Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/ix-lKt8dTJwnHq6nkys_hd5cRUc.roa
File: ix-lKt8dTJwnHq6nkys_hd5cRUc.roa (raw, json)
Hash identifier: zvXc+sCex2FDV7KAvNJ5yPJGwAH9w5j+hanOObjkpEQ=
Subject key identifier: 8B:1F:A5:2A:DF:1D:4C:9C:27:1E:AE:A7:93:2B:3F:85:DE:5C:45:47
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 019B7C80B8F7873B85E8F9826BEEBF0075DD
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/ix-lKt8dTJwnHq6nkys_hd5cRUc.roa
Signing time: Fri 02 Jan 2026 02:19:29 +0000
ROA not before: Fri 02 Jan 2026 02:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42547
IP address blocks: 194.50.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:b8:f7:87:3b:85:e8:f9:82:6b:ee:bf:00:75:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Jan 2 02:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b1fa52adf1d4c9c271eaea7932b3f85de5c4547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:0a:b9:c0:7e:8d:d0:e5:2b:e9:51:b5:ef:
49:19:5d:12:27:99:f9:f0:a0:98:1b:da:60:fa:ac:
9d:82:34:c2:6b:3f:d8:22:df:89:a9:d2:c4:05:74:
60:81:79:8b:4a:59:bf:9b:fc:06:69:e2:67:92:ba:
49:60:82:62:49:a5:2d:30:33:3e:bf:1c:0b:02:12:
31:06:0b:7c:21:aa:49:33:21:d1:87:1b:19:eb:cf:
37:66:04:d9:98:a0:98:ee:47:49:ad:a5:da:ac:50:
9f:f6:7c:9a:0c:ef:63:3f:e7:a9:15:c0:16:52:c8:
e0:36:81:42:b9:9c:59:2a:ac:9c:51:76:1e:96:27:
a1:4a:5d:22:8c:08:0d:fd:ad:93:3c:1e:26:03:53:
23:4c:d9:29:49:f0:0b:3a:a1:49:49:9c:5c:a5:13:
06:d3:e8:4c:38:ab:3c:54:9c:1f:e6:88:1c:36:77:
c2:91:18:91:bf:e2:e4:4b:de:92:40:3a:a5:25:12:
79:9e:e3:a4:63:77:0b:3c:2d:7c:e5:fd:45:0e:3d:
ff:9d:28:62:a6:ba:ab:58:45:53:31:98:5b:1f:11:
fb:27:aa:89:b3:17:16:2a:52:72:43:52:ae:1b:82:
2b:e7:e2:6c:7a:9b:41:5c:11:d8:ee:2d:57:df:28:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1F:A5:2A:DF:1D:4C:9C:27:1E:AE:A7:93:2B:3F:85:DE:5C:45:47
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/ix-lKt8dTJwnHq6nkys_hd5cRUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8e:27:24:11:f2:56:04:4e:4c:7b:6b:03:aa:f8:60:f0:cf:
2b:11:c5:88:83:3a:97:9e:0f:62:d5:14:c5:32:8e:38:00:09:
9a:d5:9f:14:ac:7e:c9:ba:30:1e:0d:df:0a:db:0c:f1:47:96:
62:1f:de:d5:a2:b8:00:1e:3f:8c:26:fe:f0:2a:dd:09:7c:f0:
f9:87:11:7a:d9:cc:49:17:e1:d7:fb:fd:60:6b:fe:36:22:74:
d1:79:6f:ce:69:3f:40:89:a4:97:a3:bf:5f:41:23:5d:a4:0e:
a0:58:8c:be:5a:07:3f:f5:8b:63:9f:25:07:6f:8e:bf:39:35:
97:9a:11:09:a5:e8:38:4f:42:3d:a6:1d:bd:9f:0a:b8:0c:24:
25:e7:4f:25:10:4b:d9:02:be:3b:2b:cf:7e:9c:dc:b5:fc:66:
6c:ec:3f:71:ff:9a:e0:01:d9:b7:9b:5c:c0:96:ed:95:8c:19:
d9:dd:e1:45:6b:f5:19:a8:38:ca:e2:6c:3b:c6:ea:da:31:75:
45:bf:d2:12:91:77:7a:e2:18:e5:7d:23:97:a8:e2:d8:ed:5d:
3b:b7:22:9b:67:fe:20:22:b2:8d:56:b4:f7:4a:66:ed:f9:cf:
65:cf:df:d8:34:e3:ff:2a:fb:d0:b2:e0:f7:0d:22:65:8a:1c:
60:f5:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:22 2026 by rpki-client