Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa
File: i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa (raw, json)
Hash identifier: KrOQvD/t0VuGa9aPl/HCdbKeqmz1JIB0jRemVYeffNA=
Subject key identifier: 8B:9C:F7:29:07:36:7B:4F:8A:DA:FD:21:E6:A2:DD:64:14:09:25:75
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 019F2368638FD6E07291C26E0CAC95866E9B
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 185.238.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:63:8f:d6:e0:72:91:c2:6e:0c:ac:95:86:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b9cf72907367b4f8adafd21e6a2dd6414092575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:2c:4b:45:b7:bb:dd:cb:33:eb:ad:2b:bc:
f8:1a:d5:31:d2:04:b2:33:82:52:a4:ec:4b:b7:91:
a8:d6:3e:a4:87:ba:e5:3f:af:d4:ea:f0:a7:19:15:
d1:c0:7c:10:5e:3e:fc:88:23:c8:b5:39:77:ff:d0:
35:4a:93:b7:28:b3:ff:a0:05:34:f6:cd:d1:99:6c:
5d:4c:c9:04:2b:dc:43:12:05:fb:33:a9:ff:c4:de:
20:d0:9c:60:c4:55:cd:f8:4f:13:74:41:46:cf:17:
f7:e3:29:a8:b6:00:0a:f2:35:1a:af:56:35:52:a6:
72:77:bd:b9:0a:11:34:b9:72:75:99:2d:15:a9:4a:
c5:4b:4f:8c:67:6d:44:04:1a:2e:bf:20:d6:dc:a9:
99:3b:23:a8:6d:bb:17:ce:af:00:ad:fa:dc:50:42:
1a:92:eb:2e:63:32:17:95:c7:32:d3:59:9c:c9:5f:
e1:1a:a1:a0:ff:a0:3a:3c:a6:09:b3:4b:13:62:53:
b9:84:e0:65:0b:ba:39:06:6a:c8:5b:43:3a:1d:41:
52:b4:e9:07:b7:33:02:01:0f:71:2b:a3:80:e2:84:
3a:b5:f9:33:95:0e:94:0b:e9:7f:ba:e5:61:00:6a:
06:bc:69:a4:22:8b:c2:ed:67:b3:78:db:c7:41:bc:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:F7:29:07:36:7B:4F:8A:DA:FD:21:E6:A2:DD:64:14:09:25:75
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.12.0/22
Signature Algorithm: sha256WithRSAEncryption
63:40:84:4e:1f:1e:52:2f:fc:ef:a2:f5:c6:06:dd:34:13:2c:
44:17:12:a1:e6:51:58:96:fa:45:72:42:4d:32:fe:bb:90:9f:
65:2a:3a:ab:f6:dd:a8:1c:20:d9:e9:0c:14:41:4f:63:d2:d1:
81:fe:55:d3:fe:35:99:e3:13:f3:22:66:6e:af:9c:3d:3a:d4:
bb:73:ab:18:4e:e6:d5:42:10:d7:fe:a0:06:20:60:fc:1a:3a:
30:ab:bd:4c:ba:7a:3c:ff:d2:77:63:ae:1c:e6:1f:16:2d:1e:
0e:19:01:78:b0:ae:32:21:2b:ed:fe:93:0f:bd:09:37:d2:a9:
a0:98:ef:fb:0a:4a:2c:27:57:c1:47:4a:4b:15:48:0b:54:5d:
8e:a2:78:e5:d1:a9:fd:93:7c:cd:a6:bd:ed:ab:19:34:dd:63:
c9:4a:fc:28:49:ba:4d:ad:cd:91:0c:91:c1:f6:a5:3b:20:fb:
15:b6:39:46:f2:0a:71:ba:2f:62:17:88:b3:17:28:49:22:8d:
74:17:63:06:d4:82:84:11:3a:c9:64:88:e6:ca:4b:a4:71:48:
4b:e2:0f:3a:54:f0:5a:0e:b3:bd:8e:00:82:f8:d7:93:80:11:
3d:a2:89:13:ac:2c:c8:8c:48:62:7f:88:1c:bd:02:21:77:47:
61:9a:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:51 2026 by rpki-client