Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/IcStMh3qfqMxRhlSwoJxmb3sqn0.roa
File: IcStMh3qfqMxRhlSwoJxmb3sqn0.roa (raw, json)
Hash identifier: FxybsSlnWi5eoIGzR2S42UkGan7DQjuWiTbL90v+mcU=
Subject key identifier: 21:C4:AD:32:1D:EA:7E:A3:31:46:19:52:C2:82:71:99:BD:EC:AA:7D
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019FD0DE469DDF2926E66F876A880E063EAB
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/IcStMh3qfqMxRhlSwoJxmb3sqn0.roa
Signing time: Wed 05 Aug 2026 07:40:55 +0000
ROA not before: Wed 05 Aug 2026 07:40:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219061
IP address blocks: 194.226.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:de:46:9d:df:29:26:e6:6f:87:6a:88:0e:06:3e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Aug 5 07:40:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c4ad321dea7ea331461952c2827199bdecaa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:d7:25:4a:b2:55:9c:25:15:84:a5:e4:a2:
37:e1:8a:f6:28:40:a7:cd:e6:fe:7e:5b:7b:9d:1e:
6e:2c:8c:6e:69:24:1e:9e:27:df:2e:25:4b:85:f9:
34:ad:d6:fc:0b:57:24:f4:47:28:41:4f:ce:5b:d9:
c9:7f:b7:dc:6f:4c:df:d4:4e:1c:a5:f9:0a:84:4a:
3c:09:ef:5b:17:a4:eb:9d:01:8a:0f:0a:1b:a9:e5:
a9:d8:02:59:1a:95:bd:43:f1:09:a2:09:93:f7:30:
01:fa:ee:23:0b:ae:b4:56:0b:98:6b:f9:62:29:31:
5d:eb:5d:70:0b:6e:b6:a9:52:74:55:cb:23:02:cc:
ef:a1:31:18:51:4d:6f:78:8b:86:ad:7a:30:cf:0e:
94:41:78:96:7d:d8:03:25:7e:01:23:7e:e3:7b:77:
11:b1:e4:14:04:b9:1a:bf:08:ad:fe:d3:46:48:03:
ae:fc:38:fd:6b:e4:06:e9:83:ea:ac:a3:43:1c:5e:
7e:d6:c9:d7:0a:35:e4:21:fc:f6:bc:f9:cf:38:ee:
9f:97:c7:82:ff:c4:f1:eb:09:8f:ba:8d:f7:e0:bb:
4c:5a:9c:44:df:f3:67:e1:6f:81:09:95:c0:92:cc:
26:c5:8b:5a:ab:08:e3:1f:5d:f0:e8:25:0a:1e:33:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C4:AD:32:1D:EA:7E:A3:31:46:19:52:C2:82:71:99:BD:EC:AA:7D
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/IcStMh3qfqMxRhlSwoJxmb3sqn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.54.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e5:18:1d:87:b7:85:01:1e:b4:fb:bb:93:fe:5a:18:24:3b:
f6:d1:f8:c3:fb:36:a1:00:ed:30:6b:13:ff:5a:a6:8d:46:89:
4c:6d:f8:6c:f9:ab:20:19:ff:2b:63:aa:ac:8e:5e:9e:48:50:
ba:8e:89:f1:09:ca:62:4e:0f:88:75:2a:13:39:e1:f4:ae:3f:
fd:12:9c:94:03:49:92:78:57:94:ba:1f:f4:3c:46:a7:c0:a5:
23:b6:55:d1:0c:cd:0b:8a:f1:33:23:0a:17:08:c0:02:b3:78:
d9:13:04:77:e0:c9:5d:45:3d:2a:b8:65:07:c3:e7:ea:3a:0b:
21:d9:ae:72:4f:61:44:b3:f2:18:b3:cb:40:75:d6:32:74:bb:
e9:b1:7b:e4:4b:cf:cb:62:e2:45:6b:d9:84:75:7f:28:fb:ce:
96:28:03:62:b5:39:35:75:09:f8:b9:12:a9:7b:a8:3d:74:77:
33:d5:b3:44:4e:a2:8e:9e:e7:25:cc:f8:2c:25:35:e9:eb:a1:
28:2a:e2:31:0f:de:1e:f1:37:08:cf:b7:76:70:c9:2f:8a:d4:
2e:a6:40:18:5c:55:6d:04:30:3a:7f:8b:9e:12:2f:d1:62:9f:
0e:4f:01:69:64:51:bd:47:ae:ca:28:28:27:89:7e:38:cb:ba:
92:ac:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:38:17 2026 by rpki-client