Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ixR__lq9QHt5qFFzx0Cittzukcc.roa
File: ixR__lq9QHt5qFFzx0Cittzukcc.roa (raw, json)
Hash identifier: MqD3RFB7S1Rgd2Ce9G938O18OLxgMlCxIATgiG68T3A=
Subject key identifier: 8B:14:7F:FE:5A:BD:40:7B:79:A8:51:73:C7:40:A2:B6:DC:EE:91:C7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0FE76C146DCD63733AB996D72949183C5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ixR__lq9QHt5qFFzx0Cittzukcc.roa
Signing time: Fri 02 Oct 2026 21:13:10 +0000
ROA not before: Fri 02 Oct 2026 21:13:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275064
IP address blocks: 195.72.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:76:c1:46:dc:d6:37:33:ab:99:6d:72:94:91:83:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 2 21:13:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b147ffe5abd407b79a85173c740a2b6dcee91c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:01:ce:2b:1c:9e:5d:3a:db:15:44:c0:bd:
58:3f:57:df:6f:14:eb:d4:7f:fc:36:71:75:b8:27:
5f:db:69:80:17:c0:b7:a3:06:65:f8:91:26:6f:bc:
a1:04:b4:30:bb:21:80:f4:f0:71:73:4d:6b:e1:d6:
08:34:4d:41:67:e0:09:81:79:18:56:17:03:dd:fb:
15:dd:60:83:12:79:9d:46:8c:6f:b2:8f:f9:12:1e:
da:09:49:4b:78:2f:ee:7e:f5:21:b9:d0:df:58:76:
3c:c5:fe:6a:41:d3:b3:db:6a:c0:b0:60:f4:7a:bf:
4b:35:e7:89:83:2f:d5:85:be:e8:fb:e5:9b:d2:2f:
a2:11:51:ca:d4:7d:0e:8c:c1:04:f2:53:39:41:5e:
c1:42:9b:75:31:ae:47:40:8f:bc:cd:81:85:16:68:
49:41:fe:e4:57:b0:12:e6:77:0d:f6:05:d2:2d:88:
24:56:9b:bc:b8:84:aa:46:4a:cc:1f:61:a5:11:0b:
df:d9:38:f2:2e:07:a1:72:eb:d7:94:fc:f2:2b:69:
4b:9a:b9:fd:7d:f3:25:bf:6c:ed:c2:e4:84:38:fe:
6d:83:b4:f0:fc:c1:0c:93:53:fc:6d:14:e7:b8:b1:
c1:45:02:8f:97:b1:e5:8c:bb:87:b1:3e:22:05:58:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:7F:FE:5A:BD:40:7B:79:A8:51:73:C7:40:A2:B6:DC:EE:91:C7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ixR__lq9QHt5qFFzx0Cittzukcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.172.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:f3:4a:33:bb:da:45:b9:ee:6b:c1:81:14:51:7b:52:0b:00:
0b:4a:06:7d:f8:6c:e1:a9:1f:ee:64:7f:9b:1d:6d:ac:f2:ed:
18:2f:a2:64:c3:52:8a:5f:c6:56:3a:a5:88:c5:70:5e:11:cf:
ec:b9:6d:87:f8:10:f2:83:5c:57:61:50:0d:d2:c9:b3:00:45:
82:fc:c5:b0:6a:09:57:e1:81:ef:d9:cf:c4:0a:d9:e7:92:be:
63:36:da:7a:f0:cb:48:0d:62:a6:e0:c7:2f:8b:c4:99:eb:1e:
19:06:b4:f1:f6:5f:dd:1b:9b:e1:c5:d2:f8:f2:2b:f7:47:58:
a6:34:a0:f0:62:40:e7:d9:0e:74:ad:3c:16:55:68:7b:a9:2a:
72:cb:6e:19:47:1b:ef:c0:7e:b3:22:d0:70:c0:85:61:13:07:
01:08:e4:37:98:96:85:69:5c:f4:12:b5:0a:21:0b:98:cd:46:
fd:d8:1f:78:c9:72:bf:c3:fa:08:20:7c:37:3c:46:9b:62:8f:
6a:78:39:8b:a9:9c:fb:56:33:89:e4:95:7c:da:7c:64:45:17:
cb:01:61:b6:4b:c6:c4:38:69:32:df:8c:3c:48:6d:4a:95:40:
74:f6:05:25:fd:6e:31:b8:16:16:47:a9:86:49:26:15:fb:9a:
e7:cb:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:31 2026 by rpki-client