Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/iU_edoD3dro4LI12qpTJkL677Ok.roa
File: iU_edoD3dro4LI12qpTJkL677Ok.roa (raw, json)
Hash identifier: bwRIWWpKMtUImsL0W7xsf4seiN9R8OMV7A35cOsyuOY=
Subject key identifier: 89:4F:DE:76:80:F7:76:BA:38:2C:8D:76:AA:94:C9:90:BE:BB:EC:E9
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1159015253A16D900B900531298AF692C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/iU_edoD3dro4LI12qpTJkL677Ok.roa
Signing time: Wed 07 Oct 2026 08:52:06 +0000
ROA not before: Wed 07 Oct 2026 08:52:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 193.168.202.0/24 maxlen: 24
193.168.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:90:15:25:3a:16:d9:00:b9:00:53:12:98:af:69:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 7 08:52:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=894fde7680f776ba382c8d76aa94c990bebbece9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:56:df:da:28:37:36:06:e7:8d:ae:7a:3f:
62:81:be:5c:82:9e:37:b2:40:75:b2:10:77:65:7b:
f0:97:a4:8b:e6:c3:3e:46:76:ed:98:38:be:c2:bf:
da:0e:16:77:b7:ae:bc:77:1b:8d:67:37:cb:9a:c5:
64:16:67:62:c0:3d:e5:5a:31:1b:65:89:e2:62:88:
17:74:4d:51:d4:a2:dc:e0:9a:ae:32:63:98:6a:80:
33:c1:5a:1c:44:7a:ab:16:0a:19:d4:93:31:08:b3:
79:60:27:cf:d9:c8:54:34:38:f8:46:3d:f1:19:9c:
c6:a9:17:57:7b:c0:cb:1d:d2:4e:38:ab:cd:87:7e:
4a:9f:00:48:34:2f:0e:a3:22:61:eb:b7:24:4f:76:
05:0e:bc:ff:52:33:ac:d8:4b:e2:db:aa:77:9a:4a:
df:bf:48:8e:ac:c6:b8:87:c4:93:de:c4:74:71:6d:
71:e6:a6:2f:d1:f1:27:3c:ca:17:26:b5:f6:4f:4a:
9d:67:19:f6:55:b5:c3:35:46:ee:36:28:20:9c:a2:
b5:a5:28:6b:b3:07:a4:e5:ec:06:00:6e:fc:cf:66:
db:3e:7c:71:c3:76:25:38:8c:98:28:ff:97:28:1b:
2c:34:ea:92:9a:06:ae:53:cd:82:c0:19:e9:04:84:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:DE:76:80:F7:76:BA:38:2C:8D:76:AA:94:C9:90:BE:BB:EC:E9
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/iU_edoD3dro4LI12qpTJkL677Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:5b:3f:f0:e7:1a:00:3a:d7:9f:5e:3d:96:7e:26:25:8f:90:
ca:c1:a3:ea:18:7e:65:15:c6:33:0e:c9:6f:4b:92:50:b6:49:
38:db:b5:a5:8c:e6:70:e7:c4:4d:33:51:a7:4c:dd:48:55:b2:
a5:79:3d:50:6c:1d:4f:11:bd:42:d0:c0:77:eb:28:a1:fb:6f:
19:18:46:d9:c4:4d:4b:57:7d:a4:94:a6:8a:24:f3:4d:a9:7a:
80:8e:e4:de:b4:ff:c0:08:d5:8c:c6:d9:92:55:f0:4b:d2:7f:
4f:06:10:1b:cc:6f:9d:a1:f0:0d:6d:6b:07:11:0b:d1:20:cd:
f0:23:f3:ef:e6:22:98:d4:41:d8:8f:48:b9:bf:8e:f5:86:13:
75:20:ac:7f:70:8a:d2:f1:72:ec:9b:0e:63:b8:20:bf:9d:11:
ca:62:41:2c:04:25:00:4a:3d:3a:15:13:cf:12:11:c4:cb:11:
05:ac:a5:5f:57:7c:04:2d:53:5e:de:cd:27:f6:ce:1f:d2:12:
7c:5e:27:e2:17:32:dc:98:56:cb:f3:f2:19:e6:88:32:b6:a8:
3e:9c:02:97:48:fe:06:01:e6:1c:16:fd:2f:4f:7f:5b:8e:a0:
cf:a2:05:a0:91:40:54:bd:41:96:da:f7:f3:27:5e:22:58:28:
29:83:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:40 2026 by rpki-client