Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iSpsKwOT5TBhfOXhuVD6iXs8160.roa
File: iSpsKwOT5TBhfOXhuVD6iXs8160.roa (raw, json)
Hash identifier: SXvVHmIbg18BO7QvVRouxYaSHj7PwEr/Qjq6ne9PpQQ=
Subject key identifier: 89:2A:6C:2B:03:93:E5:30:61:7C:E5:E1:B9:50:FA:89:7B:3C:D7:AD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A09C5233B59B000B83CCEC843CDF352743
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iSpsKwOT5TBhfOXhuVD6iXs8160.roa
Signing time: Sun 13 Sep 2026 19:50:27 +0000
ROA not before: Sun 13 Sep 2026 19:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 80.253.249.0/24 maxlen: 24
84.21.189.0/24 maxlen: 24
195.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:52:33:b5:9b:00:0b:83:cc:ec:84:3c:df:35:27:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 13 19:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=892a6c2b0393e530617ce5e1b950fa897b3cd7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:55:3c:34:99:8c:3f:6f:0a:db:33:f2:b1:
70:61:1f:6d:1d:ff:02:0b:45:dc:15:9d:da:be:5b:
ae:25:db:90:79:d0:b8:6c:61:54:47:5a:b4:13:65:
41:af:9d:79:7f:56:e4:57:09:cc:53:da:a6:ee:15:
b9:11:1a:db:4d:fa:25:05:ff:61:51:65:92:47:cb:
5e:35:53:c8:14:fd:3c:89:3a:70:89:59:0c:3b:af:
8f:e1:f3:59:d3:41:83:f7:b6:b5:bb:a0:1a:82:c4:
4c:22:25:56:df:11:f9:64:3d:76:e7:db:39:d8:7b:
aa:93:06:e8:94:e3:d9:48:cc:68:4b:9c:3b:5e:fe:
d2:95:a5:46:e2:f6:b1:aa:fb:86:7c:a0:cd:66:4f:
f0:8a:0b:44:eb:8a:c2:82:0b:c1:8a:73:31:15:ed:
cf:6c:34:07:23:06:0e:fb:78:31:53:05:ff:55:41:
20:13:4a:d8:5d:63:2c:14:bb:a6:c6:33:13:1f:29:
3b:b6:37:30:60:54:3b:b2:db:dc:ad:b6:7f:c3:6f:
9b:f2:06:ff:89:99:b3:3e:57:cc:2a:97:b8:e2:9a:
f6:f8:8f:79:fb:55:55:aa:91:1d:94:8c:8e:8a:04:
e3:89:99:6c:61:2f:d0:75:f7:26:86:c4:e4:de:b5:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2A:6C:2B:03:93:E5:30:61:7C:E5:E1:B9:50:FA:89:7B:3C:D7:AD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iSpsKwOT5TBhfOXhuVD6iXs8160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.249.0/24
84.21.189.0/24
195.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
15:78:01:31:f1:43:32:19:0d:99:e6:8b:c6:56:89:79:d8:40:
ad:b5:ec:86:d1:83:74:fd:e8:ab:bd:47:c4:72:b1:8d:ae:32:
ae:41:3b:f4:0b:c5:5c:ca:f2:c0:26:a0:b1:4c:00:9c:a5:9e:
02:da:ef:ee:11:1d:42:c1:d8:3f:02:46:46:67:9e:39:3f:e8:
1b:ff:8d:c2:27:95:30:fb:28:1f:83:ee:34:3f:67:cd:f0:6c:
62:ac:8d:f3:88:cc:34:e1:ba:75:a5:0c:9a:f1:8f:41:f1:b5:
2e:4a:5d:32:7c:da:3e:9c:8c:02:20:86:78:b1:48:6c:af:68:
39:77:ab:94:9d:18:82:9b:3d:76:bc:75:a2:32:9b:bd:49:4f:
f1:ac:16:64:7c:d2:2c:59:27:e0:1f:be:2b:4e:6b:fd:c7:cd:
e2:71:53:67:a0:63:4b:4d:cb:4e:c3:a4:ed:a6:cf:c6:b8:e0:
ae:52:03:eb:be:bf:a1:e6:5e:79:99:4f:13:4c:1e:23:28:ae:
a7:34:eb:b8:d9:60:02:de:ad:57:90:d5:8e:02:11:a2:92:97:
9f:d9:86:6e:2c:0c:50:d3:9e:84:df:20:61:c7:bc:24:74:0b:
19:a3:18:99:0e:df:41:e3:ca:26:20:30:5f:23:28:44:8c:8a:
9c:2a:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:31 2026 by rpki-client