Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/13iqoSeE9VCuGJ-RGnT1R1DprEs.roa
File: 13iqoSeE9VCuGJ-RGnT1R1DprEs.roa (raw, json)
Hash identifier: oZvRCWkiq5C/VePt4KFYqxci35RR7Sxs5hFHTxZOcfU=
Subject key identifier: D7:78:AA:A1:27:84:F5:50:AE:18:9F:91:1A:74:F5:47:50:E9:AC:4B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A11615BF59A36298F39C60F76706B39AE2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/13iqoSeE9VCuGJ-RGnT1R1DprEs.roa
Signing time: Wed 07 Oct 2026 11:18:06 +0000
ROA not before: Wed 07 Oct 2026 11:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.64.88.0/24 maxlen: 24
194.64.89.0/24 maxlen: 24
194.64.90.0/23 maxlen: 24
194.163.68.0/24 maxlen: 24
194.163.80.0/22 maxlen: 24
194.163.92.0/24 maxlen: 24
194.163.93.0/24 maxlen: 24
194.233.31.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.150.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
195.180.139.0/24 maxlen: 24
195.180.148.0/24 maxlen: 24
195.180.149.0/24 maxlen: 24
195.180.150.0/23 maxlen: 24
195.252.175.0/24 maxlen: 24
212.224.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:15:bf:59:a3:62:98:f3:9c:60:f7:67:06:b3:9a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Oct 7 11:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d778aaa12784f550ae189f911a74f54750e9ac4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:32:e9:8f:a7:b0:46:87:07:80:2c:19:59:
e2:af:13:ca:bc:49:96:9b:12:43:69:d8:32:8a:87:
9d:d0:d5:a2:0e:17:fd:58:75:ce:ef:93:9a:17:07:
f0:12:6a:a6:be:48:af:4a:13:8c:53:d2:fd:bc:a5:
6f:72:02:08:00:d0:04:51:84:05:21:22:8d:92:b8:
a1:7e:07:4d:a9:7b:35:1a:06:69:f0:94:1b:cd:23:
20:fc:a9:79:3e:ab:92:c5:89:b9:f0:97:4e:7b:44:
8a:ed:6b:47:03:c6:77:71:23:9e:93:da:58:24:15:
44:a8:5c:c8:63:9b:6d:c4:df:63:50:e7:76:a5:fe:
c5:6b:b1:4e:fa:17:0c:63:c4:eb:2a:3e:70:7c:40:
c5:af:53:2b:18:12:65:6c:99:25:9d:78:63:69:2a:
d6:f4:9f:52:7d:ae:26:7e:7a:21:a0:69:76:97:51:
23:0a:cf:2e:81:5c:8f:5a:c0:71:94:d3:b4:96:1a:
2e:73:6f:a9:b8:34:0d:ec:fe:11:69:de:0a:af:22:
3d:0d:7f:f9:75:fa:df:24:18:b1:df:be:eb:3a:4c:
fd:5a:c2:d1:a0:9e:f2:f0:af:09:6d:7d:fb:14:1b:
b9:a3:0f:06:95:f9:a6:6c:aa:e4:7c:2b:d9:58:cc:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:AA:A1:27:84:F5:50:AE:18:9F:91:1A:74:F5:47:50:E9:AC:4B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/13iqoSeE9VCuGJ-RGnT1R1DprEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.88.0/22
194.163.68.0/24
194.163.80.0/22
194.163.92.0/23
194.233.31.0/24
194.233.148.0/24
194.233.150.0/23
195.180.128.0/22
195.180.139.0/24
195.180.148.0/22
195.252.175.0/24
212.224.8.0/24
Signature Algorithm: sha256WithRSAEncryption
81:06:9d:04:98:da:3e:e8:aa:2a:e5:37:25:cb:6c:ed:63:ea:
c1:47:c3:9c:4e:5e:a5:97:f0:ac:c2:7b:d4:e5:c9:d3:2d:e9:
a8:b1:39:96:7e:31:56:26:1c:b0:8d:96:7b:e6:85:ca:3c:4b:
14:7e:1d:84:b8:ba:7e:62:7f:88:cd:6b:d8:1b:04:c9:6b:4c:
3c:0d:c5:39:5d:c9:09:e0:e2:81:82:6b:ef:61:2b:f4:a4:bf:
eb:18:4f:7d:82:75:b1:41:4f:56:61:b4:ff:cc:82:8f:37:a4:
58:63:bf:4c:f3:5d:0f:3a:41:7d:f0:de:5f:61:e8:79:f0:90:
0a:7c:8f:75:4d:3e:fc:5a:a0:c7:39:d9:19:c2:b4:91:61:a2:
36:19:c1:56:4f:88:d2:1f:f8:b3:8a:74:63:03:b7:07:cd:7f:
62:26:f9:79:42:42:e7:28:65:7f:d7:b8:85:e0:f1:58:7f:1c:
9b:83:1f:a8:4a:52:ae:4f:78:0a:56:f5:d2:f3:a2:3f:64:4b:
94:13:4c:87:4e:26:97:93:c6:1d:e9:1f:2e:8a:41:3a:bb:d2:
f9:d0:88:07:35:8c:f8:62:5d:26:32:9c:c9:dc:c7:84:4b:2f:
f3:89:ce:f0:a8:dc:43:05:af:37:94:d8:71:54:4c:02:b6:94:
22:1d:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:41 2026 by rpki-client