Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/I9uwc0lDknLLEpuBhz-mxYghX0Q.roa
File: I9uwc0lDknLLEpuBhz-mxYghX0Q.roa (raw, json)
Hash identifier: ktqjIkPDIyHqLXdKY2by8fEMx2EaNTLhZWVPq9RFgLg=
Subject key identifier: 23:DB:B0:73:49:43:92:72:CB:12:9B:81:87:3F:A6:C5:88:21:5F:44
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A05874EB96F61D35E063131900B65F1F04
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/I9uwc0lDknLLEpuBhz-mxYghX0Q.roa
Signing time: Mon 31 Aug 2026 15:34:12 +0000
ROA not before: Mon 31 Aug 2026 15:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 31.184.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:74:eb:96:f6:1d:35:e0:63:13:19:00:b6:5f:1f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 31 15:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23dbb07349439272cb129b81873fa6c588215f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:af:7a:2b:ea:12:75:62:9e:0b:37:c0:46:
78:a8:1d:d4:f9:ea:71:a8:1d:09:e5:be:ef:8c:73:
87:1e:ff:6d:bc:dd:6e:92:77:07:e8:92:d2:57:ef:
39:70:33:16:37:94:fe:e8:41:39:7c:52:88:85:3e:
07:85:c5:ea:5a:45:67:31:8e:2d:2b:9b:14:77:6d:
80:8c:2a:7a:b5:89:af:27:80:8c:04:56:21:82:6e:
b8:e8:99:03:2e:f1:b7:e5:b7:b0:a0:e8:30:a7:88:
b4:28:05:89:dd:ca:79:b5:da:89:31:11:df:4c:b3:
e6:7c:fd:03:5a:92:30:92:f5:d9:6c:5d:e7:1d:1e:
67:1e:c6:e5:15:e8:5c:33:c2:d7:5d:8c:01:cc:0a:
d2:1e:87:83:70:1e:bd:af:df:fc:ec:74:b4:4f:6d:
7f:c5:9b:18:eb:0a:64:4f:fe:5e:d6:69:08:3d:3e:
61:bd:9a:1b:c1:7c:b2:5d:05:d1:54:48:4d:0e:b4:
1e:5d:be:f6:29:6b:1e:71:e1:bf:09:84:d4:7f:58:
b9:ba:aa:4f:17:bd:eb:73:1e:21:dd:94:84:47:81:
52:e0:c4:aa:0a:e2:f5:18:85:15:14:b6:ed:27:46:
ac:e9:b7:3a:f7:94:8a:6a:d1:09:16:2d:c6:2b:04:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:B0:73:49:43:92:72:CB:12:9B:81:87:3F:A6:C5:88:21:5F:44
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/I9uwc0lDknLLEpuBhz-mxYghX0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.242.0/24
Signature Algorithm: sha256WithRSAEncryption
84:26:62:3e:11:c9:1b:81:97:31:bb:97:7b:ec:f2:d6:d8:e0:
27:bc:14:70:1a:b9:bb:eb:2d:1b:ac:45:db:4f:a4:78:08:dd:
28:e5:01:64:25:ca:8c:8f:d1:a1:aa:83:8b:f4:3d:24:dc:2a:
fa:9e:83:0e:77:3e:6b:b5:36:94:44:00:88:c6:f6:eb:96:d9:
aa:27:be:be:1d:80:d6:73:2f:0d:c4:94:9b:bc:c9:10:8a:b4:
45:97:f4:92:ec:e1:b0:fc:6a:5f:92:af:24:f2:b2:b5:66:86:
8f:ba:02:e4:3a:4f:a0:49:89:8e:69:5b:3e:31:b9:4d:4e:dd:
a8:79:9c:db:dd:b9:0a:82:15:b6:41:88:f4:51:88:f8:d8:46:
91:fe:51:b3:77:71:4c:84:fe:95:2b:cf:f2:47:1d:cc:66:42:
d2:12:90:e7:06:df:23:ee:d5:e1:b2:38:18:a8:b9:86:2b:f0:
e7:b3:bc:60:80:15:a5:4a:1d:80:d7:7f:96:d2:99:d8:de:66:
ee:f3:bc:51:b7:9d:c5:4c:69:ad:ae:de:69:e7:4b:8b:a6:86:
77:be:ff:cd:a2:7d:ef:26:87:2f:7b:95:83:3f:91:bb:79:a3:
37:3d:19:5b:b7:f6:b4:c9:41:31:5c:50:a4:c9:fb:dd:76:df:
df:af:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:03:17 2026 by rpki-client