Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qIm1uJ4xwBdhJ1ArveIJMyiYbn0.roa
File: qIm1uJ4xwBdhJ1ArveIJMyiYbn0.roa (raw, json)
Hash identifier: 6oTfQnZnx82mvsyMGV0CQgSfAnrK+sZZpLjef/o2ae0=
Subject key identifier: A8:89:B5:B8:9E:31:C0:17:61:27:50:2B:BD:E2:09:33:28:98:6E:7D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C4206E3CBA6CEC9C997F7998407FF4346
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qIm1uJ4xwBdhJ1ArveIJMyiYbn0.roa
Signing time: Mon 09 Feb 2026 10:51:13 +0000
ROA not before: Mon 09 Feb 2026 10:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203788
IP address blocks: 192.165.226.0/24 maxlen: 24
192.165.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:06:e3:cb:a6:ce:c9:c9:97:f7:99:84:07:ff:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 9 10:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a889b5b89e31c0176127502bbde2093328986e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:33:1e:8a:70:c1:6c:0f:95:88:71:64:e0:
fe:72:c6:c0:91:e7:a2:29:39:0b:e9:29:1d:4b:83:
95:6c:ef:9f:83:8b:d4:69:d5:5a:8b:ad:bd:e4:0d:
25:ce:81:1f:4b:d9:dd:5f:7f:eb:eb:f2:79:62:4c:
ea:1f:a6:a8:88:6c:ed:df:83:ad:fe:c9:a6:21:23:
a4:5d:a6:ca:ac:4a:d1:0a:cc:70:f3:8a:b3:2d:94:
0f:fc:03:73:e4:b1:33:dc:5f:e9:0c:65:e0:2b:25:
9c:57:5c:dd:7a:af:98:ad:4c:31:5b:87:1f:ad:95:
75:9e:dc:20:eb:94:71:85:34:dd:e2:b0:e0:a6:21:
39:db:43:63:5e:06:c2:8c:81:a3:b1:56:70:ca:c2:
a3:bf:ff:69:d2:94:2e:11:8f:9f:6b:7f:8e:ee:0b:
6a:ee:50:a3:f2:51:7b:65:d0:d9:50:bb:4e:c2:6c:
e4:3e:33:9f:f2:bf:bf:55:ed:3e:b8:bc:4d:0f:f2:
6c:36:da:c9:17:60:bb:cb:c1:c6:9d:45:81:51:3e:
0d:81:ad:1f:47:03:58:35:e9:54:9e:49:8b:44:6e:
f3:ed:7c:cf:b9:68:03:27:dd:92:8e:db:96:9c:9c:
e6:97:a0:73:90:72:76:83:1e:13:4a:ec:35:5c:c0:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:B5:B8:9E:31:C0:17:61:27:50:2B:BD:E2:09:33:28:98:6E:7D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qIm1uJ4xwBdhJ1ArveIJMyiYbn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.226.0/23
Signature Algorithm: sha256WithRSAEncryption
74:c7:06:bf:85:c2:f5:78:ba:58:38:f8:2f:6d:2f:e5:dd:cf:
a1:d7:14:29:ca:c4:f0:57:8f:66:d3:ef:fd:fa:81:0c:c2:9a:
de:2d:f1:d3:86:4d:15:12:8d:b4:68:16:1a:e5:63:60:32:27:
93:21:72:b1:90:6c:93:2c:b8:b6:17:cc:37:5b:73:56:00:b5:
b1:78:f8:bf:ba:50:09:14:1d:84:9c:cc:84:c3:9a:23:47:21:
35:0f:d9:c4:3b:1b:1d:a0:24:e3:09:f3:03:ed:86:8f:89:a6:
db:2e:3f:e7:6a:07:ca:31:95:76:bd:ab:61:98:8d:5d:81:be:
ef:d9:67:1d:68:ce:a0:1d:b5:04:61:94:cc:60:fe:98:f2:95:
4b:51:79:2a:39:11:6f:c4:12:2a:45:a4:84:a0:e6:4a:33:ae:
0c:f3:f4:ed:57:38:1d:48:d2:d9:2a:03:a6:fe:65:72:4d:8a:
3f:1b:c0:6a:ff:6f:d4:49:e1:b9:ad:4b:93:8a:dd:bf:d7:f0:
58:9c:fb:fa:f8:d5:f1:bd:39:f5:ac:53:a1:a7:e8:0d:18:8d:
7c:a8:75:bb:8e:bb:40:4f:7c:bc:b4:6b:60:4b:c0:c2:e8:91:
c5:a1:76:0c:e2:3f:c8:06:51:6a:ec:e9:18:91:2e:92:b1:e2:
70:a5:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:23:49 2026 by rpki-client