Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/IptzpnH_OFvUHflcdcx5DR3SgII.roa
File: IptzpnH_OFvUHflcdcx5DR3SgII.roa (raw, json)
Hash identifier: tVTdfvKBqky+sXQObBePDrpGmyKb51agI6Imvb9ozhI=
Subject key identifier: 22:9B:73:A6:71:FF:38:5B:D4:1D:F9:5C:75:CC:79:0D:1D:D2:80:82
Certificate issuer: /CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
Certificate serial: 019F2368729FBDB0E18CD6EFA8BDDF8D7543
Authority key identifier: 4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/IptzpnH_OFvUHflcdcx5DR3SgII.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25415
IP address blocks: 185.27.8.0/22 maxlen: 22
193.107.184.0/22 maxlen: 22
2a00:8920::/32 maxlen: 32
2a0c:9bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:9f:bd:b0:e1:8c:d6:ef:a8:bd:df:8d:75:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=229b73a671ff385bd41df95c75cc790d1dd28082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:79:14:36:51:56:ba:a0:1f:3a:2a:12:a3:
aa:3d:b5:d2:1e:3c:66:f5:5a:5d:49:95:a2:44:9c:
3f:de:cf:d9:67:6c:23:e7:87:05:3b:67:a7:90:10:
7b:13:fe:db:4e:0b:e9:89:cf:12:5e:cb:3c:81:e2:
6a:50:6b:6e:5c:1e:f3:a0:fd:e2:5d:bd:26:6f:1d:
fd:7b:a4:13:2a:3a:f6:4d:3a:9f:6b:38:e8:8e:70:
54:e9:a8:79:fb:51:ce:37:0a:20:cf:8c:6c:24:81:
85:22:21:50:44:a9:a6:7f:81:1b:55:cf:8f:98:0a:
db:fa:24:91:37:9d:ea:e6:8f:cf:5e:be:57:8f:1f:
37:a6:98:bb:53:be:e8:c6:59:72:5a:12:f7:c6:0a:
cf:fa:de:e7:da:e1:89:43:c1:3e:23:27:41:64:c2:
04:61:89:7b:0d:33:7b:70:9b:c5:70:0b:22:f5:a9:
dc:a9:8f:60:6b:80:9f:e8:86:8a:c0:5c:98:2c:52:
68:59:54:12:cc:0f:0f:78:0c:c4:14:44:b4:a2:7c:
60:8e:46:10:7b:47:11:36:bd:ad:92:f4:c1:ab:08:
d9:65:48:f1:b4:b8:e5:46:fb:10:f5:ce:81:49:ab:
38:4f:a1:ec:9b:ef:66:db:35:58:6f:27:54:09:04:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9B:73:A6:71:FF:38:5B:D4:1D:F9:5C:75:CC:79:0D:1D:D2:80:82
X509v3 Authority Key Identifier:
keyid:4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/IptzpnH_OFvUHflcdcx5DR3SgII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.8.0/22
193.107.184.0/22
IPv6:
2a00:8920::/32
2a0c:9bc0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:83:8c:52:4e:c5:b4:2f:e0:8a:81:d1:bc:6c:4b:c8:c0:2f:
23:cf:c0:d4:b9:16:0c:4c:d1:25:ec:42:e6:32:db:48:98:bb:
2c:b1:38:34:1b:af:e9:ce:e9:9a:7d:55:a8:12:fa:d5:43:25:
7d:2c:27:1c:82:60:30:b9:4c:1a:b9:e4:7c:9d:4f:e5:73:8b:
bd:a9:d1:01:f5:9c:cd:74:d7:f6:c2:9b:48:b3:ce:f5:24:11:
8d:b7:f9:e7:3f:c2:d8:2b:6b:dc:db:6c:ab:65:1b:68:1d:00:
79:e8:10:05:a5:f3:1b:c0:02:de:b1:13:8d:1f:f5:1e:f8:36:
1f:c8:ee:62:99:3e:2c:3a:7c:d4:9f:85:8e:13:13:2b:0b:01:
a6:11:5a:26:8d:64:9c:aa:8d:fa:8f:03:bd:89:5a:ef:fc:d7:
eb:61:92:c5:a0:cf:d8:43:55:5c:a9:62:8a:d4:64:d7:18:1e:
13:c0:24:f6:f5:d3:95:65:1e:5c:ea:65:98:2d:8e:7d:21:cf:
c3:b6:8e:75:54:8e:e6:3e:29:33:59:86:ba:ed:3a:04:24:4f:
60:45:3a:a5:e9:00:a8:8a:c7:7b:d8:b3:b1:19:1e:a9:4f:41:
a8:5d:6e:2e:93:15:71:8d:8d:60:81:e3:d2:47:d8:8c:94:6f:
75:18:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 07:27:48 2026 by rpki-client