
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/IzU1ZtCEJBcMWWGeqHCBLlsN7_0.roa
File: IzU1ZtCEJBcMWWGeqHCBLlsN7_0.roa (raw, json)
Hash identifier: HDJUZDUvDe+UwucMTicfbbDY+ghKf21TsLfRAdcj9Ks=
Subject key identifier: 23:35:35:66:D0:84:24:17:0C:59:61:9E:A8:70:81:2E:5B:0D:EF:FD
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 019D43CD401896185A6CEE6E4C068B467579
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/IzU1ZtCEJBcMWWGeqHCBLlsN7_0.roa
Signing time: Tue 31 Mar 2026 12:10:17 +0000
ROA not before: Tue 31 Mar 2026 12:10:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57124
IP address blocks: 141.105.144.0/21 maxlen: 24
185.117.76.0/22 maxlen: 24
2a01:8980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:cd:40:18:96:18:5a:6c:ee:6e:4c:06:8b:46:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Mar 31 12:10:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23353566d08424170c59619ea870812e5b0deffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:b2:17:b5:f0:0e:77:f9:08:60:14:73:d4:
e0:b2:fe:6e:b7:e7:5f:29:e5:44:95:e8:3c:bc:fa:
c2:7f:fd:8f:66:b4:d7:b8:1d:c3:af:1f:42:b4:c3:
7d:57:c8:fc:78:6d:66:34:91:ca:39:bf:9e:e4:33:
10:30:a5:8d:c0:00:45:b3:99:95:62:05:79:c7:da:
9c:3e:fb:0b:7b:a6:72:38:01:d9:1b:59:01:1b:6b:
47:14:0c:63:51:83:f9:d1:f6:ee:e3:3c:67:93:54:
12:3f:5c:2e:6b:70:78:15:f6:1d:23:68:b0:49:cf:
45:67:1a:97:d6:7d:69:3c:58:97:00:e6:ad:a1:21:
51:34:72:7b:6f:60:be:25:d3:b1:68:68:42:14:6b:
e1:eb:e8:1f:56:77:09:5f:3d:17:60:ad:64:ab:b9:
34:e5:c7:4e:bf:0e:46:aa:32:d6:2b:fc:de:b0:94:
ab:d8:9e:ff:14:ce:6e:6c:1c:a4:0a:75:24:df:1d:
2e:84:cc:d5:f0:80:25:85:16:f4:11:88:ca:43:f0:
04:ea:d8:ff:c7:56:c8:b7:68:a6:13:64:5f:29:13:
c6:c4:47:1b:45:93:47:bc:62:cf:4b:8a:9b:2a:65:
30:6c:1f:4f:be:77:e0:38:09:4b:2d:13:86:88:1c:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:35:66:D0:84:24:17:0C:59:61:9E:A8:70:81:2E:5B:0D:EF:FD
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/IzU1ZtCEJBcMWWGeqHCBLlsN7_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.144.0/21
185.117.76.0/22
IPv6:
2a01:8980::/32
Signature Algorithm: sha256WithRSAEncryption
59:06:51:04:ad:f5:85:fc:62:cd:89:78:95:79:7a:68:71:b1:
45:0c:33:50:99:58:4b:fa:c1:6d:98:3b:f9:bb:58:d3:32:6f:
3a:46:8c:d3:21:6d:4e:28:d8:46:56:ed:7b:72:26:f4:2c:79:
c1:62:b3:ad:8f:f9:1c:4b:f3:2a:4a:71:e3:2b:0d:02:3e:3a:
fc:ef:69:32:f0:48:f4:45:4e:df:3c:05:7f:27:b2:23:65:a3:
0e:9e:7b:57:f0:6e:a7:fe:b1:dc:a1:c9:ef:34:80:20:38:ae:
8c:8e:81:b4:e7:b3:a0:76:69:c4:23:9c:09:1a:46:0d:17:71:
ba:8b:5c:74:05:dc:8b:ab:b1:24:c7:87:0a:e0:60:dc:a2:7a:
e5:4e:ef:26:62:34:d1:7e:6e:bb:61:03:89:b8:cd:9d:1c:e5:
57:b9:71:40:54:8d:3c:b9:f5:d2:b3:da:e2:f1:c5:b4:8a:82:
7d:5b:5e:f8:e9:f8:38:60:08:a8:82:43:28:29:55:8e:3b:7c:
91:2a:b8:29:69:88:22:8c:c1:16:46:a8:15:0b:65:34:84:64:
19:d0:ad:34:a4:f9:92:03:49:ae:bc:3e:33:f7:d5:c1:ac:d2:
62:61:5f:1a:6e:8e:29:7e:fe:2c:6d:d5:dd:bc:9b:ce:cb:67:
04:a8:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:45 2026 by rpki-client