Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/izcSMtR2CP6vC9ibuzOb8wKm9zo.roa
File: izcSMtR2CP6vC9ibuzOb8wKm9zo.roa (raw, json)
Hash identifier: CLv83BBoCIhjPysKJSIAgq6CJ9xhv8h4wNTgdlWkw+c=
Subject key identifier: 8B:37:12:32:D4:76:08:FE:AF:0B:D8:9B:BB:33:9B:F3:02:A6:F7:3A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EEE35F77C5343FB3C39241E62FCF8B590
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/izcSMtR2CP6vC9ibuzOb8wKm9zo.roa
Signing time: Mon 22 Jun 2026 07:22:54 +0000
ROA not before: Mon 22 Jun 2026 07:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 193.5.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:35:f7:7c:53:43:fb:3c:39:24:1e:62:fc:f8:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 22 07:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b371232d47608feaf0bd89bbb339bf302a6f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:de:f8:de:55:f1:23:3f:bf:ed:31:bc:1b:26:
80:ec:ba:1a:fc:ab:7e:e6:2b:3a:ec:18:e9:08:ef:
60:f5:5b:6d:5f:59:60:47:6c:0d:15:27:62:1e:c7:
d3:05:6b:af:ee:70:78:9d:bf:71:92:f5:84:8b:d4:
8b:33:ae:b7:04:4c:87:54:7b:92:d5:a4:87:a3:fe:
42:c4:14:e9:14:de:fa:bc:05:79:cc:bd:d0:be:6a:
da:fc:8e:9f:7d:c7:41:ae:b2:ac:ea:2d:2f:8b:1c:
f0:c5:b5:ff:a1:30:80:8a:03:44:f0:08:79:42:69:
ed:f9:50:ea:43:80:2c:c8:f6:cb:b8:50:37:f0:52:
10:79:20:1d:97:22:c9:97:e8:ed:f7:29:1d:63:83:
97:84:20:f2:ad:59:0d:1e:a8:88:22:e6:74:b9:45:
81:f1:db:17:8a:1b:87:21:07:37:c7:15:fd:ce:95:
65:b3:59:15:41:50:65:ef:15:2e:aa:18:f1:59:b6:
43:8c:99:1f:54:ac:cb:f1:d1:08:51:8d:07:a7:0d:
f9:f1:ee:3f:5e:42:b1:cf:cd:c2:c4:1c:e6:ed:78:
cc:52:af:00:a7:ae:00:4e:ec:1e:59:06:90:6e:6d:
3a:74:73:56:e8:ea:8f:d5:d2:d0:9e:57:2c:97:0b:
00:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:37:12:32:D4:76:08:FE:AF:0B:D8:9B:BB:33:9B:F3:02:A6:F7:3A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/izcSMtR2CP6vC9ibuzOb8wKm9zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:bd:c7:b5:c1:03:99:71:2c:7c:26:02:35:e4:e4:36:03:c4:
17:73:ec:02:87:ee:a3:2f:1e:38:e6:93:77:76:ae:27:cb:a6:
2d:62:4c:56:14:bc:b8:c3:c9:15:8e:be:61:49:c4:13:92:22:
0c:9f:8b:a5:cb:e5:ba:17:c7:20:58:c8:77:cc:22:24:32:b2:
28:be:6c:f0:fd:2e:cd:0f:c8:17:ef:dd:cb:65:1e:fc:c5:a1:
09:41:37:f8:2a:a9:7d:f5:f0:7a:a3:ab:98:f3:9a:9a:f8:93:
45:ed:a3:22:78:af:09:11:ca:d7:ef:60:f8:ad:12:69:a5:ff:
8a:c7:2e:87:bd:2b:29:11:83:f1:6a:9a:6a:16:6e:5d:cf:ca:
ef:d8:b4:63:fa:25:bf:cd:89:ea:be:d1:5d:a1:6d:8d:f5:0c:
98:cd:39:21:34:24:16:28:89:07:ff:2b:4d:d5:02:67:c6:50:
bb:22:9d:81:02:cb:8f:61:b3:af:ad:33:bd:09:0f:10:4a:66:
b7:68:21:c9:78:45:f5:51:c4:f9:4f:69:ad:c2:a5:49:00:e7:
24:bc:4e:93:ec:88:1f:0e:fe:29:7b:c3:cb:bc:2c:e2:1b:56:
a0:b2:f9:7b:ee:bc:c9:8c:91:e6:38:c6:b4:3b:62:3c:cf:3f:
ad:28:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 06:20:15 2026 by rpki-client