Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ijbiJD7TGtArmmQdogwgJNz_Iss.roa
File: ijbiJD7TGtArmmQdogwgJNz_Iss.roa (raw, json)
Hash identifier: pWVbgHKQTvi3IHOIcmkXTEU92wiUS9n0t7V8IM2/M4U=
Subject key identifier: 8A:36:E2:24:3E:D3:1A:D0:2B:9A:64:1D:A2:0C:20:24:DC:FF:22:CB
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A01F4FF0CFEE0657DE24F378D1259C9375
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ijbiJD7TGtArmmQdogwgJNz_Iss.roa
Signing time: Thu 20 Aug 2026 13:15:27 +0000
ROA not before: Thu 20 Aug 2026 13:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35145
IP address blocks: 5.181.226.0/23 maxlen: 23
5.181.226.0/24 maxlen: 24
5.181.227.0/24 maxlen: 24
2a0e:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:4f:f0:cf:ee:06:57:de:24:f3:78:d1:25:9c:93:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Aug 20 13:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a36e2243ed31ad02b9a641da20c2024dcff22cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:95:a7:b4:c8:5a:83:0d:53:aa:93:9b:69:
28:8c:c0:ee:fc:6f:06:96:83:c2:e9:76:f1:2d:f4:
40:dc:1c:dd:34:25:6f:6e:c7:b2:51:c6:d0:43:4e:
1d:d8:7a:ee:e9:3a:3d:e7:28:bd:b5:43:9b:be:9e:
78:88:1c:ae:7c:3d:05:94:50:30:e0:60:f4:96:0b:
19:af:f0:c8:7b:85:06:c0:bc:94:a8:c0:fe:4d:0e:
94:d7:52:98:8e:00:29:67:48:e0:c7:86:a4:de:8f:
1f:0e:e4:1c:cf:ad:75:48:f6:26:95:a8:3a:d4:8b:
7b:94:b6:76:a8:f1:e2:67:3d:f9:a4:f4:95:f8:c6:
bd:bb:eb:8a:19:90:79:13:24:4e:26:fb:db:96:22:
a5:67:cf:59:4f:f5:2a:3b:a2:76:dc:f5:ba:e1:30:
6c:c6:e4:e1:22:ea:87:c0:a9:1f:f0:b7:fe:0b:01:
81:a9:6c:c4:1e:e6:50:9c:88:f6:c6:eb:cc:12:27:
6c:5d:52:1b:2b:c8:de:5c:12:53:ec:fb:53:b2:21:
4a:f0:50:d3:75:05:64:a6:6d:39:5d:0f:ca:58:4b:
bc:f8:22:7b:4d:2e:30:22:5b:5d:76:0d:0b:6e:34:
8c:38:8c:b1:73:94:5f:6b:33:6f:4d:c0:65:d5:e3:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:E2:24:3E:D3:1A:D0:2B:9A:64:1D:A2:0C:20:24:DC:FF:22:CB
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ijbiJD7TGtArmmQdogwgJNz_Iss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.226.0/23
IPv6:
2a0e:800::/48
Signature Algorithm: sha256WithRSAEncryption
34:99:9b:24:60:07:7a:96:0e:f4:56:25:c9:c2:d1:98:a4:22:
d9:f1:f3:17:e3:ab:0c:06:b8:25:19:40:60:14:1b:0f:fb:fd:
79:8b:27:5a:58:b6:fb:b5:b1:12:9b:9a:00:05:b3:1c:04:88:
e0:7e:11:5b:b4:ea:98:0c:bf:7e:30:07:c1:9d:2e:dd:36:90:
67:df:26:d2:1e:5d:50:92:e8:0f:55:b0:62:23:42:04:4a:1e:
39:51:b1:a0:db:54:06:36:ac:a9:13:13:db:37:21:71:6a:3f:
d5:ea:e2:8e:c8:99:bf:a0:fe:b5:80:d5:c0:20:73:47:e9:36:
3d:5e:c0:68:ef:88:26:86:38:7a:b8:3e:e5:e1:c0:a4:5e:52:
9b:2b:ca:9c:4d:31:47:4d:a3:6b:b2:36:03:67:d1:f6:01:38:
18:69:f7:6a:60:b9:f8:32:34:f7:37:cc:7b:e8:f9:d4:cb:ec:
31:f0:38:07:ee:4e:e8:3b:68:d0:4f:65:30:5c:38:59:ed:47:
4a:4d:22:bd:7a:f0:f9:61:60:63:14:7e:7a:9e:57:70:c5:08:
69:a3:48:ae:dd:fd:72:b0:c3:be:3d:ee:a3:0f:0a:89:73:60:
ed:f5:f3:c2:b0:08:d3:2e:96:88:59:b8:67:3b:2f:1e:f4:2a:
70:ab:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:59 2026 by rpki-client