Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-4pN4GZBPzZ02o1v3_rsBvpWeZc.roa
File: 1-4pN4GZBPzZ02o1v3_rsBvpWeZc.roa (raw, json)
Hash identifier: ERJZowLc/Rr/3l25NTGjDNydRJc1gK5ewnhWDLgO/Gc=
Subject key identifier: FB:8A:4D:E0:66:41:3F:36:74:DA:8D:6F:DF:FA:EC:06:FA:56:79:97
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C94A01F23469691FDC483A40CE8AEF63B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-4pN4GZBPzZ02o1v3_rsBvpWeZc.roa
Signing time: Wed 25 Feb 2026 11:47:27 +0000
ROA not before: Wed 25 Feb 2026 11:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199150
IP address blocks: 193.180.242.0/24 maxlen: 24
2a01:280:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:a0:1f:23:46:96:91:fd:c4:83:a4:0c:e8:ae:f6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 25 11:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb8a4de066413f3674da8d6fdffaec06fa567997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:bf:27:cc:ce:05:97:0e:73:d1:01:bb:58:
9f:c7:a8:c5:31:0d:29:21:67:f0:14:09:27:6e:34:
28:a4:c6:c3:90:d1:1c:07:56:4d:55:3f:09:43:71:
42:ab:06:c2:cb:db:0e:5a:92:dd:8a:e3:dd:31:3f:
47:97:90:6c:ad:50:60:72:25:f5:14:78:af:ab:fa:
20:32:99:e7:8d:d2:5c:d7:79:2c:06:d2:a0:5d:4d:
08:ea:58:72:ed:e5:ee:a9:0d:02:c7:97:12:ea:f6:
52:4e:82:ce:63:1d:ae:c0:8b:bd:a9:08:ed:20:51:
82:e2:ae:b2:d5:f0:fb:96:f0:3e:97:33:2d:0b:d9:
6b:c5:b1:ef:d4:d5:18:ce:9d:34:cd:f5:00:5b:9c:
f2:1a:2d:43:b5:27:09:ea:63:26:b5:be:e5:48:3a:
33:8e:e1:63:ff:9c:b7:9c:47:da:da:3e:a9:1c:5f:
6a:62:da:81:4e:8e:29:c6:a4:cd:75:ad:bd:da:3b:
a3:01:38:b9:93:cd:9b:16:ce:11:f3:13:3d:fe:0f:
c8:e2:0e:b9:5f:78:d3:f7:9e:33:a5:b4:ac:40:58:
4d:d5:2b:8e:9c:fa:25:72:30:88:15:a1:bf:dd:65:
12:b8:66:0a:74:1a:b7:10:fe:02:02:e2:06:8b:1b:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:4D:E0:66:41:3F:36:74:DA:8D:6F:DF:FA:EC:06:FA:56:79:97
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-4pN4GZBPzZ02o1v3_rsBvpWeZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.242.0/24
IPv6:
2a01:280:108::/48
Signature Algorithm: sha256WithRSAEncryption
c2:f4:50:fe:d6:5f:c5:db:78:42:aa:a2:1c:e4:25:60:9d:bc:
08:52:e0:28:8e:3e:7f:77:5c:36:d5:0d:b3:5d:ce:4b:31:d3:
0d:30:7c:b0:d2:5c:96:b0:81:72:6c:32:17:34:3a:0f:a6:b4:
d9:52:f5:69:ea:b9:6c:d6:42:20:25:03:c7:76:c9:cf:63:c6:
01:1c:ee:66:6a:c6:77:35:74:4a:cd:72:d7:85:85:f6:c7:f6:
55:23:50:2e:4f:07:74:96:bc:ec:30:e9:c8:1e:7d:0f:7a:2d:
4a:9f:65:4d:ba:21:85:cf:ed:a5:3e:ee:d7:e9:af:c7:b2:e9:
05:5b:0e:47:43:d0:07:d7:9d:eb:6e:44:e3:24:40:4b:af:00:
dc:51:c9:20:0e:4c:71:0c:73:5d:b1:d7:96:07:c3:de:5f:66:
18:e4:3f:db:0c:c7:7e:55:75:5c:09:10:73:c7:d4:ae:e8:45:
ec:81:2f:32:28:28:77:0f:f7:a0:cc:60:57:48:a9:a7:3b:b2:
22:cc:e9:a6:6c:12:11:f6:2c:37:d5:2c:5c:7b:14:71:c6:84:
58:73:72:b0:95:aa:ca:6a:5f:ce:11:67:ba:66:9e:29:b3:c3:
8e:5d:ef:83:4f:51:1d:07:a8:87:56:55:67:27:95:9c:ef:8c:
8b:10:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:43:14 2026 by rpki-client