Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IzkqhSMM-xp9OSoNY8J4RNp1Abc.roa
File: IzkqhSMM-xp9OSoNY8J4RNp1Abc.roa (raw, json)
Hash identifier: 7EbGURudlK1bQJ9nDaNSU7bi3VMaWLMQtd2VrbGEERE=
Subject key identifier: 23:39:2A:85:23:0C:FB:1A:7D:39:2A:0D:63:C2:78:44:DA:75:01:B7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019F4CC9D69E310BDE3103482AE5D60AB5A5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IzkqhSMM-xp9OSoNY8J4RNp1Abc.roa
Signing time: Fri 10 Jul 2026 16:08:43 +0000
ROA not before: Fri 10 Jul 2026 16:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 188.132.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:c9:d6:9e:31:0b:de:31:03:48:2a:e5:d6:0a:b5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 10 16:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23392a85230cfb1a7d392a0d63c27844da7501b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:e6:98:a5:7d:d1:45:93:d8:b4:3a:af:c3:
34:b5:0b:8a:97:8f:58:08:64:4e:5c:e6:81:13:69:
ec:9b:41:30:da:ac:e6:40:e7:68:a1:51:c3:35:6c:
ea:9d:23:5a:7e:30:32:4b:a3:3d:b2:37:c8:a0:76:
88:9a:c7:99:70:50:40:6f:cf:ba:b7:fa:f5:bf:fa:
5b:d4:16:48:29:d8:3a:90:e3:04:2a:8b:51:99:93:
2b:78:90:7b:a9:60:eb:48:82:bb:96:67:02:b5:2e:
ba:3e:14:16:d1:82:08:01:11:d3:fd:a3:cc:28:1f:
35:17:c9:49:88:d7:2a:4d:1f:2a:53:66:47:d7:0d:
ee:7b:ab:a1:60:16:5a:1f:15:8c:b4:64:9f:ec:40:
f4:b1:f8:7a:3d:0c:bd:55:54:a4:8a:df:ae:ad:81:
2b:91:32:84:00:40:7b:53:c2:c7:fc:17:c6:f6:db:
2a:fd:2b:4e:6c:f3:1e:f6:a3:cc:68:4f:49:ae:a0:
bc:42:f9:d4:0c:d1:6f:08:b0:60:e2:07:a4:4d:fd:
09:20:e5:5f:ee:0c:d2:7f:53:78:4d:90:f5:65:bf:
0f:86:a8:7e:3d:03:35:30:6f:5d:28:55:e2:e9:dd:
a3:17:8d:ae:6b:1e:f0:eb:81:8e:af:de:f9:bf:af:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:2A:85:23:0C:FB:1A:7D:39:2A:0D:63:C2:78:44:DA:75:01:B7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IzkqhSMM-xp9OSoNY8J4RNp1Abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.168.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9a:c5:ec:bc:4e:c2:f9:a5:42:62:51:d1:9a:91:54:4d:11:
27:6d:5b:15:5d:dd:a8:33:ca:35:c1:f3:60:25:f9:59:ea:23:
9d:ff:9b:b4:8d:ee:db:a9:19:23:6a:88:57:b8:6e:d1:cc:21:
2b:45:21:38:f9:15:ff:8d:eb:bc:dd:78:66:8a:59:3c:b3:46:
71:bb:04:38:ed:be:75:2f:0e:60:be:0b:f4:fd:2e:71:59:5b:
94:b6:1a:88:82:55:d1:4c:1f:73:6d:31:09:d6:c9:df:c1:2b:
7e:2a:7e:71:5a:a5:d0:ea:83:42:7f:2e:a7:07:fb:09:b3:9a:
f3:44:5c:b9:94:4c:37:ba:d9:41:93:b0:64:2e:a2:7a:fb:e9:
02:a4:a5:2d:69:dd:55:25:f0:88:1f:74:47:30:3d:ad:ac:98:
80:45:6a:03:a6:17:e5:0b:5e:23:20:3c:d0:f3:29:c8:97:4f:
61:13:60:4f:d0:5a:38:bc:2f:ed:ae:d6:c7:0f:95:8b:dc:f7:
a2:fb:b5:51:75:dc:09:5b:a1:a5:9f:9e:b1:a8:d8:e0:6d:ff:
10:cb:bd:25:a3:43:ce:a8:45:9a:34:de:67:79:72:ea:bf:f3:
e2:7a:eb:49:9f:7a:3a:27:8b:f3:c5:72:db:51:99:f2:66:96:
aa:d2:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:58:43 2026 by rpki-client