Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa
File: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (raw, json)
Hash identifier: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=
Subject key identifier: 21:35:64:FC:16:D3:19:91:81:63:C8:BF:08:61:CC:F8:25:A2:D8:D9
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0AE7793F6FE0923EE2D908667AF98B374
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa
Signing time: Thu 17 Sep 2026 08:24:27 +0000
ROA not before: Thu 17 Sep 2026 08:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 165.84.231.0/24 maxlen: 24
192.145.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:77:93:f6:fe:09:23:ee:2d:90:86:67:af:98:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 17 08:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=213564fc16d319918163c8bf0861ccf825a2d8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:2d:3c:7b:0a:c7:12:54:c4:69:d2:82:c3:
4b:ff:f3:49:01:4d:41:d1:05:77:2d:5d:71:d2:56:
e2:04:42:a9:c5:28:2a:fd:89:7c:b7:9e:1f:cf:bc:
42:f7:b2:87:01:be:0e:58:48:80:bf:d0:e2:10:cc:
8f:5b:55:1e:aa:c2:45:86:d6:9e:75:61:86:4c:51:
88:f1:a3:4c:fa:7f:bc:bd:33:2c:c9:a1:f8:d8:05:
4b:e0:06:43:15:80:b9:b1:65:60:ef:bc:33:0f:a1:
f6:8b:c9:96:d4:f1:6c:8a:af:0d:ac:a5:d6:91:32:
15:d6:91:3d:ff:75:9d:02:11:a0:25:ae:ba:74:3b:
b3:99:9c:00:7c:fc:9d:b6:35:96:74:47:b3:12:6c:
82:97:83:74:e9:96:b0:36:e7:4b:a5:01:f2:f6:ce:
d8:f6:a1:98:c0:e8:cf:6f:18:31:8f:3a:c4:10:80:
40:2d:02:7f:93:b0:e0:3e:46:1f:e2:5d:90:e6:5b:
76:0c:1a:26:62:a3:fb:d8:fd:22:89:33:c0:c4:65:
3d:c9:13:91:60:78:d0:15:f8:41:5e:b3:8a:79:6c:
6a:75:1a:f3:c0:0f:d6:ad:8b:c5:ba:a8:c7:71:a1:
11:8b:89:71:00:0a:87:f1:8b:4f:71:25:ce:76:aa:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:64:FC:16:D3:19:91:81:63:C8:BF:08:61:CC:F8:25:A2:D8:D9
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.84.231.0/24
192.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b5:4b:3c:39:da:92:9f:85:28:5d:a1:c8:e8:35:91:d7:95:
5b:b0:bd:cb:30:e0:50:07:29:c3:54:32:01:6f:ff:de:8a:25:
e9:58:db:14:92:71:c7:3e:c8:08:3c:86:e8:11:82:91:5d:8e:
d5:7b:39:60:92:0f:54:df:c2:2d:4d:f9:f9:6f:2f:00:12:53:
cb:89:97:17:52:91:59:c4:7f:d4:60:71:e8:1e:1c:01:db:c6:
68:3c:34:fa:01:eb:b1:6a:f6:6c:f6:0a:fc:bd:34:c8:4b:b9:
62:50:9a:e8:8d:aa:f0:e4:71:3b:eb:b8:00:c0:99:43:25:f9:
ce:1e:2e:ad:9e:51:3f:9a:1e:f9:a2:df:9d:4e:ad:99:8a:13:
4b:c6:6c:98:47:e5:7f:36:80:51:b4:e8:82:a4:39:d3:05:45:
09:d7:0e:a9:88:62:c3:c1:95:3a:28:da:40:0f:b5:2f:8d:b4:
78:63:f5:85:f6:14:98:4f:ba:60:81:4d:ad:7b:5b:fd:08:5c:
cd:43:5f:ff:bb:e2:29:17:5c:a7:b5:b1:a6:65:a5:b8:46:19:
d1:70:cb:9d:2c:90:17:b9:6d:34:20:46:be:05:4a:77:bf:12:
07:c7:9a:8f:31:3f:6f:2b:7f:ad:16:50:c8:80:3a:55:f9:3f:
41:38:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 07:28:14 2026 by rpki-client