Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ICtj_KhOXruzmoTtLigcp7zwCDE.roa
File: ICtj_KhOXruzmoTtLigcp7zwCDE.roa (raw, json)
Hash identifier: uMpBRXQG3JAPZFyOhdEYNmLxdfgmonbl49mJpFxGJZM=
Subject key identifier: 20:2B:63:FC:A8:4E:5E:BB:B3:9A:84:ED:2E:28:1C:A7:BC:F0:08:31
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019FAE8B566E02D69966F067444615B75649
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ICtj_KhOXruzmoTtLigcp7zwCDE.roa
Signing time: Wed 29 Jul 2026 15:43:14 +0000
ROA not before: Wed 29 Jul 2026 15:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215931
IP address blocks: 89.190.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:8b:56:6e:02:d6:99:66:f0:67:44:46:15:b7:56:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jul 29 15:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=202b63fca84e5ebbb39a84ed2e281ca7bcf00831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:cd:45:7d:73:eb:c6:61:21:f0:ec:f1:8a:
b2:d9:ca:7d:ce:c5:6a:21:67:11:68:cd:05:f3:ae:
ee:b3:5d:dd:83:8f:48:69:b1:2a:62:68:0b:20:ac:
db:29:be:d2:3c:f2:a1:32:62:c6:23:67:53:4c:67:
ed:95:65:d2:34:9a:d9:1e:03:b2:1f:26:fc:8d:b6:
42:10:5b:24:e7:a9:83:23:cf:76:4a:cb:52:fc:2f:
26:bc:26:14:f6:e6:8f:4d:46:ee:58:83:2c:5d:c2:
e3:25:48:0a:b7:06:3f:41:0e:8d:1b:66:3f:b2:62:
3d:3a:d0:b7:0b:41:84:e1:9e:ec:07:9b:c9:00:f8:
ea:62:f4:89:71:cc:6a:7f:93:84:b5:67:8b:0c:57:
b7:ea:ce:97:b3:98:18:eb:07:09:46:56:29:f5:f0:
74:d5:b5:68:2d:78:c0:62:e3:ae:48:ab:20:54:e9:
9c:79:6b:52:94:bc:14:81:b7:8b:95:c3:cf:72:e6:
e2:b5:f3:b4:8b:ab:93:65:cc:83:fa:32:d9:16:d7:
37:43:04:84:86:fb:a4:60:cf:38:9c:1b:5a:ef:8e:
cb:e6:a1:8f:a7:bf:0a:bf:28:6a:6e:c7:79:cf:ed:
df:0b:c4:10:b7:cc:c2:7b:73:33:c5:ec:15:25:76:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2B:63:FC:A8:4E:5E:BB:B3:9A:84:ED:2E:28:1C:A7:BC:F0:08:31
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ICtj_KhOXruzmoTtLigcp7zwCDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:63:f7:b5:c9:97:ac:e1:66:a0:64:2a:88:ed:4f:bf:a1:8d:
ec:f2:35:99:d3:2d:30:f0:63:f0:61:bd:4a:73:9c:a6:b8:2a:
05:98:98:e6:64:92:6e:04:78:a1:d1:80:52:0b:43:f6:d6:02:
af:0f:c8:f6:47:8e:6c:f4:2c:1c:40:0d:81:01:cd:5c:15:1f:
f7:ca:f9:af:fc:30:57:48:e0:a6:6c:e5:01:f5:2f:44:78:77:
8d:b8:51:1f:d4:e6:b5:65:ec:30:a6:13:38:3a:c9:d0:f3:70:
72:e4:d8:b9:84:b9:2b:5c:f2:f3:0e:2a:d3:6b:10:bf:11:9a:
a7:d4:f5:ee:b0:05:d5:6c:82:0c:47:0d:13:f6:70:43:eb:14:
ba:44:12:cc:19:1d:79:f9:73:02:04:08:4c:53:be:4b:37:61:
4b:85:20:ed:ea:22:d1:cf:32:8b:f8:fb:3a:6e:28:30:61:94:
e5:27:c3:d5:06:39:ef:65:20:c9:84:b2:11:db:16:c3:fd:28:
4f:e0:3e:b7:41:36:af:f9:5b:16:f1:73:0e:0f:5d:ed:e7:99:
d7:87:62:9d:fc:ec:b2:b3:f6:12:c8:45:9b:f6:fc:b9:b3:b8:
f4:68:e0:e2:b2:8e:c7:67:b3:df:0d:ef:28:1d:4b:23:33:f7:
0d:0d:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:46 2026 by rpki-client