Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iVOJwfjrckvsZ8mKsIFrKWfnAG4.roa
File: iVOJwfjrckvsZ8mKsIFrKWfnAG4.roa (raw, json)
Hash identifier: g9n3B+Iv2rqbFv7yHig5Y6omxT+Zp8CCYcdRTrlJ7A4=
Subject key identifier: 89:53:89:C1:F8:EB:72:4B:EC:67:C9:8A:B0:81:6B:29:67:E7:00:6E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E84ED5845E1D232423CACD17F1073852
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iVOJwfjrckvsZ8mKsIFrKWfnAG4.roa
Signing time: Mon 28 Sep 2026 13:57:55 +0000
ROA not before: Mon 28 Sep 2026 13:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213296
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:4e:d5:84:5e:1d:23:24:23:ca:cd:17:f1:07:38:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 28 13:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=895389c1f8eb724bec67c98ab0816b2967e7006e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:a7:44:04:d7:1c:10:2e:f0:c4:68:39:4c:
2e:d5:c3:48:50:19:e3:63:c3:c0:b3:aa:af:0a:ee:
3f:d4:3a:73:21:36:74:3a:0d:f0:67:5a:64:db:ff:
0d:ff:19:f3:81:c2:28:06:8f:af:1a:f9:ed:46:b0:
e7:d1:e7:68:0f:71:e3:52:ff:ee:21:a6:14:b1:51:
ff:31:db:67:b8:d8:89:42:c2:8f:78:79:6b:f4:30:
bb:c2:dd:63:6c:c6:6b:4f:9d:ad:8f:09:08:09:80:
34:cc:60:ad:d7:c8:12:49:28:94:33:a2:84:09:af:
62:18:24:27:b2:d9:56:ad:46:90:7a:df:62:40:a3:
fa:71:d1:e7:0a:70:bb:c0:fe:a6:49:ec:7b:3a:7c:
11:3c:15:b9:c9:a4:e7:19:61:19:24:de:73:17:06:
85:62:4f:55:6b:c7:4b:79:f9:95:8d:08:83:1a:3f:
74:54:80:66:f8:d3:19:46:02:24:f8:42:02:96:f1:
4b:a3:d0:8e:47:07:a2:98:1f:ec:34:18:c3:ec:fb:
c0:78:a6:9d:88:ba:84:9e:81:2b:64:8e:61:ff:78:
9d:2e:07:d3:28:36:3a:e8:06:ad:fd:65:2c:12:09:
ac:df:d8:92:b7:f1:da:6d:37:ab:ec:1e:52:98:30:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:89:C1:F8:EB:72:4B:EC:67:C9:8A:B0:81:6B:29:67:E7:00:6E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iVOJwfjrckvsZ8mKsIFrKWfnAG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.133.0/24
Signature Algorithm: sha256WithRSAEncryption
70:21:dd:b7:dd:37:d8:84:34:4d:dd:de:01:10:67:21:da:d6:
26:bb:0f:de:6a:d4:1a:44:0d:09:bd:02:6f:5f:ba:c1:67:e1:
b5:6b:74:d4:33:53:84:23:8b:02:32:83:56:53:f1:62:98:2d:
d9:7e:37:d4:fa:7d:39:90:22:83:e6:ed:65:33:98:a6:f3:8e:
44:32:eb:b2:73:d7:1b:22:35:ff:9c:08:32:40:f6:72:70:24:
c8:f9:69:03:24:01:f3:41:ee:09:5d:aa:d6:61:f5:4e:1c:1d:
bf:f2:e6:13:73:ba:39:46:d2:a4:ae:ff:e1:ef:67:60:64:3d:
82:62:25:6e:70:57:12:b1:4f:eb:9d:20:0d:a7:3a:65:89:35:
99:6a:b1:eb:75:a0:9f:1e:75:ad:09:94:ed:4e:67:de:3c:46:
ad:5e:b2:ad:7c:b2:b3:3b:a8:e2:ab:7e:8d:32:6a:ef:c7:d8:
69:bc:dc:c8:e5:35:b8:45:46:cb:15:f7:28:10:7a:06:40:ac:
58:3d:a6:64:b9:aa:27:8b:39:a3:45:45:66:33:52:05:7a:a3:
51:d4:e7:e8:b1:2d:34:94:7a:9a:10:9b:32:28:d6:7a:ef:3a:
6f:35:8d:70:95:44:b5:c6:e5:e6:c5:22:64:92:3d:88:3e:62:
45:d1:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:56 2026 by rpki-client