Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/IAA66PvhbnZNq6DYqFa4jxHq9Mg.roa
File: IAA66PvhbnZNq6DYqFa4jxHq9Mg.roa (raw, json)
Hash identifier: CI2b/MsfzBD//bruekgU/jIDPxItVVrUl8xZ4Kyd7+M=
Subject key identifier: 20:00:3A:E8:FB:E1:6E:76:4D:AB:A0:D8:A8:56:B8:8F:11:EA:F4:C8
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019F416A762882E77DA9441B131BC793BDE5
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/IAA66PvhbnZNq6DYqFa4jxHq9Mg.roa
Signing time: Wed 08 Jul 2026 11:08:43 +0000
ROA not before: Wed 08 Jul 2026 11:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16084
IP address blocks: 193.26.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:6a:76:28:82:e7:7d:a9:44:1b:13:1b:c7:93:bd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Jul 8 11:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20003ae8fbe16e764daba0d8a856b88f11eaf4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:6f:f9:08:59:99:00:9a:f2:f1:a6:bc:dd:
c0:c7:4d:b6:66:e8:0e:98:13:13:8e:9b:87:3e:7e:
25:82:6d:16:ab:b3:08:75:c4:ab:3a:4c:42:03:c9:
66:86:ca:ac:98:e9:98:22:f2:16:3e:4a:18:3f:8c:
9c:88:89:c5:94:52:24:ca:60:48:03:c1:cf:91:4b:
26:b0:fd:30:8f:4c:ba:57:e3:c1:8f:5f:78:48:cf:
64:52:4a:a9:91:dc:0d:3e:e9:15:c3:d4:62:6c:62:
3c:46:fe:40:17:c2:af:52:5f:db:90:ca:c5:ec:01:
3c:46:0f:39:24:af:40:03:99:47:61:a4:cd:1d:6d:
1f:b1:03:95:2e:7b:ab:55:99:69:7a:5a:08:4a:e1:
9d:45:ef:5e:47:37:3f:6b:91:28:4f:ce:26:01:c8:
cd:da:c9:95:7d:a2:75:fc:14:8c:f6:59:2c:c8:e8:
5c:ff:81:b5:d8:db:28:b1:53:01:d2:07:56:f7:51:
ac:64:2d:cb:ec:75:1c:99:a9:15:8c:2f:e0:0c:ee:
26:f8:6f:84:67:3d:0c:3a:4e:fe:85:83:f6:58:2e:
e2:f0:83:c1:49:8f:b8:32:ee:7b:d3:47:26:62:b7:
5e:28:64:d1:d9:c2:fc:6c:ba:89:f1:5a:34:23:ad:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:3A:E8:FB:E1:6E:76:4D:AB:A0:D8:A8:56:B8:8F:11:EA:F4:C8
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/IAA66PvhbnZNq6DYqFa4jxHq9Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.56.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:00:ed:ef:53:7a:89:59:c0:71:84:f1:f3:d4:3b:a4:03:43:
0d:25:59:3d:83:ae:b4:9f:ae:57:bc:23:51:70:f1:8d:49:17:
b4:e4:1a:66:71:5f:77:ea:f6:38:9c:8a:35:15:a7:fa:05:ff:
cf:30:9c:4a:1e:af:12:fc:ef:8a:0f:67:47:f0:1f:8b:b8:a1:
04:50:d5:f0:3d:8e:ea:d3:c7:16:ac:ee:0e:ec:66:9d:cb:46:
d6:1e:cc:2b:93:f1:9c:45:06:e2:25:70:1b:fa:32:0e:da:7d:
38:c4:c8:52:a8:ab:ea:a6:3a:89:48:e2:65:00:2b:8b:b1:87:
61:41:9c:57:bb:7a:52:35:c3:60:03:c8:03:9a:32:52:9a:0a:
7d:3d:76:94:2d:c0:92:3c:4f:b8:84:65:0e:7d:c7:e7:f9:0f:
b4:a8:9a:01:10:63:b4:3d:e6:07:16:cd:f5:f5:0c:f6:3e:3a:
97:ec:56:63:08:ed:2a:65:ae:9a:4c:c1:fe:82:17:70:12:1b:
6a:9e:45:49:72:67:47:b9:b5:91:b8:82:79:06:a2:6c:6a:50:
c6:f4:ca:92:59:9e:36:1f:0f:7c:1f:c0:67:fb:da:c8:64:74:
73:48:16:bb:51:f5:c9:44:11:2f:e4:20:7d:99:18:a3:d4:63:
97:14:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:52 2026 by rpki-client