
f6:e8:d6:ff:dc:d0:f9:9a:1a:e1:77:c4:dd:7f:56:a1:4b:ca:
94:91:74:e7:b9:10:bb:2a:37:77:16:d9:7d:40:4a:b6:a5:e0:
58:02:6d:e2:b7:54:d4:29:0f:c4:64:17:3e:f0:d9:31:77:03:
ec:3c:ca:f9:d9:6c:a3:3c:cd:ae:94:fd:52:97:e1:99:b4:74:
6d:10:c3:be:b8:ae:ea:7b:68:0c:99:7a:48:83:b2:70:73:36:
b2:f2:ad:23:b6:8b:76:9d:2b:69:9a:20:51:03:b9:0d:9a:d1:
3b:f9:3a:36:31:3a:dd:ad:c4:ec:85:94:01:32:6f:53:7f:0e:
01:a7:f9:ae:71:68:a3:10:df:e4:c2:fa:d5:ea:73:bc:e6:ac:
73:64:bd:50:7c:34:d2:f0:1b:de:8a:36:8d:d7:a8:17:ec:ef:
aa:9e:22:87:74:12:2a:23:cc:11:15:1e:7c:b2:80:ce:5f:1f:
ea:74:38:5e:bb:59:f1:36:e5:ac:b9:d7:e3:59:9a:b5:a0:76:
36:64:36:f1:d5:64:6c:9b:c6:e9:f0:6d:92:c8:5b:89:62:5f:
b6:71:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:30 2026 by rpki-client