Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/cIzWNeNZbGQqB6PaAUfFk04qwpw.roa
File: cIzWNeNZbGQqB6PaAUfFk04qwpw.roa (raw, json)
Hash identifier: qXYjYaptAMpe3dpSUVYLnaW4A2Txz8KndGthhN4noC0=
Subject key identifier: 70:8C:D6:35:E3:59:6C:64:2A:07:A3:DA:01:47:C5:93:4E:2A:C2:9C
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 01A07F4BF93ED9B2F422CB44B543D8D6800C
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/cIzWNeNZbGQqB6PaAUfFk04qwpw.roa
Signing time: Tue 08 Sep 2026 04:34:40 +0000
ROA not before: Tue 08 Sep 2026 04:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 176.105.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:4b:f9:3e:d9:b2:f4:22:cb:44:b5:43:d8:d6:80:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 8 04:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=708cd635e3596c642a07a3da0147c5934e2ac29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:ad:3d:98:b2:73:19:a0:69:3f:0b:8c:57:
11:0a:47:89:9d:55:bd:41:10:b9:45:7e:3f:8c:b8:
65:a6:e0:da:4e:bb:19:27:63:04:66:65:18:0c:fe:
24:44:bb:da:e8:dd:72:c8:6c:0e:43:96:48:d0:c5:
9e:6a:df:1e:4d:87:09:ef:38:25:65:32:e5:d5:ff:
d2:f5:c0:40:ce:93:c7:67:0a:84:a9:ba:e1:63:16:
90:10:b5:49:22:b8:a2:a5:88:71:8f:b6:47:ab:0a:
e7:d6:7f:8e:d8:a2:f9:14:97:f7:69:9c:27:84:fc:
d4:f3:4d:58:b8:28:aa:9b:c3:0c:07:ab:0a:c3:c1:
59:e5:f4:7a:99:72:26:2c:62:b8:56:62:00:43:62:
e8:c6:bd:6f:5c:77:c0:dd:c8:f4:89:d7:0e:7b:5f:
12:85:b5:77:af:f2:53:ac:02:55:37:3c:42:91:7c:
c8:c2:00:5e:3a:0d:1e:bd:81:f7:61:3f:0f:1b:11:
bd:7c:77:07:9a:86:7c:13:ad:db:bd:af:a8:58:ba:
b8:04:2a:be:26:c0:c3:5f:1f:87:12:4f:85:7a:e5:
2d:83:f1:8e:46:78:81:c2:86:6a:a8:f8:ea:9f:52:
04:5c:45:1e:bf:e7:7c:c2:ba:27:77:64:14:c4:f1:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:D6:35:E3:59:6C:64:2A:07:A3:DA:01:47:C5:93:4E:2A:C2:9C
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/cIzWNeNZbGQqB6PaAUfFk04qwpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:00:88:bc:a1:c0:2d:87:f3:1a:3c:02:6c:65:32:57:c3:ab:
17:fe:10:52:6a:f3:4b:02:e3:eb:98:80:40:cb:93:8c:72:14:
13:c7:de:ca:9f:e8:d5:86:5b:61:d3:e1:4f:7c:6c:67:48:71:
0b:b1:ef:6f:73:a9:fb:28:c8:3c:cd:f2:47:2d:bb:77:cd:6f:
fe:64:bb:b2:35:80:3e:4d:3c:21:b3:c3:4c:83:88:39:58:b5:
9e:9b:80:59:ee:fa:32:41:87:ea:60:f2:ed:49:4f:2b:c8:cc:
92:6c:f8:0c:e7:a1:77:35:b7:21:09:8e:41:3b:8e:d5:68:ab:
8f:1f:c6:c3:cf:4c:e9:5f:33:1a:8b:34:ab:75:54:d6:d5:d2:
99:bb:49:43:cf:86:b9:d1:ea:ad:f8:40:7d:11:2b:48:94:b1:
c9:bb:a9:5c:d2:b6:03:ac:95:67:28:85:8a:3b:da:19:fc:92:
d4:d7:f4:66:a7:a3:ad:db:5b:ff:c3:9b:ef:3e:a7:d3:e6:24:
df:52:84:c3:4d:ef:25:00:08:89:96:fa:33:75:8a:3d:ab:53:
84:b1:ab:73:3b:1c:df:08:53:a5:56:d0:52:b4:05:07:3a:d6:
cc:2a:17:7d:d4:9d:ea:a6:f0:51:44:27:ec:22:8e:7c:f9:4b:
d4:f7:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:02 2026 by rpki-client