Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/IK7qupFPKo5U8b2FZQxtb00S8rM.roa
File: IK7qupFPKo5U8b2FZQxtb00S8rM.roa (raw, json)
Hash identifier: N7ItfGt5BNpvDAvg/Y57pDQU9zFDEcVbommGWU0npOY=
Subject key identifier: 20:AE:EA:BA:91:4F:2A:8E:54:F1:BD:85:65:0C:6D:6F:4D:12:F2:B3
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019FC122DE4692FB8617BAAB878F1D0F1D76
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/IK7qupFPKo5U8b2FZQxtb00S8rM.roa
Signing time: Sun 02 Aug 2026 06:21:55 +0000
ROA not before: Sun 02 Aug 2026 06:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209836
IP address blocks: 194.225.145.0/24 maxlen: 24
194.225.146.0/23 maxlen: 24
194.225.157.0/24 maxlen: 24
194.225.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:22:de:46:92:fb:86:17:ba:ab:87:8f:1d:0f:1d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 2 06:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20aeeaba914f2a8e54f1bd85650c6d6f4d12f2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:65:17:0e:fb:27:70:7d:aa:c4:5e:52:64:
6a:12:03:40:17:02:9e:7b:fd:69:a7:63:71:63:c6:
5f:ea:a7:e8:e1:08:69:1a:69:7b:cc:5f:6c:fb:1f:
c8:0b:bc:ba:b5:8d:33:cc:3f:3d:b2:9a:14:d7:24:
2b:1b:9b:49:53:17:e0:51:a0:f3:d5:d1:14:05:b8:
ef:83:fe:58:60:80:5e:01:24:41:0b:d8:64:01:77:
09:96:80:4d:91:bd:6f:4e:01:63:90:62:ad:96:98:
04:a5:22:d3:ec:cf:21:57:c8:1e:7c:bd:82:dc:2e:
6b:16:9a:e4:0d:f2:bd:8d:fb:d3:19:5c:46:a8:a7:
76:91:4d:8e:86:30:08:09:67:fc:0b:84:de:40:bf:
df:1a:c3:5e:59:c8:59:04:bf:df:6d:95:b2:a3:9e:
34:ac:7d:56:87:48:7c:08:a7:08:d9:a1:7a:d9:ae:
ed:00:30:b1:06:d7:75:43:3a:ee:c8:10:81:9c:d4:
a7:e9:70:ce:73:ee:0f:c9:20:c1:bc:0d:60:77:91:
ff:a8:38:54:77:b3:24:97:2e:91:10:8c:0c:32:70:
f5:66:dd:12:2e:74:2c:13:51:f2:f8:ef:49:7c:64:
22:c6:9e:22:9b:f5:be:d8:16:d6:00:0b:4a:7e:72:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:EA:BA:91:4F:2A:8E:54:F1:BD:85:65:0C:6D:6F:4D:12:F2:B3
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/IK7qupFPKo5U8b2FZQxtb00S8rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.145.0-194.225.147.255
194.225.157.0-194.225.159.255
Signature Algorithm: sha256WithRSAEncryption
65:2f:dd:08:32:54:f4:f9:16:0a:24:75:8c:0a:92:02:db:c2:
43:c1:03:f3:a9:db:dc:19:dc:83:e2:0c:d0:8c:59:37:d5:23:
1d:03:cf:45:af:34:31:20:88:ed:47:0f:15:04:5f:02:de:1f:
cd:1b:33:33:d7:38:ec:31:e1:6d:2f:0c:a5:b4:2e:4a:bd:96:
73:df:38:32:a3:98:e8:1c:74:8c:f1:13:78:2f:50:69:25:c6:
0f:a5:96:5f:97:62:19:eb:15:5a:9f:2c:77:66:14:c5:3d:3b:
54:92:c5:4d:b4:cd:14:a8:09:24:58:46:d0:7b:bd:15:f7:1c:
2c:0b:22:fe:13:c6:7b:28:a7:83:04:de:3b:92:57:cf:fa:84:
06:9c:9d:d8:10:09:ba:0f:94:9d:d8:34:be:9a:db:67:77:a6:
cc:b8:8a:47:0b:c9:c3:59:8f:11:8b:1d:4a:a3:98:30:63:a9:
f9:d1:89:00:0f:51:53:3f:4f:80:ca:d5:46:70:00:c5:54:2f:
ee:ec:b1:81:7c:22:56:df:49:8f:e7:f1:84:b2:ff:a8:a7:a6:
60:32:da:cb:f3:7f:8d:c7:50:8d:d0:05:de:94:62:7c:a8:f2:
ab:5f:44:fb:30:50:96:25:1e:dc:01:95:2a:05:5b:8e:47:b1:
43:78:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:22:55 2026 by rpki-client