Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/N--Iz9tMy9gj-ddlZFLeQtSAkl4.roa
File: N--Iz9tMy9gj-ddlZFLeQtSAkl4.roa (raw, json)
Hash identifier: eRQlu4WX3xV77iXU1Ih0oYvgX/ebwSlxVmcJ8psGbBE=
Subject key identifier: 37:EF:88:CF:DB:4C:CB:D8:23:F9:D7:65:64:52:DE:42:D4:80:92:5E
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 01A00AD77603952D0CA77632BB5A405E41D2
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/N--Iz9tMy9gj-ddlZFLeQtSAkl4.roa
Signing time: Sun 16 Aug 2026 13:51:27 +0000
ROA not before: Sun 16 Aug 2026 13:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198092
IP address blocks: 62.129.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:d7:76:03:95:2d:0c:a7:76:32:bb:5a:40:5e:41:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Aug 16 13:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37ef88cfdb4ccbd823f9d7656452de42d480925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:cd:8d:41:15:44:03:28:e1:46:aa:d3:d1:
ba:5c:ef:73:cb:a2:7f:a8:41:40:6a:32:e8:5a:a5:
c6:18:ac:2b:43:2d:be:a1:c7:69:ab:70:74:aa:7d:
28:91:9c:1d:19:da:64:aa:03:2d:7c:38:79:c4:90:
d0:27:a5:cd:96:f3:ac:fd:a3:34:70:1b:f0:36:8d:
3f:f1:aa:bf:17:d0:39:65:3e:d0:fc:6b:e8:1b:73:
47:90:10:8a:c3:f3:c5:32:6f:4b:14:f6:cf:31:85:
7a:78:df:d4:6e:57:ba:b1:73:c6:00:bd:0e:b3:10:
82:5d:06:03:64:87:22:20:aa:e7:0e:54:22:6e:95:
94:5e:19:ea:1a:f4:61:d9:bd:90:e8:9f:e8:bc:5d:
48:77:82:ce:f7:64:8d:74:8c:c7:8d:19:ee:a0:2f:
1c:30:76:b1:3a:d4:e6:95:e3:60:55:4f:bc:f1:41:
8e:cd:66:3c:87:35:a9:7d:2c:e7:c5:4b:eb:37:97:
87:5c:cb:54:36:ec:11:3a:de:fe:b8:97:04:b0:f0:
15:4f:9c:32:06:c1:59:f7:a8:fe:f1:94:3c:06:33:
25:82:bd:db:63:6c:59:48:e9:80:dc:0a:66:5b:45:
84:bb:94:15:8f:bf:c4:aa:04:93:7c:94:a8:83:4c:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:88:CF:DB:4C:CB:D8:23:F9:D7:65:64:52:DE:42:D4:80:92:5E
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/N--Iz9tMy9gj-ddlZFLeQtSAkl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f9:8d:91:f3:e2:fc:6c:35:c8:01:74:51:32:de:db:a5:15:
e5:ed:d3:92:a3:31:48:c7:47:07:30:e9:a8:93:b6:7e:b2:66:
3e:c3:2f:76:1a:ef:c7:59:ea:eb:19:23:60:7d:d7:be:6d:38:
e1:74:3c:e8:dd:9b:27:64:25:8f:bf:4f:ab:92:63:ad:fa:a5:
ab:c2:70:68:0c:26:bb:a1:9e:e9:de:6d:6e:5c:53:e5:fb:70:
81:a5:8f:ce:c4:58:10:53:8d:9f:47:0c:81:95:ec:50:43:3e:
f3:e2:a3:db:fc:29:8d:20:62:c1:2a:2c:5c:97:02:90:9b:db:
6a:65:63:84:6f:53:e4:1a:d3:9b:07:4b:2b:2c:a4:78:58:2b:
a2:d3:1b:03:ac:a6:74:68:b6:a3:33:a9:d4:73:5d:e9:c6:39:
9c:a5:41:8e:0a:9e:d9:2a:43:67:39:fe:da:1a:eb:b0:ec:c6:
e8:52:76:a1:79:44:77:bc:72:09:11:e3:c9:61:20:b1:fa:ec:
1f:13:a6:45:b3:ee:b6:92:8c:72:b8:23:09:ad:11:d4:b6:95:
dd:e5:a0:60:c4:5d:e4:83:d3:27:08:bf:60:f8:c5:01:56:8f:
9a:01:9b:67:1f:46:7a:4f:43:30:a9:c3:3d:f4:27:d2:13:83:
b6:c6:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:44 2026 by rpki-client