Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/itbObcBsx68CiFJC_xhWmyDjy8s.roa
File: itbObcBsx68CiFJC_xhWmyDjy8s.roa (raw, json)
Hash identifier: hATpT52FpSx1hWxq3qoU4yE0uPXKyPS+lIUU7wBZTGY=
Subject key identifier: 8A:D6:CE:6D:C0:6C:C7:AF:02:88:52:42:FF:18:56:9B:20:E3:CB:CB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A168BACA9D807F096862A3DC4C759FCCBF
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/itbObcBsx68CiFJC_xhWmyDjy8s.roa
Signing time: Fri 23 Oct 2026 12:27:14 +0000
ROA not before: Fri 23 Oct 2026 12:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399989
IP address blocks: 209.216.4.0/22 maxlen: 22
209.216.12.0/22 maxlen: 22
209.216.20.0/22 maxlen: 22
209.216.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:ba:ca:9d:80:7f:09:68:62:a3:dc:4c:75:9f:cc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 23 12:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ad6ce6dc06cc7af02885242ff18569b20e3cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:0a:e0:e0:86:ef:a4:5e:d2:0d:0b:85:60:
13:84:e6:ef:a1:95:d9:92:de:92:42:99:d3:72:3b:
72:67:40:bc:e5:c3:62:2e:5b:d0:c1:02:68:7f:88:
8e:61:30:4e:33:55:a3:de:5d:4b:2b:e7:65:fe:d4:
d8:a0:30:5a:f5:0e:1f:4b:03:39:ea:3b:01:e7:2e:
28:ac:c2:01:93:af:21:c7:32:a8:b6:d5:9c:03:10:
27:7f:ad:dd:94:31:37:99:97:20:6a:13:a9:1b:54:
6d:d7:50:10:a8:42:00:79:1e:43:63:b1:4b:4f:72:
40:40:49:d5:ec:ec:d2:a6:df:06:16:b2:1e:34:c5:
1e:1f:21:58:ec:4d:70:6b:75:86:5f:a2:c1:cd:76:
75:9c:79:85:9f:35:db:98:47:94:22:30:2b:e4:ff:
e8:e6:9b:e1:44:07:5c:55:5c:d8:9e:42:74:f3:0f:
2c:64:48:e0:97:c2:4b:3a:b8:64:ad:0f:65:81:49:
aa:e6:d9:38:39:73:c4:91:dc:38:78:a7:da:23:53:
22:fd:69:0a:6c:7a:51:09:76:17:45:82:b3:ed:3f:
24:ba:6d:ad:4f:8a:df:57:ad:a3:bb:36:9e:ce:bd:
9f:35:13:20:70:9c:e0:75:57:54:0b:87:9f:58:f5:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:CE:6D:C0:6C:C7:AF:02:88:52:42:FF:18:56:9B:20:E3:CB:CB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/itbObcBsx68CiFJC_xhWmyDjy8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.216.4.0/22
209.216.12.0/22
209.216.20.0/22
209.216.28.0/22
Signature Algorithm: sha256WithRSAEncryption
58:b4:83:eb:3f:ba:99:24:94:bf:11:59:4c:10:58:87:7b:01:
e2:4a:5e:91:88:2a:94:5c:2a:41:77:ae:ce:8e:a9:3a:2e:d4:
bb:a1:d7:1a:b1:c8:5f:9f:f0:29:fc:4c:72:37:cb:d7:87:04:
92:da:bd:84:bb:b1:cf:ad:64:da:13:be:1b:90:4f:5c:3e:ed:
29:33:d4:f0:a9:8a:b8:ab:91:35:c6:f4:9b:2d:89:62:74:61:
73:72:c6:21:46:cf:fc:ab:13:20:e3:41:04:0d:42:f8:6a:57:
be:57:ad:ab:74:6a:a2:02:ba:67:cc:f6:44:05:23:f7:6f:2b:
c7:67:1b:aa:25:f4:84:f0:c5:b2:b0:a0:62:c9:e6:7f:1a:96:
05:19:f8:97:f6:3d:3c:c2:4a:e9:df:32:4a:e8:eb:78:c6:82:
7a:22:6f:fc:31:81:e7:5d:ae:0f:9b:ca:fc:42:51:72:68:cc:
45:bc:46:e1:95:53:c3:58:b5:d1:90:c7:9c:f1:0c:85:7e:d0:
28:1f:59:95:87:14:9a:9e:9d:09:ef:dd:f2:0e:2f:69:ee:5c:
14:db:5f:0b:8a:e3:1b:ce:04:ab:f6:4d:4c:b4:67:87:77:82:
39:bf:2d:e9:27:90:ad:70:13:a9:20:61:9d:fe:22:c7:52:2e:
b5:8b:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:29 2026 by rpki-client