Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa
File: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (raw, json)
Hash identifier: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=
Subject key identifier: 22:2F:A5:1F:C2:CF:26:06:2B:11:15:C3:70:90:96:5A:51:AD:65:8C
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 019F23687A99BD3E8F5D98E63D27A9C21579
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 192.40.76.0/24 maxlen: 24
192.40.77.0/24 maxlen: 24
192.40.78.0/24 maxlen: 24
192.40.79.0/24 maxlen: 24
2a06:f044::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:99:bd:3e:8f:5d:98:e6:3d:27:a9:c2:15:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=222fa51fc2cf26062b1115c37090965a51ad658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:3e:75:e0:f1:70:af:64:d0:bb:e7:ba:db:
c4:ea:6f:3c:e6:c9:a3:7d:a3:9e:eb:ab:62:7c:7f:
c0:b9:7f:16:03:1a:63:56:f1:b5:f1:6c:a0:c2:ef:
07:88:f0:20:56:26:97:5f:a3:14:d6:12:fe:fb:74:
a3:8a:ed:67:25:a2:62:99:9a:1b:68:b8:50:c7:a8:
09:95:00:40:ec:a2:c0:ba:8f:41:18:e4:79:6e:4d:
fc:fa:f7:d5:c3:45:28:62:79:bc:d6:ff:16:87:e5:
c2:53:bc:f7:4e:a2:99:2f:a4:8e:b7:65:d5:ec:5d:
32:97:cd:ab:dc:5c:86:67:4b:b3:5c:c7:c4:74:69:
a3:0b:2b:ca:af:03:81:64:0f:79:2a:0d:b2:04:c1:
ef:61:8e:e9:c6:cf:2a:39:8a:55:b9:c8:f6:23:4f:
2f:71:b2:3c:25:0e:c4:35:bc:72:b7:45:b1:53:62:
d7:c5:86:8c:89:05:3b:56:0c:ed:30:3f:47:90:76:
70:eb:aa:cb:2e:94:0d:f6:bc:f0:b1:ae:be:b8:7d:
96:62:fe:0c:8c:c3:f0:dd:0b:f8:e4:9f:d1:46:e9:
4f:fb:d9:84:b3:e5:f7:f6:a8:6c:fb:ea:f6:d0:44:
03:10:95:64:72:6f:5e:b3:ec:9b:c2:17:35:e0:dc:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:A5:1F:C2:CF:26:06:2B:11:15:C3:70:90:96:5A:51:AD:65:8C
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.76.0/22
IPv6:
2a06:f044::/48
Signature Algorithm: sha256WithRSAEncryption
8b:3a:b2:0b:a1:c9:7b:31:40:3b:81:8a:e9:73:8b:89:68:21:
7b:3b:34:3c:7f:72:c5:73:49:5e:80:c5:12:d0:c3:7e:82:3a:
61:98:fa:e8:8e:72:2b:d5:7d:03:71:c7:52:ab:2c:60:f9:ae:
9e:a3:15:43:d7:b8:1f:56:74:f1:3c:72:a7:96:6b:d8:2a:40:
f7:f3:79:38:28:e9:13:59:3f:e0:f1:84:20:15:04:4a:1f:ee:
ca:73:f4:46:8a:cc:2c:de:79:e6:8f:72:0f:55:87:50:36:a5:
bf:e5:cb:c9:85:87:65:00:0d:e2:38:38:55:f6:73:76:c4:2a:
15:f1:40:31:63:41:09:6d:71:25:94:84:17:4f:11:a9:c2:7c:
b3:d9:7d:4f:ec:62:7a:c9:31:b0:47:77:7a:e5:42:19:ce:91:
24:38:37:80:0c:a7:52:45:3e:1a:ee:03:1c:df:1f:4b:c5:69:
c5:d2:c5:7c:63:2f:48:6f:8b:84:be:5f:e6:e7:b4:16:9b:8f:
99:44:3a:03:84:76:d6:e9:51:36:2c:12:90:d9:d5:cf:03:89:
6e:7c:09:39:89:26:0a:6c:02:87:84:b5:44:f5:76:1b:01:81:
1c:b5:84:96:6f:b6:e1:75:0a:1d:35:de:5c:57:b5:dd:a4:75:
3d:17:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:12 2026 by rpki-client