Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/IoID25YMHzy5rGEknb3wQAVRHUs.roa
File: IoID25YMHzy5rGEknb3wQAVRHUs.roa (raw, json)
Hash identifier: xjFXrUDyDmwMICYOMxUGhitt6oRwwFy1kBO+XV0ISs4=
Subject key identifier: 22:82:03:DB:96:0C:1F:3C:B9:AC:61:24:9D:BD:F0:40:05:51:1D:4B
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 019EF73AA20E60C55D24E0616A2076AEAA96
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/IoID25YMHzy5rGEknb3wQAVRHUs.roa
Signing time: Wed 24 Jun 2026 01:24:35 +0000
ROA not before: Wed 24 Jun 2026 01:24:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135377
IP address blocks: 134.168.224.0/21 maxlen: 24
134.168.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:3a:a2:0e:60:c5:5d:24:e0:61:6a:20:76:ae:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Jun 24 01:24:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=228203db960c1f3cb9ac61249dbdf04005511d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:fd:b6:8c:bb:0a:53:57:2e:86:4e:8a:82:
ee:f1:23:5d:7b:97:5a:a3:3b:3d:14:28:78:72:ce:
11:1e:39:f0:b3:40:a1:f6:8a:11:32:76:17:97:a9:
ac:54:40:24:4c:f3:1c:ca:f9:63:36:9f:e5:61:4a:
b2:12:5d:00:97:d7:4e:cb:73:fe:89:c4:1a:97:62:
77:38:29:94:f5:2f:c0:18:db:0f:57:9b:a1:21:b1:
28:0b:ad:e6:3c:a2:12:cd:49:1a:c4:cc:02:4f:81:
f4:78:4e:3a:90:e5:f8:b3:cd:77:81:86:4b:16:cd:
4f:22:6d:d4:b4:df:83:c1:39:55:c4:65:33:c4:d1:
07:29:dc:6a:99:93:c9:cb:13:65:c3:af:dc:19:1e:
9c:f3:50:6d:e9:fa:ab:b6:e1:85:6e:83:1f:bf:70:
c8:89:ad:4a:3f:35:e2:b5:0a:3b:b2:84:08:55:8d:
4a:41:cd:ff:1b:11:19:d7:3a:41:b8:af:4a:0b:98:
27:af:fb:2c:b1:e7:71:d3:49:02:2c:f5:97:2c:c2:
92:c5:ff:8c:18:f7:c8:af:54:8f:07:f6:5e:b7:a1:
7a:74:49:96:aa:bf:4b:c6:be:34:0a:dc:14:9b:a3:
38:65:91:a4:29:7b:ee:d1:b7:ee:7b:d2:24:cf:87:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:82:03:DB:96:0C:1F:3C:B9:AC:61:24:9D:BD:F0:40:05:51:1D:4B
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/IoID25YMHzy5rGEknb3wQAVRHUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.224.0/21
134.168.240.0/20
Signature Algorithm: sha256WithRSAEncryption
19:a8:08:db:94:7a:cc:7f:34:d0:f9:29:b5:b8:e1:fe:45:eb:
0e:7f:82:77:4b:27:8b:a0:6d:b1:80:d3:47:2f:2e:f7:83:21:
f1:d8:8f:cf:dd:c8:f0:69:2b:83:2c:f2:08:3f:68:29:1c:72:
2d:98:54:57:ba:6b:77:32:b3:54:cf:f6:d0:a0:5a:bb:e3:60:
a0:14:22:d1:24:10:f5:7e:70:44:c3:2b:b9:69:d8:22:ed:83:
9c:50:ef:ec:f5:dc:48:ad:75:fd:db:a2:1d:dc:b9:20:1c:53:
b4:8d:b7:2f:ff:94:a2:a9:a8:fc:6f:70:78:d8:28:6f:58:42:
f6:c7:f4:4d:4f:93:0d:23:af:0c:40:f5:0a:65:51:70:c3:72:
a6:64:fa:0f:7d:87:5b:44:6c:dd:e2:dc:25:f3:f9:09:f2:24:
d0:5f:2a:69:b7:f8:04:12:a3:f8:98:bc:76:31:cb:86:24:ae:
2d:a3:e0:6b:d9:71:c6:a2:bd:19:c5:d7:08:33:a6:6b:5e:6a:
cc:2b:6e:8e:54:29:1a:a9:e8:6c:e8:43:4e:b8:b4:19:6d:db:
33:d5:a3:58:30:a8:ce:3c:c5:5d:93:68:0c:de:cf:73:d3:e8:
90:54:56:8c:01:23:d3:53:c2:5f:7d:15:15:7f:82:9d:cb:71:
91:c7:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:37 2026 by rpki-client