Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/izUqOzkgV80kX13uodr4HRwOgCk.roa
File: izUqOzkgV80kX13uodr4HRwOgCk.roa (raw, json)
Hash identifier: 5mRb3lHKYzDHswUR2bwMvvBTVHkJPpANvR5EfHuWzzg=
Subject key identifier: 8B:35:2A:3B:39:20:57:CD:24:5F:5D:EE:A1:DA:F8:1D:1C:0E:80:29
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019ED080680501CB5E233FCD0833181D1A77
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/izUqOzkgV80kX13uodr4HRwOgCk.roa
Signing time: Tue 16 Jun 2026 12:55:36 +0000
ROA not before: Tue 16 Jun 2026 12:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.111.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:80:68:05:01:cb:5e:23:3f:cd:08:33:18:1d:1a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 16 12:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b352a3b392057cd245f5deea1daf81d1c0e8029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:48:75:cc:7c:3d:ef:09:7c:99:c8:fc:61:
a0:fe:e2:9c:52:42:80:35:de:9c:09:78:e6:d4:c4:
28:16:5d:09:b2:26:2e:72:b0:a1:60:dc:81:a5:1a:
1b:f4:2b:e2:bd:69:7e:9f:ad:5b:a9:95:97:48:72:
d1:ba:83:fc:cd:8a:51:ab:c3:04:56:b5:1b:e4:ff:
cc:ba:b6:55:07:41:3a:80:3c:02:c1:b4:36:9f:01:
bb:ca:d2:7d:23:d6:92:8c:6d:ad:f4:08:43:f2:60:
98:11:ac:b7:d7:6c:5f:d1:68:24:6f:9f:06:88:ea:
d8:60:d1:85:0c:36:c5:d0:a7:bc:c6:03:f1:08:a2:
40:da:8c:d1:8d:6f:61:39:e4:26:f5:02:ce:34:c8:
20:37:a4:91:d3:18:b2:ca:a9:94:c4:fe:3d:93:2b:
99:c7:31:63:7e:e5:d2:b4:91:2e:43:41:be:de:49:
22:39:74:9a:b6:4d:10:42:0c:50:9a:85:59:21:02:
ab:ae:87:e4:67:02:c1:d5:c7:c6:65:a8:16:20:00:
4a:fb:93:eb:fc:23:ea:1e:48:4b:2e:f0:1a:2f:51:
83:78:0e:91:3f:78:63:af:67:f2:c1:53:e2:a1:52:
2d:20:6d:e2:97:71:1b:68:89:af:97:54:af:28:43:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:2A:3B:39:20:57:CD:24:5F:5D:EE:A1:DA:F8:1D:1C:0E:80:29
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/izUqOzkgV80kX13uodr4HRwOgCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.40.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:9c:63:3f:3d:09:9f:35:d7:68:7c:75:b0:58:a8:c3:20:3a:
7e:7d:70:0e:59:f6:47:c5:f3:61:05:a2:8a:fb:d0:6f:35:2e:
64:68:27:0c:f5:7c:7b:3e:34:23:40:41:a7:29:c1:82:c4:dc:
12:34:97:e8:2b:f3:5c:e9:f3:7d:c5:4a:da:5e:d5:9a:b1:56:
58:43:f8:8a:32:fe:85:b4:bb:b2:5c:ce:eb:e3:0c:dd:f1:2e:
d1:a4:44:bd:dc:67:13:a6:46:66:86:f3:d2:bf:b3:72:73:63:
cd:6c:41:95:d9:35:4e:61:76:24:55:a4:ac:f9:db:17:64:3c:
a6:82:c9:8e:46:27:62:0f:4c:83:83:ff:8f:e6:c1:0d:bf:ee:
d6:37:e3:ae:6a:5d:05:cd:3d:2d:8d:1f:d9:f5:db:c2:3f:6c:
ce:eb:45:3e:ab:3a:fe:f2:f9:d1:31:78:47:08:f0:5c:c4:c3:
be:04:e1:24:0a:d8:e7:1e:9d:1d:89:c4:fd:08:57:bd:3a:32:
14:d7:85:49:9f:3b:b7:ce:69:bb:88:2a:33:b2:19:b9:86:af:
f2:aa:c3:b2:da:41:38:5b:80:f1:87:76:57:1b:94:38:ba:84:
8e:1b:42:70:c7:bd:c7:74:cc:22:d7:82:54:33:e8:90:1d:30:
ae:5f:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:49 2026 by rpki-client