Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R1FKX2u5ZVIfiA16dZjnyfcAIvE.roa
File: R1FKX2u5ZVIfiA16dZjnyfcAIvE.roa (raw, json)
Hash identifier: sdlNn4z/JD6z17yBgKPi/q1KQ2Cxa8vFh5AqbQZnRx4=
Subject key identifier: 47:51:4A:5F:6B:B9:65:52:1F:88:0D:7A:75:98:E7:C9:F7:00:22:F1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A153D177E85FDADA1EC97CE262802A7EB9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R1FKX2u5ZVIfiA16dZjnyfcAIvE.roa
Signing time: Mon 19 Oct 2026 10:59:59 +0000
ROA not before: Mon 19 Oct 2026 10:59:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8769
IP address blocks: 192.36.242.0/24 maxlen: 24
193.180.0.0/24 maxlen: 24
193.182.251.0/24 maxlen: 24
193.182.252.0/24 maxlen: 24
193.182.253.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
194.71.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d1:77:e8:5f:da:da:1e:c9:7c:e2:62:80:2a:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 19 10:59:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47514a5f6bb965521f880d7a7598e7c9f70022f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:ab:e6:5b:ca:a7:ea:1b:c0:52:26:3b:2c:
86:9f:9f:c4:71:16:76:c4:b9:97:be:d4:4f:0e:fb:
77:23:aa:c2:e6:53:29:0e:c1:92:10:c9:13:ba:8b:
bd:68:b0:78:f8:5c:0b:4d:62:8b:7f:d5:13:23:22:
a8:a9:89:04:b6:50:6e:df:5c:d8:8e:33:3b:ac:d3:
1a:07:83:b7:e8:5a:93:0d:48:d0:ce:99:99:2d:a1:
22:a8:a5:6b:ef:9a:56:7e:1b:ff:5f:b3:a9:32:4d:
48:1e:84:fc:44:21:45:ce:81:58:f1:2a:84:ed:29:
c0:30:6c:be:21:a4:4c:cc:bd:70:06:d2:79:b5:dd:
ca:b1:d7:c4:77:14:13:f8:06:b7:64:54:4a:2e:12:
d4:b4:2e:6f:a9:86:c7:bd:c8:cf:7f:70:3c:a1:7c:
b5:23:2b:80:13:da:6f:61:34:0f:c5:6f:31:b5:33:
ab:95:65:aa:46:0f:fa:f0:3e:2c:47:95:b1:6f:55:
96:f3:e9:05:60:94:f9:ca:58:dd:9d:d4:11:af:3b:
ce:79:aa:83:af:62:fe:48:bf:24:1a:4a:30:29:24:
c9:d9:7a:05:d8:a4:33:31:3e:1d:62:d9:5d:21:0e:
34:59:00:ca:b4:70:d8:c7:de:3d:13:45:91:2a:ca:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:4A:5F:6B:B9:65:52:1F:88:0D:7A:75:98:E7:C9:F7:00:22:F1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R1FKX2u5ZVIfiA16dZjnyfcAIvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.242.0/24
193.180.0.0/24
193.182.251.0-193.182.253.255
193.234.82.0/24
194.71.221.0/24
Signature Algorithm: sha256WithRSAEncryption
55:df:90:31:45:eb:94:ea:68:2c:aa:70:6e:91:ec:7f:06:ac:
06:ea:f4:32:a8:d5:b1:9a:a9:a6:b2:dc:9b:59:03:fb:55:3f:
bc:f5:0b:86:dd:a4:e3:12:bb:54:28:79:cf:20:37:15:41:68:
af:1b:8a:93:5f:9b:6e:ad:34:1b:53:50:9a:2b:67:8f:cc:f2:
9f:76:3e:d2:a5:3b:99:ae:4d:ed:3e:fc:6b:4b:da:9a:c5:7b:
ab:74:2a:ac:fc:f3:6c:bd:c5:d1:7b:a0:7f:08:3b:5c:78:50:
8b:68:db:27:94:b5:2e:ef:96:f9:5d:22:27:c9:84:38:7c:5a:
49:e6:36:ef:16:35:e1:1d:59:12:0c:31:37:bd:81:93:6b:fd:
a3:dc:ea:3e:b7:b2:a6:3a:08:a6:be:b9:0e:cc:13:69:20:fc:
87:7e:f9:0c:27:ab:90:41:2c:28:c7:0e:fa:2a:20:f3:65:7f:
75:00:23:f4:d5:d5:f1:64:90:0b:f6:53:4f:e4:ce:ba:2c:d2:
1f:3b:43:ba:82:79:20:26:6e:8d:8c:7d:5b:12:de:34:e5:1a:
b4:2b:f8:6c:08:c7:f4:cf:67:24:46:d4:a3:52:ce:b5:0f:7d:
16:23:d3:87:f9:b4:a9:9a:69:b7:c9:62:a4:34:9e:98:a4:8b:
ed:7b:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:59 2026 by rpki-client