Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/I2IDNHEAzEnkJIkoSI1vI-LORTY.roa
File: I2IDNHEAzEnkJIkoSI1vI-LORTY.roa (raw, json)
Hash identifier: ocJqeM3+yT1SlC8JHr3YJAhHyKsPm1741QN/tH9n+4c=
Subject key identifier: 23:62:03:34:71:00:CC:49:E4:24:89:28:48:8D:6F:23:E2:CE:45:36
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019F23693AF994A501131245D8671E3A3309
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/I2IDNHEAzEnkJIkoSI1vI-LORTY.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215023
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3a:f9:94:a5:01:13:12:45:d8:67:1e:3a:33:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=236203347100cc49e4248928488d6f23e2ce4536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:a1:1f:85:7e:9b:37:99:00:e4:6a:db:ba:
6e:94:49:e0:7f:5b:ed:47:43:6d:03:15:18:36:c2:
1d:8c:d3:10:4e:66:5b:55:73:a9:93:46:ea:ef:84:
fd:eb:15:95:5c:96:80:56:63:23:65:c8:11:a7:52:
c2:22:b4:be:17:b8:29:44:b0:af:3b:12:a4:b5:39:
ad:5c:37:8e:4b:04:39:a0:75:9f:a2:05:5c:e7:60:
bb:99:7c:cf:0a:cd:bb:36:90:e8:ca:c6:12:74:84:
b8:56:45:f7:ce:98:83:06:49:0d:cb:66:3c:d5:9e:
77:f9:cc:18:4f:b7:d2:a9:4c:fa:73:c8:6f:32:11:
d5:52:c9:b4:43:18:2b:c6:d3:7b:68:c0:84:75:80:
0d:2c:09:b0:a9:39:58:e3:8e:a0:93:ce:27:af:96:
93:6f:4b:26:9f:ff:dd:cb:c7:08:6d:31:79:c0:7c:
e2:c1:f2:e3:7d:35:94:36:37:08:30:60:05:27:da:
ba:33:9c:b3:da:43:cc:6a:2c:ac:4a:2f:b7:af:a0:
23:27:68:76:9a:50:25:06:0a:32:80:98:57:46:50:
b4:eb:09:37:59:0f:d0:8e:e8:03:bb:a8:28:a2:8d:
98:45:22:c3:dc:e0:b8:29:2c:d7:e5:4a:d4:0c:43:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:62:03:34:71:00:CC:49:E4:24:89:28:48:8D:6F:23:E2:CE:45:36
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/I2IDNHEAzEnkJIkoSI1vI-LORTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:d1:c8:bd:0a:43:fd:e3:29:f3:e0:36:56:8e:5d:84:d6:5f:
4a:bf:a3:40:ba:95:0d:e9:50:f0:30:a0:5a:75:fd:08:f9:57:
de:0b:cd:f6:98:78:26:45:3d:90:f1:a2:3e:16:79:15:94:fe:
b2:3d:8a:b3:15:67:c1:64:cf:e5:45:84:f7:5b:4d:bc:b7:78:
0a:47:e4:18:aa:18:d8:bc:e3:e5:9b:d4:82:35:61:a7:63:e1:
1a:ed:4e:74:fa:55:50:02:f0:d0:bf:90:67:39:fd:19:35:64:
c6:1d:95:d4:77:56:46:95:59:de:1b:81:50:c0:44:3e:de:83:
73:6a:c4:f2:5e:af:b4:38:99:aa:09:43:dc:30:9f:fd:a8:9a:
06:ee:88:3e:48:c7:88:64:06:2c:f6:2c:f0:6b:65:33:1c:0e:
de:60:ed:6c:25:fc:41:33:a0:d9:30:95:bd:25:a9:77:d8:1a:
79:70:18:48:46:25:58:4d:28:67:3c:49:e1:dc:75:4f:88:27:
3f:6e:02:2b:7a:51:1c:fb:fd:16:21:51:33:1c:63:6e:8d:7e:
0d:e8:86:8d:2b:ec:16:c0:b6:4e:88:5d:47:56:37:1b:78:fc:
50:63:47:9f:6a:c1:15:04:60:2e:13:fd:df:0b:f8:3b:c2:dc:
94:9c:87:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTr5lKUBExJF2GceOjMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODZlOWYwODg0OGU0ODBiMWYzZTlhOWMwNmE4MzJkNDhj
ZTM3YWQwHhcNMjYwNzAyMTUxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzYyMDMzNDcxMDBjYzQ5ZTQyNDg5Mjg0ODhkNmYyM2UyY2U0NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumWhH4V+mzeZAORq27pulEngf1vt
R0NtAxUYNsIdjNMQTmZbVXOpk0bq74T96xWVXJaAVmMjZcgRp1LCIrS+F7gpRLCv
OxKktTmtXDeOSwQ5oHWfogVc52C7mXzPCs27NpDoysYSdIS4VkX3zpiDBkkNy2Y8
1Z53+cwYT7fSqUz6c8hvMhHVUsm0QxgrxtN7aMCEdYANLAmwqTlY446gk84nr5aT
b0smn//dy8cIbTF5wHziwfLjfTWUNjcIMGAFJ9q6M5yz2kPMaiysSi+3r6AjJ2h2
mlAlBgoygJhXRlC06wk3WQ/QjugDu6gooo2YRSLD3OC4KSzX5UrUDEOaEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNiAzRxAMxJ5CSJKEiNbyPizkU2MB8GA1UdIwQY
MBaAFLKG6fCISOSAsfPpqcBqgy1IzjetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2Yt
NDYwMTY4MDE3M2FhLzEvSTJJRE5IRUF6RW5rSklrb1NJMXZJLUxPUlRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2YtNDYwMTY4MDE3M2Fh
LzEvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyLSgMA0G
CSqGSIb3DQEBCwUAA4IBAQCu0ci9CkP94ynz4DZWjl2E1l9Kv6NAupUN6VDwMKBa
df0I+VfeC832mHgmRT2Q8aI+FnkVlP6yPYqzFWfBZM/lRYT3W028t3gKR+QYqhjY
vOPlm9SCNWGnY+Ea7U50+lVQAvDQv5BnOf0ZNWTGHZXUd1ZGlVneG4FQwEQ+3oNz
asTyXq+0OJmqCUPcMJ/9qJoG7og+SMeIZAYs9izwa2UzHA7eYO1sJfxBM6DZMJW9
Jal32Bp5cBhIRiVYTShnPEnh3HVPiCc/bgIrelEc+/0WIVEzHGNujX4N6IaNK+wW
wLZOiF1HVjcbePxQY0efasEVBGAuE/3fC/g7wtyUnIeK
-----END CERTIFICATE-----
Generated at Tue Jul 7 04:27:10 2026 by rpki-client