Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/i-CRDxQSs4SMpnNOowHHOdZM-_E.roa
File: i-CRDxQSs4SMpnNOowHHOdZM-_E.roa (raw, json)
Hash identifier: 2MRGaPm5+e+3AoLNkg2RizvcBv9TJTibuhq4qu5iehY=
Subject key identifier: 8B:E0:91:0F:14:12:B3:84:8C:A6:73:4E:A3:01:C7:39:D6:4C:FB:F1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FB8853A0193001F7263D3A5511C4FCA42
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/i-CRDxQSs4SMpnNOowHHOdZM-_E.roa
Signing time: Fri 31 Jul 2026 14:12:46 +0000
ROA not before: Fri 31 Jul 2026 14:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 94.176.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:85:3a:01:93:00:1f:72:63:d3:a5:51:1c:4f:ca:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 31 14:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8be0910f1412b3848ca6734ea301c739d64cfbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:cc:96:5a:c3:66:52:1f:c8:67:e2:53:d1:
d2:21:03:34:c5:86:18:29:56:ba:a7:f5:79:04:49:
e4:a3:d1:7e:d5:62:73:10:fb:c9:98:20:3b:4c:f6:
99:df:f4:fa:6a:59:9d:0b:09:bf:0e:2a:66:40:d1:
01:70:6e:f9:4d:fa:65:73:94:9c:99:53:76:79:20:
e0:71:a3:11:8a:61:e6:8d:a6:1a:70:ff:80:0b:0e:
51:5e:27:96:c2:6a:15:3b:f1:27:ab:7b:b8:09:9f:
a9:96:70:df:e1:a2:8c:7b:a1:1d:f2:5e:57:fc:29:
ce:c0:61:54:b3:65:f1:e5:d7:92:35:aa:4d:da:a7:
6b:d7:80:11:8f:91:c8:ed:8b:fc:8a:95:e6:bd:5d:
db:0e:84:7d:9f:80:85:60:f5:34:07:3b:c7:4f:e1:
b0:68:4d:99:fb:2d:cf:72:d7:48:32:e3:96:f4:7f:
31:76:ec:89:0d:72:8d:99:81:77:cb:99:29:e3:83:
64:12:c9:ff:8b:69:11:2c:53:aa:d1:28:90:be:44:
2e:0c:ee:12:d4:c6:5d:06:fa:4f:2d:e2:42:ce:bf:
88:ed:f7:96:ac:84:d2:2f:6b:52:75:87:30:b8:ce:
ef:cc:61:c3:4a:f5:7d:3f:df:e9:05:b4:fd:a8:af:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:91:0F:14:12:B3:84:8C:A6:73:4E:A3:01:C7:39:D6:4C:FB:F1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/i-CRDxQSs4SMpnNOowHHOdZM-_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
44:df:ce:4b:f2:2f:12:2a:60:38:b0:90:dc:d7:66:5f:3b:ed:
33:af:ac:2b:1a:be:c2:f0:84:79:23:e7:fd:5a:1e:c2:f8:43:
93:00:69:ed:2a:73:5b:3b:dc:66:4a:86:ed:cb:4c:0e:fc:f6:
bc:57:85:3e:4f:c1:66:38:23:8c:eb:97:68:c0:49:a1:18:71:
bf:8d:15:9e:88:48:e8:79:49:4f:a8:4b:22:3b:7b:ad:74:a5:
8c:99:b9:8a:cf:b9:e2:f0:97:b9:62:3b:1c:b4:6a:74:a7:33:
80:4a:d4:53:f5:f6:24:a3:11:80:0c:1e:be:59:3a:63:a1:78:
93:e7:73:f7:ae:a1:4c:a9:66:4c:6b:14:ad:28:02:07:4e:24:
5d:f5:2b:0d:49:cc:86:d3:70:ce:92:b6:dc:93:9a:cf:bb:24:
15:3c:c4:65:2e:43:f3:a3:fc:16:14:cc:16:78:15:34:a9:6c:
b1:72:f0:06:fe:77:93:eb:b7:9e:0c:c9:14:59:5a:b3:5c:02:
47:e3:ed:b8:5b:5a:bd:e7:dd:2b:56:01:d6:aa:74:de:db:0b:
66:51:1a:d9:0f:4e:0b:1a:40:df:24:5d:86:22:89:b0:82:87:
9b:47:74:5c:ce:1e:27:63:7c:c4:90:3c:af:c8:bb:cc:10:38:
d4:5f:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:15:22 2026 by rpki-client