Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/tiI7vvoUqolgyzPDovmX9c0mpRI.roa
File: tiI7vvoUqolgyzPDovmX9c0mpRI.roa (raw, json)
Hash identifier: BWUsIbZavAj4l9SYReNczwQtyPIorW+abrKqD7qWMPA=
Subject key identifier: B6:22:3B:BE:FA:14:AA:89:60:CB:33:C3:A2:F9:97:F5:CD:26:A5:12
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019F23693CAEB5694008DD68B2A5C24577D6
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/tiI7vvoUqolgyzPDovmX9c0mpRI.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402628
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3c:ae:b5:69:40:08:dd:68:b2:a5:c2:45:77:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6223bbefa14aa8960cb33c3a2f997f5cd26a512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:74:ed:35:6f:4f:97:55:1d:9a:3b:d4:4c:
ec:db:4b:04:c8:99:44:87:85:56:10:96:c0:a1:29:
24:01:62:59:15:da:24:29:9e:df:b7:71:d0:f9:48:
1c:82:b0:3b:62:e9:ce:95:0d:cd:fc:47:e7:50:8a:
26:a2:ec:2d:4a:3c:eb:80:3f:89:a1:79:a7:d4:a8:
4a:06:d9:2c:6b:82:d7:b2:bf:75:05:f2:3c:de:76:
60:2f:74:4c:f2:c3:34:e2:25:67:13:8a:0e:ce:74:
2b:ce:c6:59:bf:00:bc:da:a1:54:3c:27:71:c1:09:
31:9f:e8:55:6f:d4:e3:36:26:c3:76:96:40:c9:fa:
70:25:dc:e4:98:cc:7c:3e:ca:5e:4b:0c:4a:af:2a:
12:f6:c6:e5:6b:d5:9d:80:2b:4f:f4:a7:a9:7d:1f:
ee:71:59:bf:c6:de:f8:50:f1:ea:d8:16:58:7c:01:
c3:ef:cf:3f:55:46:d7:a3:2a:d5:06:cc:38:16:1c:
b1:5a:18:a6:d0:ef:e4:fa:63:6d:d1:15:82:7c:b6:
1e:0b:80:3b:6e:9f:0d:ed:94:53:99:fd:0a:5f:d2:
76:11:49:81:80:7a:c0:06:4e:da:6d:d4:67:d5:a0:
43:bd:2b:18:af:7f:8d:49:49:17:29:fc:e8:01:17:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:3B:BE:FA:14:AA:89:60:CB:33:C3:A2:F9:97:F5:CD:26:A5:12
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/tiI7vvoUqolgyzPDovmX9c0mpRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:88:0f:7a:ba:67:8f:4d:8e:2c:8d:d5:0a:79:0b:08:99:ee:
a7:33:57:b0:25:39:09:37:9c:ef:d6:08:77:fd:58:72:ed:ad:
3d:b2:cb:78:fa:5d:c6:fe:e2:94:e2:7c:3b:38:d6:2b:9e:8a:
4c:ec:3d:42:a8:83:c4:c5:1c:d6:24:bf:4d:91:aa:ec:d8:05:
f1:9c:1c:c5:cc:62:de:7c:5e:fa:fe:30:ed:33:27:5d:3a:e7:
2a:19:98:27:54:7a:a8:26:f9:74:bb:ee:a1:7c:f2:fe:d3:65:
74:7e:f1:05:56:49:5f:f4:4f:f8:61:99:a5:95:52:36:e3:c1:
c6:72:15:f5:c3:91:05:61:b1:93:8b:f7:b4:51:32:3e:7f:d2:
9f:ec:d7:40:60:c4:39:16:3d:25:59:97:05:5a:d8:5e:32:20:
e7:de:51:a9:e3:34:c4:d6:37:9b:fb:0d:7c:f1:d3:af:ee:6d:
e7:ac:11:18:68:bf:3b:16:af:73:71:02:1c:fc:c9:1b:3a:c0:
42:34:eb:54:77:cf:db:9a:85:65:75:af:94:57:0c:b1:1d:0d:
7e:2f:93:b5:0e:17:65:fb:45:0a:f3:20:47:96:cd:ad:3f:ed:
b5:d9:a2:1c:6d:4d:ac:7e:8f:e2:2b:00:38:23:2d:52:61:57:
e6:84:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:29:55 2026 by rpki-client