Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ide8fQUIjPeONt5cttSxQZFyxdo.roa
File: ide8fQUIjPeONt5cttSxQZFyxdo.roa (raw, json)
Hash identifier: YCd6O9Up68nEaOXBbkPvxzmkWX8hinfdVJnExyvLKf0=
Subject key identifier: 89:D7:BC:7D:05:08:8C:F7:8E:36:DE:5C:B6:D4:B1:41:91:72:C5:DA
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01A0AF8F6C48FE9ABC8EB03BC35F95EE7AEC
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ide8fQUIjPeONt5cttSxQZFyxdo.roa
Signing time: Thu 17 Sep 2026 13:30:07 +0000
ROA not before: Thu 17 Sep 2026 13:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.224.196.0/22 maxlen: 24
80.224.220.0/22 maxlen: 24
80.224.228.0/22 maxlen: 22
80.224.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:8f:6c:48:fe:9a:bc:8e:b0:3b:c3:5f:95:ee:7a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Sep 17 13:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89d7bc7d05088cf78e36de5cb6d4b1419172c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:ba:d4:52:df:88:90:72:68:ee:da:9c:7e:
10:97:04:1f:32:6c:31:6a:c3:d0:06:38:7c:fb:33:
ac:12:c1:26:12:d1:51:9f:d0:77:24:2e:88:2b:8d:
2a:40:7b:47:a8:03:6f:90:5c:83:ca:03:ae:c1:da:
06:78:0b:59:21:ae:4b:95:cf:45:48:02:5b:16:40:
33:8d:b5:2d:2f:86:b6:35:fc:d7:37:24:c1:f7:78:
27:a7:c1:8f:ef:08:f1:06:08:31:82:c9:2a:19:18:
d7:06:98:ff:36:26:80:29:25:f8:52:ee:ff:67:1d:
ce:24:76:f6:84:7f:f4:93:d0:b0:2e:2a:9f:e3:be:
48:47:5a:21:31:31:68:85:e2:34:8c:d6:cf:9b:d9:
18:4f:6f:8f:fb:a2:98:00:92:d5:01:0b:59:33:08:
c7:8d:fa:ab:2d:be:50:ff:42:68:4e:f6:a8:f3:0a:
cc:3d:7a:96:81:16:4e:7e:90:3a:e6:9f:29:a9:97:
b8:b5:06:8f:75:96:60:22:52:0c:bc:99:1b:f1:cb:
56:eb:32:65:8b:51:4d:26:3d:83:92:4b:07:f6:86:
91:e0:36:be:14:ac:16:1b:a8:fb:ab:20:3c:a1:31:
5e:03:60:23:2c:c7:cd:ed:eb:4e:0c:e8:03:24:47:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:BC:7D:05:08:8C:F7:8E:36:DE:5C:B6:D4:B1:41:91:72:C5:DA
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ide8fQUIjPeONt5cttSxQZFyxdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.196.0/22
80.224.220.0/22
80.224.228.0/22
80.224.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:56:5e:ad:be:5f:4b:b1:6f:d4:08:b1:c8:df:68:c0:19:48:
84:f2:38:40:a7:52:52:f9:ce:45:27:97:22:94:00:1c:33:85:
56:82:08:73:90:7e:c0:e3:1a:69:2f:86:a2:14:fe:26:f8:4f:
db:ed:92:7a:d9:32:fa:ce:0b:8f:54:9b:45:4c:72:9c:87:e6:
30:a2:6a:7e:b9:57:2e:7b:a8:cd:c1:69:12:63:90:36:e0:54:
cd:a6:0b:9b:60:77:92:3b:6c:c9:e8:89:f5:6a:f0:22:2c:b5:
24:24:eb:5b:2c:d1:75:97:be:07:8c:ac:ca:5c:bc:a6:24:d5:
0a:bc:3a:6a:32:e5:7d:e6:79:05:d9:c8:34:4a:62:d5:87:86:
dc:66:5a:e6:d0:a3:e9:15:bd:b3:ff:1e:ed:11:79:ba:ef:b7:
57:5c:31:35:e1:7f:68:81:f3:a1:10:40:0c:d5:2a:7d:bb:3f:
0d:f3:b8:fc:38:d8:05:7f:c9:aa:92:6a:0f:9b:b9:a2:5a:fd:
e8:71:59:97:d4:27:16:ac:90:41:d9:07:e6:a6:ef:54:5c:4f:
e2:99:3e:53:af:89:d4:55:28:50:2e:01:b4:ba:84:cc:03:c4:
57:f0:5e:bb:25:8a:14:1a:f9:cb:f9:fe:a3:d5:11:b9:ff:71:
fe:c6:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:40 2026 by rpki-client