Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/IQxi_ycveBSnK1Ru6EC_lb20R2M.roa
File: IQxi_ycveBSnK1Ru6EC_lb20R2M.roa (raw, json)
Hash identifier: qkCT/kfpBxRfgLxAiyBIqf6L9Svv3JlOCCjBfxcll6E=
Subject key identifier: 21:0C:62:FF:27:2F:78:14:A7:2B:54:6E:E8:40:BF:95:BD:B4:47:63
Certificate issuer: /CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Certificate serial: 019FB921EA8E3C939D0ED1EA6C39872236CC
Authority key identifier: 97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/IQxi_ycveBSnK1Ru6EC_lb20R2M.roa
Signing time: Fri 31 Jul 2026 17:03:55 +0000
ROA not before: Fri 31 Jul 2026 17:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15557
IP address blocks: 185.43.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:21:ea:8e:3c:93:9d:0e:d1:ea:6c:39:87:22:36:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Validity
Not Before: Jul 31 17:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=210c62ff272f7814a72b546ee840bf95bdb44763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:5f:b1:78:c8:ad:c6:6c:4c:00:08:9c:0c:
fe:4a:8d:27:9e:91:d1:55:ab:91:18:cd:65:c5:14:
cc:94:a8:b4:c9:65:93:f1:de:e3:f2:14:eb:a6:ba:
b0:c4:57:54:e7:ab:8c:91:2e:9a:bf:1a:af:23:a4:
c0:ff:f8:90:42:fe:86:22:c5:ae:e1:49:92:ad:7c:
c7:71:19:24:79:58:73:60:77:b0:60:1d:81:23:33:
f6:b6:34:6a:69:42:f7:b9:40:39:25:a9:73:e8:a8:
f7:61:b6:b1:bc:83:b5:01:d8:40:dd:6e:8b:2d:44:
6d:db:ce:76:66:85:86:35:bd:c9:05:fe:a9:ce:00:
6a:7e:df:9e:88:f8:2c:d2:67:f6:5a:c0:14:99:73:
27:82:36:fc:11:6c:48:fb:3f:da:a2:31:c1:23:40:
99:1e:47:8b:da:40:77:eb:95:e5:46:27:5b:57:11:
6b:72:df:1c:8a:f2:4b:7b:11:a1:69:c5:b5:00:33:
f7:58:21:6d:b4:f2:a2:be:17:f0:93:53:de:de:7d:
91:fc:e1:ba:5b:2c:3a:8f:ad:ee:6d:59:0d:3a:48:
2d:df:01:aa:1a:ce:04:cb:5a:fc:92:e2:f6:29:60:
f2:51:1d:8a:b2:a0:3e:ca:36:94:14:55:aa:a6:fe:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:62:FF:27:2F:78:14:A7:2B:54:6E:E8:40:BF:95:BD:B4:47:63
X509v3 Authority Key Identifier:
keyid:97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/IQxi_ycveBSnK1Ru6EC_lb20R2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.35.0/24
Signature Algorithm: sha256WithRSAEncryption
88:17:3e:03:05:cb:23:74:4e:ed:16:63:9d:43:fa:54:05:61:
34:cc:69:95:e5:11:31:37:d4:82:96:59:8b:a0:f5:cc:0f:4e:
f3:01:7d:f1:a8:75:81:06:c3:46:76:f3:32:5b:35:a0:0b:da:
67:f7:f0:5e:28:6b:77:bf:78:2a:41:5f:a3:4c:df:18:95:ee:
54:cc:4f:a5:10:ce:43:3e:af:b8:c8:50:53:00:91:8c:5a:11:
4a:09:11:a5:3f:5e:02:63:90:fe:28:1e:e8:9e:45:2d:6b:bc:
6c:92:5b:8e:1b:a1:0c:97:96:1c:42:9c:2a:43:b4:ea:eb:3d:
8d:6c:3a:4d:72:bd:96:64:a8:a9:06:94:13:f9:27:dc:97:06:
b5:9e:a2:2a:68:7a:0c:85:1d:1d:ca:42:5c:13:cc:7d:85:0f:
df:34:6a:aa:d4:14:8f:de:01:0a:76:5c:b3:5f:07:47:94:d8:
85:26:d3:1f:71:06:1b:59:2e:b7:4d:8d:39:14:dc:45:4d:39:
fd:cd:49:8e:92:67:d1:69:45:d0:40:0f:98:f7:fa:92:5c:17:
eb:64:56:c8:db:20:68:17:73:1b:78:73:20:f7:58:18:64:16:
33:35:6d:d2:04:e2:48:6e:64:d4:0d:fb:d0:4b:96:b0:a2:06:
ac:16:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:46:59 2026 by rpki-client