Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/Ixc0FTVWxzna0vpYT8iSJQfYgs8.roa
File: Ixc0FTVWxzna0vpYT8iSJQfYgs8.roa (raw, json)
Hash identifier: eyE//5nnGG1gd1MKGli98Ub3MuP1GL2b5RO5JiAkJBg=
Subject key identifier: 23:17:34:15:35:56:C7:39:DA:D2:FA:58:4F:C8:92:25:07:D8:82:CF
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 01A04329D3FCBF6B7DC601EBD4C8A4BBA301
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/Ixc0FTVWxzna0vpYT8iSJQfYgs8.roa
Signing time: Thu 27 Aug 2026 12:20:09 +0000
ROA not before: Thu 27 Aug 2026 12:20:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50572
IP address blocks: 194.0.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:29:d3:fc:bf:6b:7d:c6:01:eb:d4:c8:a4:bb:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Aug 27 12:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=231734153556c739dad2fa584fc8922507d882cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:82:ab:84:ca:16:1a:d5:e9:e1:90:33:f5:
b7:ba:99:ea:3b:55:45:2f:6d:63:d9:27:33:6a:cf:
52:1e:e1:8d:e2:11:ac:90:72:dc:69:32:38:60:2e:
05:2e:e2:70:24:40:a7:be:d3:11:ec:82:a2:65:7e:
ad:b3:a9:d6:6d:97:50:66:e0:41:22:e4:05:d7:98:
fc:c7:34:e2:e3:94:2f:07:31:f9:fc:c1:09:54:d8:
68:d0:11:3a:c4:bc:1f:16:21:c9:29:a1:84:5b:e4:
c6:26:1a:cf:47:31:09:36:1f:dc:99:0b:9e:90:59:
58:31:e8:0e:38:d7:aa:b0:31:ab:da:a7:ab:65:b7:
8f:bf:9a:95:14:d4:c4:7f:31:d0:c1:0a:87:25:9a:
f4:eb:b1:67:fc:b0:d7:9c:8b:fe:72:42:99:2a:81:
46:98:c0:7e:99:5e:2a:66:f8:40:1c:58:3c:d7:a7:
39:0d:ce:3d:e8:f1:16:b1:af:a3:ef:5a:6b:26:5b:
56:36:7a:cf:60:3b:69:ed:3d:88:a5:8b:88:80:43:
34:43:16:da:13:80:30:fc:52:20:80:82:19:85:17:
26:d2:93:21:d6:be:fc:70:4f:5e:78:3d:be:ba:a1:
d5:ef:c2:ea:c3:b1:37:96:41:6e:ac:56:10:e5:de:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:34:15:35:56:C7:39:DA:D2:FA:58:4F:C8:92:25:07:D8:82:CF
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/Ixc0FTVWxzna0vpYT8iSJQfYgs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:23:c3:34:ad:00:7f:44:08:68:2a:8d:c6:4f:91:d1:02:e3:
9e:b5:67:bf:51:54:de:12:76:8e:e1:69:d8:7e:e4:78:92:ee:
7a:d6:c5:9e:4c:2b:c5:34:d7:94:c2:ce:b4:cd:f5:d8:eb:a6:
29:09:60:27:e0:fe:f2:20:c1:ea:38:56:d9:ff:00:b2:38:73:
55:d2:af:22:75:89:8b:42:96:25:f4:7b:fc:3b:63:0f:31:50:
ad:0f:71:be:fe:c8:c3:c0:c8:a1:9d:cf:f2:19:70:76:db:b0:
99:68:37:74:cd:af:44:94:d1:d3:f0:13:39:d1:20:e1:4d:65:
62:67:48:c0:0f:aa:1a:58:74:45:20:e8:f3:8a:85:46:c9:b4:
10:4e:dc:21:a8:d0:b9:ec:b1:63:ee:ac:c8:64:45:17:8a:21:
12:ad:4b:47:1a:12:bc:ba:e7:0f:12:91:ba:c7:4c:75:9d:1c:
50:9c:7e:fe:4b:a5:b8:95:5c:ea:53:d5:d3:9f:80:0c:63:ba:
b3:27:cf:2d:27:13:b9:66:fb:73:08:68:c6:62:a7:17:b2:9e:
9c:e0:5f:6a:7c:74:66:6b:7e:55:f8:d2:2d:3d:3e:e3:87:86:
05:4b:0e:ed:5d:59:f9:7f:ee:79:5c:9c:92:a7:29:d1:dc:dc:
81:d5:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:58 2026 by rpki-client