Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/itnjjw-1v5abT-JPekn2ynRuzqs.roa
File: itnjjw-1v5abT-JPekn2ynRuzqs.roa (raw, json)
Hash identifier: 2iGzdL4WN0u241uv/a08ocwbjsmVzJ6RZufdSdIDidM=
Subject key identifier: 8A:D9:E3:8F:0F:B5:BF:96:9B:4F:E2:4F:7A:49:F6:CA:74:6E:CE:AB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F192FB373A9703CD5CBC48685DC6F9803
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/itnjjw-1v5abT-JPekn2ynRuzqs.roa
Signing time: Tue 30 Jun 2026 15:39:44 +0000
ROA not before: Tue 30 Jun 2026 15:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 85.120.74.0/24 maxlen: 24
85.120.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:2f:b3:73:a9:70:3c:d5:cb:c4:86:85:dc:6f:98:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 30 15:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ad9e38f0fb5bf969b4fe24f7a49f6ca746eceab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:30:5a:d4:1e:d0:78:85:6e:6e:4a:42:c3:
59:bc:8e:ae:a2:b9:91:1d:61:16:bb:0c:09:6a:45:
d4:d5:ef:e6:eb:0d:d8:91:83:6c:d3:b5:42:d7:c2:
83:6b:32:b6:da:e6:67:8b:c4:dd:5c:76:96:18:3e:
a0:c6:e2:22:af:25:81:e6:0a:07:f6:92:c4:4d:43:
db:b0:0a:b4:38:2b:80:d9:56:d0:88:f0:8a:ef:90:
58:62:68:d8:6c:eb:93:9f:81:09:d8:e7:46:47:7d:
8d:b5:96:96:a8:0c:d2:b6:c7:5a:1f:c8:52:ce:72:
02:e6:d1:66:37:6d:60:a1:cf:71:10:c6:1c:4a:b5:
88:1f:c7:7d:45:9f:7c:a2:38:4e:7b:26:6a:48:d5:
86:28:2d:58:9e:95:aa:d8:2c:43:09:46:90:53:6d:
1e:fd:88:51:44:64:32:4e:b4:79:16:29:5d:26:5b:
a8:40:8d:83:53:8e:8e:8b:a2:61:1e:c0:48:5a:e3:
0c:59:bb:d4:48:0d:03:ef:7c:eb:90:b9:38:11:5b:
a2:c6:56:c4:97:d1:6c:2f:8c:76:73:77:c7:31:9c:
3d:7c:9c:41:d1:5f:d1:7b:14:2e:01:be:f8:01:f4:
a7:e3:ae:45:ea:d4:00:eb:52:51:a7:98:0d:97:35:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D9:E3:8F:0F:B5:BF:96:9B:4F:E2:4F:7A:49:F6:CA:74:6E:CE:AB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/itnjjw-1v5abT-JPekn2ynRuzqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.74.0/24
85.120.176.0/24
Signature Algorithm: sha256WithRSAEncryption
58:38:fe:3d:0e:9e:75:37:77:15:eb:a7:d2:fd:92:61:e4:80:
29:34:22:0c:f9:27:bb:a6:f8:db:12:73:b1:ea:5f:9e:7c:6f:
22:2b:85:9f:2a:be:fe:6f:b0:0a:ba:a5:2a:43:23:b3:b9:2f:
cb:63:3e:87:e2:59:43:b8:bc:e5:65:52:90:cf:35:5a:00:7c:
d9:1a:5a:6b:06:c2:36:82:83:10:15:61:8f:a4:cb:8a:14:f1:
20:b6:cd:68:4e:66:2e:10:ab:0f:89:82:bf:62:c2:34:f8:d6:
06:14:c4:06:1a:89:72:15:a3:1a:8b:7e:5f:d3:fc:8b:ce:33:
41:f9:c4:20:05:00:d4:57:bd:12:7f:16:39:37:28:82:08:06:
fd:e8:8f:14:1c:70:c7:5c:bd:75:a9:6c:e2:20:3f:3c:1b:32:
ca:4f:9e:f8:ec:97:9d:b2:8c:2d:0c:5a:63:66:f7:ae:e8:da:
58:c5:81:1d:4f:61:86:2e:0b:fc:57:99:c4:e2:86:48:bb:65:
2b:03:da:ed:52:17:da:a5:ff:04:52:80:8c:ae:a0:61:b0:64:
73:10:9f:50:d0:18:e8:4e:af:27:ff:9b:e7:93:5e:91:a9:3b:
18:3f:bc:11:12:b8:57:60:89:17:b4:53:2c:d3:1a:f1:8c:80:
eb:2d:29:1f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8ZL7NzqXA81cvEhoXcb5gDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwNjMwMTUzOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQ5ZTM4ZjBmYjViZjk2OWI0ZmUyNGY3YTQ5ZjZjYTc0NmVjZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58owWtQe0HiFbm5KQsNZvI6uormR
HWEWuwwJakXU1e/m6w3YkYNs07VC18KDazK22uZni8TdXHaWGD6gxuIiryWB5goH
9pLETUPbsAq0OCuA2VbQiPCK75BYYmjYbOuTn4EJ2OdGR32NtZaWqAzStsdaH8hS
znIC5tFmN21goc9xEMYcSrWIH8d9RZ98ojhOeyZqSNWGKC1YnpWq2CxDCUaQU20e
/YhRRGQyTrR5FildJluoQI2DU46Oi6JhHsBIWuMMWbvUSA0D73zrkLk4EVuixlbE
l9FsL4x2c3fHMZw9fJxB0V/RexQuAb74AfSn465F6tQA61JRp5gNlzVCpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIrZ448Ptb+Wm0/iT3pJ9sp0bs6rMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvaXRuamp3LTF2NWFiVC1KUGVrbjJ5blJ1enFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXhKAwQA
VXiwMA0GCSqGSIb3DQEBCwUAA4IBAQBYOP49Dp51N3cV66fS/ZJh5IApNCIM+Se7
pvjbEnOx6l+efG8iK4WfKr7+b7AKuqUqQyOzuS/LYz6H4llDuLzlZVKQzzVaAHzZ
GlprBsI2goMQFWGPpMuKFPEgts1oTmYuEKsPiYK/YsI0+NYGFMQGGolyFaMai35f
0/yLzjNB+cQgBQDUV70SfxY5NyiCCAb96I8UHHDHXL11qWziID88GzLKT5747Jed
sowtDFpjZveu6NpYxYEdT2GGLgv8V5nE4oZIu2UrA9rtUhfapf8EUoCMrqBhsGRz
EJ9Q0BjoTq8n/5vnk16RqTsYP7wRErhXYIkXtFMs0xrxjIDrLSkf
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:34 2026 by rpki-client