Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iCzQvMdxwwbrEIo_RilT4KlF3Lg.roa
File: iCzQvMdxwwbrEIo_RilT4KlF3Lg.roa (raw, json)
Hash identifier: Q9T3aFwFU7HNxWEs8WE10AYFk2P6DJWHn6R/WnpVkHU=
Subject key identifier: 88:2C:D0:BC:C7:71:C3:06:EB:10:8A:3F:46:29:53:E0:A9:45:DC:B8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019FF0C3CD63DFB77351AA5BAEDF5FCA1C7E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iCzQvMdxwwbrEIo_RilT4KlF3Lg.roa
Signing time: Tue 11 Aug 2026 12:19:51 +0000
ROA not before: Tue 11 Aug 2026 12:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5541
IP address blocks: 85.123.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:c3:cd:63:df:b7:73:51:aa:5b:ae:df:5f:ca:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 11 12:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=882cd0bcc771c306eb108a3f462953e0a945dcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:c1:74:0e:93:99:c9:e9:7c:eb:68:b7:a2:
08:5b:73:b8:97:0a:24:f4:79:b0:37:13:ad:f8:13:
91:39:0e:cd:97:fd:62:60:13:60:54:ea:18:cb:ff:
10:cf:52:c4:e5:c9:1e:33:0b:34:c4:08:9e:cf:a6:
10:37:14:c7:d5:21:fa:2e:90:cd:4c:44:66:44:2f:
7b:44:ba:70:c8:ad:6b:20:78:29:40:f7:4e:5d:dc:
0f:86:b8:56:c2:41:46:84:b0:bf:cb:72:f9:a1:fd:
04:bf:f0:07:7c:09:25:a7:33:38:6f:f5:77:db:4a:
2f:28:08:a2:06:8b:9d:c6:c5:3e:8b:1e:8d:f7:9e:
ef:30:79:d7:96:e7:aa:32:55:e5:cf:42:f0:0d:00:
4f:a8:c9:66:60:bb:f0:5a:5c:3d:18:e4:a0:8a:30:
41:40:3e:00:86:04:ce:67:9c:8d:a5:c7:07:09:97:
54:91:94:ea:aa:a1:c2:4a:19:b6:c5:0e:ff:d8:ba:
ad:21:89:6d:43:3d:9a:82:65:49:3c:de:f7:49:c5:
ae:79:02:81:1e:c9:82:57:dc:2b:49:49:7a:90:f2:
52:6e:40:a6:eb:7a:89:a2:c8:b8:d0:61:31:07:77:
ee:d1:0f:e8:f9:94:96:3f:02:cf:df:52:21:85:7f:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2C:D0:BC:C7:71:C3:06:EB:10:8A:3F:46:29:53:E0:A9:45:DC:B8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iCzQvMdxwwbrEIo_RilT4KlF3Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.123.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:22:d1:1a:db:1a:f5:b5:ce:7b:d1:9a:8a:2b:11:8e:56:cd:
76:4e:17:63:62:68:ee:61:d6:21:90:65:df:3c:bb:71:9f:dd:
3f:33:60:55:be:c2:27:3b:60:7a:8f:17:9d:d8:cf:75:b6:50:
69:7a:98:c4:5c:46:d7:06:09:5e:84:c1:c1:58:35:a6:12:33:
71:e7:a2:ec:22:15:2c:87:0d:12:21:cf:1f:f1:39:94:44:9e:
24:51:4a:e3:cd:bd:c7:e0:bb:9f:86:56:de:94:9e:14:82:e3:
34:48:6d:77:6e:bc:f9:a9:df:e4:05:68:d6:13:4c:65:b3:c1:
41:b1:38:19:5d:64:1d:9f:22:33:ad:05:40:92:23:d9:4f:4a:
fc:f1:fc:a2:84:e3:83:9f:d6:01:c2:5d:4d:eb:b0:35:4b:40:
da:fa:e2:de:7a:0b:fc:29:a1:49:e0:fa:e2:db:eb:50:92:42:
4c:84:6e:a8:36:77:a6:02:59:4d:9e:82:af:72:d5:d7:8a:78:
7e:80:cf:8b:36:08:bb:db:e7:3f:cb:81:66:20:ed:e6:f6:3e:
ad:6c:45:54:ba:fc:4d:4c:fb:b3:eb:77:d9:5f:11:f8:72:f4:
46:a3:5f:2e:df:5c:02:39:46:e8:6d:81:09:fd:b8:a5:79:a0:
bb:17:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:51 2026 by rpki-client