Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/i2pgG51rDNJY2AaIhJMn_qzCAuo.roa
File: i2pgG51rDNJY2AaIhJMn_qzCAuo.roa (raw, json)
Hash identifier: 9DrGq/yzCckExbMfQC8NV5FQG9j+RSWeEt/sBtiHP04=
Subject key identifier: 8B:6A:60:1B:9D:6B:0C:D2:58:D8:06:88:84:93:27:FE:AC:C2:02:EA
Certificate issuer: /CN=128bd8243e2536faccb24fead3a2162b8c766626
Certificate serial: 019F2368A7BE8721C79B2D13245F5963A351
Authority key identifier: 12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/i2pgG51rDNJY2AaIhJMn_qzCAuo.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 193.26.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a7:be:87:21:c7:9b:2d:13:24:5f:59:63:a3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128bd8243e2536faccb24fead3a2162b8c766626
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b6a601b9d6b0cd258d80688849327feacc202ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:c6:ab:c4:e5:c3:de:1f:bf:e4:84:c4:a6:
a4:fd:b4:2a:02:c9:52:c5:3d:66:b1:b4:ee:fc:ec:
4d:c3:0b:24:60:fa:40:a1:04:7c:5c:a6:61:15:d1:
a5:da:e6:6c:87:64:fd:21:c4:fa:8a:24:10:8c:7f:
7d:7f:5e:5c:ee:92:da:07:c0:91:2e:6e:02:9d:79:
ab:6f:36:12:29:57:2b:72:3d:08:51:82:db:fd:c7:
b2:eb:df:54:54:dd:58:8f:95:96:33:d6:2b:bb:8f:
be:94:dc:3f:fa:d5:e4:5b:9d:91:60:f6:ae:c8:75:
97:1d:71:1a:40:59:b2:cd:35:b7:b0:b1:50:8b:fc:
75:13:e3:cc:04:c7:d3:03:19:89:b7:7f:b9:f6:cb:
93:4c:1b:ca:fb:97:61:8a:49:48:76:3f:24:e6:f0:
7c:17:16:d4:9a:b7:fd:ff:28:1c:33:f4:46:55:24:
8f:e1:ff:af:34:d0:f6:a1:d6:fe:8a:d5:cc:04:78:
e8:10:58:4f:db:fa:5a:93:04:d3:54:4a:3f:ad:84:
42:dc:6a:da:3f:3b:7b:fa:90:8a:a0:7b:e9:a3:30:
22:ae:66:23:b7:2e:22:4f:d6:91:6d:0b:4f:e6:3b:
f5:2d:7a:69:a8:99:c7:ad:b1:e5:d1:ed:24:47:dc:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6A:60:1B:9D:6B:0C:D2:58:D8:06:88:84:93:27:FE:AC:C2:02:EA
X509v3 Authority Key Identifier:
keyid:12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/i2pgG51rDNJY2AaIhJMn_qzCAuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.125.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a5:5f:8f:27:d8:09:00:ca:dd:7d:7e:63:72:9d:d9:6b:b7:
01:fb:29:c5:8c:94:d5:08:8e:ae:77:84:d7:fa:fc:66:a0:6c:
27:90:d8:ba:e8:1a:f2:1a:d8:6b:65:54:05:32:98:4c:62:53:
cb:f0:4f:82:ef:a6:d9:72:f5:f7:69:d3:d7:c1:ea:2a:b1:f5:
7c:30:74:4c:0a:49:40:53:44:66:fd:c9:13:01:ca:6b:9a:13:
f1:9a:d3:bb:a9:01:80:f2:91:46:ef:18:ac:1f:99:04:08:18:
77:c9:15:5d:73:ec:1b:c3:e7:1b:95:39:90:9f:34:7b:1b:dc:
24:21:5f:fa:4a:3b:c1:6b:69:2e:f1:d7:3f:ce:00:c2:6c:14:
3e:ae:e9:72:05:05:88:d9:b7:9d:74:9b:3b:7d:86:3f:da:1b:
fe:62:de:be:32:3d:52:88:77:04:64:e3:78:b8:d5:f3:fc:0d:
41:70:1b:9b:74:a0:c4:c3:7e:1a:db:fb:2a:a8:2c:60:be:35:
59:69:04:ab:9c:2e:d5:9e:18:5c:c9:98:c2:d1:03:f0:d4:89:
e0:3c:aa:34:6e:f0:a1:d7:0e:35:00:fe:e9:b4:2a:21:8b:98:
cc:ab:bc:3c:d8:17:f0:40:97:f3:89:ce:4c:56:e1:98:fd:80:
e0:fb:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:44:32 2026 by rpki-client