Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ITZZ19Qzs7OYmp7r_XJpMSpkOLg.roa
File: ITZZ19Qzs7OYmp7r_XJpMSpkOLg.roa (raw, json)
Hash identifier: kSweMGUUXqLYbVuKRD8bEG1IMwF+STptVCvMSZdQfOA=
Subject key identifier: 21:36:59:D7:D4:33:B3:B3:98:9A:9E:EB:FD:72:69:31:2A:64:38:B8
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A154C99291B38830046650FB9BAE226BAC
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ITZZ19Qzs7OYmp7r_XJpMSpkOLg.roa
Signing time: Mon 19 Oct 2026 15:30:58 +0000
ROA not before: Mon 19 Oct 2026 15:30:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218883
IP address blocks: 2a0e:4001:3000::/40 maxlen: 40
2a0e:4001:3010::/44 maxlen: 44
2a0e:4001:3010::/48 maxlen: 48
2a0e:4001:3011::/48 maxlen: 48
2a0e:4001:3018::/48 maxlen: 48
2a0e:4001:3020::/44 maxlen: 44
2a0e:4001:3030::/44 maxlen: 44
2a0e:4001:3031::/48 maxlen: 48
2a0e:4001:3040::/44 maxlen: 44
2a0e:4001:3042::/48 maxlen: 48
2a0e:4001:3048::/48 maxlen: 48
2a0e:4001:3050::/44 maxlen: 44
2a0e:4001:3060::/44 maxlen: 44
2a0e:4001:3061::/48 maxlen: 48
2a0e:4001:3070::/44 maxlen: 44
2a0e:4001:3080::/44 maxlen: 44
2a0e:4001:3090::/44 maxlen: 44
2a0e:4001:30a0::/44 maxlen: 44
2a0e:4001:30a1::/48 maxlen: 48
2a0e:4001:30b0::/44 maxlen: 44
2a0e:4001:30f0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:c9:92:91:b3:88:30:04:66:50:fb:9b:ae:22:6b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 19 15:30:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=213659d7d433b3b3989a9eebfd7269312a6438b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:23:68:00:15:6b:b2:e1:9e:7e:d4:15:d6:
86:5b:90:74:b4:1b:32:50:c9:31:c7:d8:a5:3a:39:
15:6e:45:bf:62:aa:db:1a:e9:a7:18:ec:76:a4:0d:
21:8d:6c:4d:9d:98:8f:86:8e:12:25:96:fe:d1:3a:
5e:d9:f7:4b:97:87:df:d5:bb:85:c4:ef:a3:d9:9a:
f3:e7:42:9c:49:04:e5:17:63:2f:10:42:c2:57:5d:
15:01:a6:a9:1e:30:ad:e9:13:68:06:c0:92:44:1c:
50:22:f6:cb:35:c1:1e:0f:0a:05:44:7e:e1:08:68:
55:1f:7a:cf:9d:15:e1:2e:d5:59:4a:90:63:9d:30:
2f:c1:58:db:55:bc:58:d8:f9:5a:20:2a:77:11:6a:
c1:85:dc:9b:07:78:18:27:14:28:39:14:4b:ba:aa:
cc:c5:aa:c9:eb:0a:87:19:da:8b:8f:fb:f4:ab:c0:
aa:b1:d5:39:bf:28:73:80:c6:02:3b:09:20:77:85:
a3:24:62:33:7a:30:e1:c1:3b:2c:6a:22:81:e5:e9:
6f:1e:9b:2e:7f:a4:8d:83:b4:a2:42:05:f3:a0:27:
10:4b:d0:4f:35:3b:2f:aa:0f:88:2b:35:ad:2f:05:
8e:84:ca:5f:f6:35:49:cf:89:1d:69:c2:5b:19:3f:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:59:D7:D4:33:B3:B3:98:9A:9E:EB:FD:72:69:31:2A:64:38:B8
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ITZZ19Qzs7OYmp7r_XJpMSpkOLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:3000::/40
Signature Algorithm: sha256WithRSAEncryption
40:ba:fd:5e:c1:d7:6d:e7:27:95:af:ea:11:93:9b:7a:12:1d:
c3:06:59:35:77:9d:b4:fa:08:a8:bd:f1:93:4c:4b:53:58:77:
4c:52:de:53:17:b2:f0:73:f4:21:05:73:be:00:cf:90:d0:5e:
66:c7:49:29:7b:48:68:57:93:b3:33:09:01:26:ed:d7:9e:04:
c5:36:75:25:48:98:16:94:da:29:69:b5:bf:1d:bc:5e:83:78:
a9:7a:36:d1:a2:fd:6e:ef:27:c6:d7:d5:fa:f7:b3:15:3e:6a:
4f:1c:51:3f:9e:b4:87:b5:d2:62:a4:3a:77:15:d6:4a:f5:d1:
b9:11:bc:b0:ad:b3:7c:f1:57:ad:1b:87:86:2d:60:92:54:29:
27:a9:ea:15:2c:0b:d3:4e:69:f3:16:22:6b:97:30:17:54:1b:
1d:3d:e4:56:4e:c3:8e:8e:bf:40:ed:d1:d0:7d:96:bd:09:69:
63:af:e2:e5:4c:b2:97:3f:24:b3:ef:c0:2e:fb:a6:7d:d9:90:
06:10:e1:75:1f:6d:b0:12:6c:d9:ad:f7:b0:b5:71:03:af:ae:
0d:09:8b:0f:53:c1:4a:3c:7b:20:f3:c2:73:b8:83:b3:34:f8:
57:d2:20:ac:d1:26:b6:0c:ec:72:26:a4:51:37:6d:f0:ea:8b:
37:f8:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:54 2026 by rpki-client