Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iszsqJQ7-N9LrDt7eOjeyCrNNU0.roa
File: iszsqJQ7-N9LrDt7eOjeyCrNNU0.roa (raw, json)
Hash identifier: PfUFbwLPYXgfIxmW9pOJ6WNrv74TXr2CeRURmlDDQ3c=
Subject key identifier: 8A:CC:EC:A8:94:3B:F8:DF:4B:AC:3B:7B:78:E8:DE:C8:2A:CD:35:4D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019EC816B46DF8FFE7354ABE460476BF8D12
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iszsqJQ7-N9LrDt7eOjeyCrNNU0.roa
Signing time: Sun 14 Jun 2026 21:43:11 +0000
ROA not before: Sun 14 Jun 2026 21:43:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402456
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c8:16:b4:6d:f8:ff:e7:35:4a:be:46:04:76:bf:8d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 14 21:43:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8acceca8943bf8df4bac3b7b78e8dec82acd354d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:17:d2:0f:50:8b:23:ff:1a:74:7c:6b:f9:
01:a9:10:80:83:b2:ab:74:4f:2d:75:3a:cb:24:32:
d7:df:00:f4:f3:e4:8d:05:bb:c3:38:3b:3a:5c:ef:
08:10:35:5f:70:30:f7:fb:fa:71:bc:db:5d:bd:c9:
26:c1:2c:0e:78:58:c6:85:de:42:9f:54:40:da:dc:
03:d3:7c:0c:f0:89:cc:24:84:30:5a:72:24:fe:94:
fe:c3:8a:7f:76:5a:62:5d:10:83:c7:87:a8:80:f9:
da:4f:c5:6c:96:3d:74:4f:6b:d9:62:3d:db:86:8c:
28:55:3a:5e:a7:04:1e:49:e8:b4:b8:50:50:45:3c:
1a:5b:c0:22:bb:32:37:18:e2:a8:cb:ec:ba:7b:2c:
c6:64:a3:9d:01:ef:43:d0:06:b1:dd:aa:4c:14:59:
f5:6a:fe:ff:97:74:da:b6:f8:4a:68:10:b3:6b:2d:
cb:0f:d9:15:50:a6:0f:32:04:04:b1:20:89:72:ec:
a3:5e:6e:03:bc:81:1f:5c:83:2d:25:4e:9f:b5:a1:
70:ba:32:55:c6:0b:82:9b:53:77:b1:c8:ad:28:4e:
1e:d1:3f:73:dc:f8:95:37:24:e7:b1:e6:57:24:f3:
d8:06:99:a8:a0:e7:4e:68:a1:20:46:20:61:9a:f2:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:EC:A8:94:3B:F8:DF:4B:AC:3B:7B:78:E8:DE:C8:2A:CD:35:4D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iszsqJQ7-N9LrDt7eOjeyCrNNU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:db:f3:a9:48:ad:bf:4f:01:8c:2e:3e:2b:22:be:88:69:23:
1b:1b:9a:39:7d:78:09:c8:30:94:5a:39:33:f2:d5:1b:04:3a:
ac:33:0f:b9:da:ce:0f:a2:94:67:78:d2:7a:29:16:1c:b6:7b:
07:74:fa:5d:fa:03:b4:ac:4b:88:f0:2c:15:ac:e6:da:b9:08:
1c:2e:2b:94:eb:ea:ec:11:80:9b:ee:bf:a9:c6:9d:a5:80:91:
bf:c1:cc:fb:86:f5:31:68:f8:83:ef:a0:2c:e1:53:00:29:aa:
10:bc:24:15:cc:26:29:00:2e:ee:34:74:ae:47:2c:f4:58:dc:
ce:e0:9d:0b:72:ce:ab:63:2a:b9:0c:81:f2:23:65:a2:cc:67:
5a:95:76:60:a8:8d:af:0f:71:13:dd:f5:27:65:d1:a7:ef:9d:
a3:de:39:33:c2:c7:80:15:10:ad:6d:6a:ed:fd:17:aa:d6:b3:
04:10:80:77:c0:ca:5a:e1:14:7f:07:81:59:5a:d8:d2:ea:7a:
98:97:1b:92:af:6a:29:44:72:28:d6:46:9c:af:6f:2e:fc:5f:
13:76:b6:73:36:ba:01:ab:ab:1e:44:81:84:d6:a3:1d:98:a7:
c8:72:32:54:56:f9:49:d8:e8:49:0f:d1:bb:36:8b:d9:f9:d6:
16:9c:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:17 2026 by rpki-client