Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IXHXS4UdWWjVHz3__3QBa_ur924.roa
File: IXHXS4UdWWjVHz3__3QBa_ur924.roa (raw, json)
Hash identifier: KbIHW7WwQDe0kbOzw6rkOxqmrw+5EOoxwEM2e5HpZj8=
Subject key identifier: 21:71:D7:4B:85:1D:59:68:D5:1F:3D:FF:FF:74:01:6B:FB:AB:F7:6E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EDFC7B8744558F4E2672D897F178148A3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IXHXS4UdWWjVHz3__3QBa_ur924.roa
Signing time: Fri 19 Jun 2026 12:07:48 +0000
ROA not before: Fri 19 Jun 2026 12:07:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:c7:b8:74:45:58:f4:e2:67:2d:89:7f:17:81:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 19 12:07:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2171d74b851d5968d51f3dffff74016bfbabf76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:9c:9e:ea:7d:c0:9d:77:79:88:8a:84:db:
14:25:cf:a5:ae:d9:39:d5:e3:0b:14:11:91:55:7f:
4a:a8:6d:2f:ee:77:d8:0c:8f:19:76:99:6f:b6:45:
7a:90:2b:27:ca:ee:e3:40:e1:4d:14:83:25:de:84:
20:4d:da:8a:ba:f7:d7:04:fb:1f:9c:02:28:b9:92:
5e:03:19:7d:1e:a5:54:c5:e3:52:85:cf:7d:4b:cb:
fc:c6:b6:ab:76:c0:b3:c4:03:bc:0f:9a:14:83:c0:
c8:4f:86:55:54:91:b4:25:63:7e:f3:b8:3e:98:b1:
2a:ef:ef:7a:a9:c1:e6:fe:ec:a9:ef:84:2e:e7:3e:
31:cd:f9:94:b7:31:bc:59:2f:c4:71:58:10:dd:df:
75:81:1a:1c:ce:13:8a:47:e7:87:ae:96:c8:89:b7:
53:fc:5e:76:a8:65:13:63:e4:ff:60:e2:0d:97:a9:
1c:02:10:bd:98:15:90:19:bb:67:5f:a2:99:01:d3:
3d:ad:38:de:05:ad:fb:06:9b:f9:00:20:4c:04:d4:
57:03:2d:55:f1:ef:a3:20:8a:99:dd:f8:1b:f2:ea:
e6:64:a1:21:7a:f7:ca:d0:1c:a8:a5:fd:19:6e:28:
84:7a:21:c3:5d:08:40:42:df:6c:f0:c1:1c:d1:d8:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:D7:4B:85:1D:59:68:D5:1F:3D:FF:FF:74:01:6B:FB:AB:F7:6E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IXHXS4UdWWjVHz3__3QBa_ur924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
194.87.87.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fa:d9:61:6a:f9:e1:b5:32:b4:5b:77:f2:69:c1:9c:ad:c5:
d8:46:3b:1b:37:8f:12:4e:91:9a:bd:8f:51:89:98:c6:b6:42:
fe:a8:67:d6:76:89:e3:f0:2e:25:d7:60:66:81:3c:8e:d3:21:
6d:59:15:46:a1:ab:33:00:03:f6:01:63:a9:33:0e:42:e1:7f:
9d:57:95:e4:4c:1f:62:f6:10:79:50:ba:0b:47:13:8d:f7:6b:
67:b0:e0:b9:0d:bd:9f:84:0c:d7:61:54:50:cb:13:2c:21:0d:
ea:1e:fe:3b:e5:5d:38:52:78:ac:05:de:dc:c8:14:af:a7:d6:
e9:b1:61:2c:49:fc:f0:84:a3:93:9e:f1:3c:2f:23:fa:fd:b1:
f4:bd:bf:90:0b:12:a8:43:da:71:7b:76:f6:08:00:f0:48:a8:
6a:a8:3a:ae:79:41:99:9e:fe:8b:9b:33:16:75:b7:05:67:de:
85:73:df:10:2c:f4:05:ad:08:e5:85:a0:7a:2e:e6:4c:49:6e:
8c:99:5e:75:07:45:28:81:4d:38:cc:70:94:c9:29:1a:6b:2e:
8b:7e:7a:a9:23:f9:4b:50:84:97:b0:3d:01:e3:70:84:7f:1b:
1a:ed:c7:28:37:42:16:a6:27:8c:23:b4:ba:b0:f4:7b:d9:d9:
20:84:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:43 2026 by rpki-client