Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8ibEzGYC_BTI1g58Tu1WOL-qNZM.roa
File: 8ibEzGYC_BTI1g58Tu1WOL-qNZM.roa (raw, json)
Hash identifier: EIJMNsMizaamJfzx7qfGvaiea+OVmNTaMICsPwjNf4c=
Subject key identifier: F2:26:C4:CC:66:02:FC:14:C8:D6:0E:7C:4E:ED:56:38:BF:AA:35:93
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019E5EA8718F0552756529DE3E7FEF7BEA6F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8ibEzGYC_BTI1g58Tu1WOL-qNZM.roa
Signing time: Mon 25 May 2026 10:22:37 +0000
ROA not before: Mon 25 May 2026 10:22:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202817
IP address blocks: 192.71.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:a8:71:8f:05:52:75:65:29:de:3e:7f:ef:7b:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 25 10:22:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f226c4cc6602fc14c8d60e7c4eed5638bfaa3593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:55:ad:be:28:9a:93:e0:6b:8c:b2:0c:55:
e2:42:55:17:fc:12:56:4d:97:66:c4:46:1c:ee:a8:
91:f4:d6:20:a7:0e:9f:ad:46:79:20:aa:c0:75:a5:
12:eb:e9:3e:d0:20:30:5b:d4:cc:bf:27:25:e2:01:
0d:8a:ee:ff:eb:6f:b6:90:17:b8:85:4f:8c:27:22:
fe:77:b3:2c:2c:fd:58:09:a2:a0:f6:bd:17:f4:94:
96:86:9f:33:0b:3e:7e:26:1c:3b:ea:43:a8:ff:d1:
2e:d6:5d:1b:58:be:ab:9e:82:7b:29:2f:c0:ec:47:
aa:f9:53:95:cb:c8:cc:13:74:cf:72:e6:d1:d0:d7:
9f:5b:bb:57:02:f5:66:8b:99:1b:cc:8f:74:89:b4:
6b:00:c9:e9:cc:79:d5:51:29:da:84:06:3e:4c:fd:
6a:85:48:fd:7e:17:3b:9e:af:4a:3a:00:61:97:33:
e0:ac:a2:7b:e4:ed:4c:fa:39:46:12:67:e6:63:b5:
d9:96:e2:e2:3a:d2:dd:49:07:18:ed:82:d7:bc:33:
dd:49:8f:fa:d8:ab:bb:40:b2:48:3f:e0:30:de:c6:
4f:b4:4f:4d:fe:3e:cd:fc:d6:eb:41:28:ce:66:ac:
7c:4d:42:20:21:fa:73:f9:0a:8a:a9:82:b9:53:b0:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:C4:CC:66:02:FC:14:C8:D6:0E:7C:4E:ED:56:38:BF:AA:35:93
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8ibEzGYC_BTI1g58Tu1WOL-qNZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ff:55:ee:ca:4c:0f:11:e6:18:95:dc:e7:d5:2e:de:fa:57:
cd:79:ed:1d:76:4e:a5:23:fe:d5:69:9d:be:3a:e1:e9:ab:26:
af:07:f9:05:93:ad:46:c2:50:50:d6:a7:eb:68:14:84:1a:00:
48:bc:ff:0b:5f:8d:83:3a:96:6b:1d:fc:a7:f2:e2:8b:54:d0:
24:10:b1:d5:3f:f7:03:df:b4:d5:60:5e:49:79:53:48:7f:40:
37:53:68:2b:22:87:5a:bc:96:0c:75:a5:e2:bf:22:e6:cf:d3:
7f:0a:ee:76:26:b3:66:ca:5e:54:f0:d4:1e:c3:5c:6b:72:8a:
71:12:a2:2c:2e:14:a4:41:61:2b:34:a9:77:f2:10:49:3a:64:
99:df:77:d2:81:74:85:fa:b6:4b:62:e8:7d:d7:00:2f:27:6f:
77:6a:22:d8:1b:fa:d5:b7:fa:3d:b5:ba:02:5a:8a:dd:3d:9b:
13:73:b2:13:ee:aa:b0:af:a2:08:f9:30:72:14:f8:6d:7d:b7:
f1:7e:2e:a2:af:cd:86:13:50:8e:dc:1f:8d:a8:8a:88:e2:3f:
a5:c2:75:29:e7:33:fd:75:a1:14:d4:aa:13:c2:4f:63:98:9c:
b9:a9:08:81:06:6f:d8:e3:7c:85:51:1d:65:c1:38:77:c1:81:
2d:c1:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:18:15 2026 by rpki-client