Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iEdXi_hz1jNMq8_0vjGYnGddLRE.roa
File: iEdXi_hz1jNMq8_0vjGYnGddLRE.roa (raw, json)
Hash identifier: obXN0PjI8kIcwPnuWN/bXparWSb/Zfr7FlmEWbFqPTU=
Subject key identifier: 88:47:57:8B:F8:73:D6:33:4C:AB:CF:F4:BE:31:98:9C:67:5D:2D:11
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A058A0E0323A8FB9D7C595E4B58253568F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iEdXi_hz1jNMq8_0vjGYnGddLRE.roa
Signing time: Mon 31 Aug 2026 16:22:13 +0000
ROA not before: Mon 31 Aug 2026 16:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196609
IP address blocks: 195.110.14.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:a0:e0:32:3a:8f:b9:d7:c5:95:e4:b5:82:53:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 31 16:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8847578bf873d6334cabcff4be31989c675d2d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:5c:76:4e:30:40:cf:cc:69:ef:5b:31:08:
6c:fa:fe:be:43:d6:c1:0c:c6:14:7f:38:6c:dc:e5:
16:78:d1:78:b2:f1:b8:0b:0d:f2:a9:fc:2f:94:6e:
10:a4:d1:28:41:ed:47:ef:08:86:cb:10:25:2f:7b:
8c:bd:3a:1d:42:45:24:e0:b3:ec:6d:11:7e:1c:f8:
04:22:56:5c:40:ff:61:4b:c1:fe:ae:14:81:b4:30:
35:bf:82:cb:03:3a:91:db:39:af:51:87:21:1c:d8:
96:79:a9:9d:18:04:62:b2:2b:cf:fa:7b:91:a5:82:
38:a9:88:61:2b:b7:6d:85:95:bd:3e:58:a7:e3:68:
55:4d:65:cd:66:ce:5a:e1:c6:0a:8d:49:f2:18:e9:
6e:1c:d9:8c:13:46:8d:28:4e:2e:62:38:d1:10:16:
8c:d9:d0:88:35:2b:14:12:4a:55:45:51:4c:f7:16:
ab:87:f7:b4:b7:01:f4:eb:bd:0a:b8:65:a4:6e:42:
5c:54:e5:fe:a7:06:1d:cb:1f:66:eb:a6:54:28:15:
63:7b:27:ce:24:f2:7a:18:a8:68:0f:aa:03:74:3c:
23:2d:e1:20:5c:6d:c8:f5:b1:54:c0:8c:82:ac:e7:
43:46:12:30:17:54:fe:bd:71:1c:87:53:24:c0:3f:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:47:57:8B:F8:73:D6:33:4C:AB:CF:F4:BE:31:98:9C:67:5D:2D:11
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iEdXi_hz1jNMq8_0vjGYnGddLRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.14.0/23
Signature Algorithm: sha256WithRSAEncryption
17:c0:09:3a:b5:1c:a8:fc:94:ca:64:2c:13:bd:48:bc:f8:a5:
a1:33:e4:f7:c6:41:27:c7:99:c7:d2:63:00:fa:e3:1a:96:c6:
a1:b8:c6:a8:c2:8b:12:27:3f:da:ac:2e:d2:0c:ea:f2:60:d0:
f2:6d:92:a4:21:8d:b7:5c:7f:2f:ac:66:f3:a3:a2:34:a4:61:
0e:14:46:8e:34:94:0c:66:71:de:37:6a:42:4a:df:c2:ff:5c:
eb:16:23:3e:52:df:14:1b:dd:07:45:28:ba:38:b3:b1:84:63:
e6:a7:7e:ee:b8:49:d0:ce:a0:e0:70:e0:3f:72:91:d4:f7:1c:
fc:f8:0e:08:f0:07:72:4d:21:f6:87:45:76:c5:1c:3c:f1:13:
15:23:c1:48:00:51:9d:ac:0c:c2:d2:b7:61:04:93:90:ed:d0:
87:7b:51:36:aa:9d:75:66:55:d7:3f:41:00:b0:8f:17:5f:6b:
b7:d5:93:41:a2:07:8e:e5:35:d8:a1:88:e0:74:16:9b:6c:ab:
6c:eb:b9:21:6d:86:1e:d1:a8:77:67:d5:8a:8b:81:52:de:b3:
12:30:d0:5c:00:d8:f9:4c:ae:6f:e2:7e:2e:20:9f:d2:b3:fe:
39:b3:30:a5:ad:bc:4e:4b:68:be:f8:b3:50:f4:8a:c3:9e:58:
99:5e:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:44 2026 by rpki-client