Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/d08RAJvfixLVr-8B_2IfzUWRlSY.roa
File: d08RAJvfixLVr-8B_2IfzUWRlSY.roa (raw, json)
Hash identifier: Bv1Tdq1uBIheAuSk2/oAmWfOwix/N3bzxrmRSrAnfFM=
Subject key identifier: 77:4F:11:00:9B:DF:8B:12:D5:AF:EF:01:FF:62:1F:CD:45:91:95:26
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FB21E94922FE111E3A7F884E33EB2BEC2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/d08RAJvfixLVr-8B_2IfzUWRlSY.roa
Signing time: Thu 30 Jul 2026 08:22:56 +0000
ROA not before: Thu 30 Jul 2026 08:22:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 194.132.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:1e:94:92:2f:e1:11:e3:a7:f8:84:e3:3e:b2:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 30 08:22:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=774f11009bdf8b12d5afef01ff621fcd45919526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:4a:8e:43:02:0e:57:dd:3e:ea:7d:2c:5d:
cf:3f:5c:f0:c7:d0:2d:bb:49:41:a2:0a:df:32:ba:
b8:0c:bc:73:40:f0:93:6d:04:b2:2f:46:76:45:89:
a7:ed:81:91:84:6e:5f:58:2a:74:99:77:55:ed:62:
1a:04:6c:ed:f9:94:c8:92:19:ba:ed:fc:ca:51:2c:
7e:40:50:d6:2b:02:3e:e3:1f:bb:01:44:23:b0:5b:
b0:da:2c:a9:69:aa:5f:7d:73:c1:b1:d3:51:1d:52:
2f:a2:72:b5:8e:2a:17:b2:ca:41:2b:0e:8b:9e:87:
d7:29:5b:e5:e8:08:2d:22:b8:d6:ef:16:1b:6a:06:
aa:c9:7a:e3:33:47:28:f8:37:78:43:53:a5:3f:bf:
91:0c:36:81:fa:20:2b:b5:c6:6a:50:c7:be:5b:e4:
78:e7:24:80:75:05:2c:a2:57:c6:6f:7b:08:07:94:
d8:1f:00:3b:88:4f:5d:94:54:05:31:30:65:8b:15:
ad:23:8a:45:56:20:e9:c1:17:ab:1e:ee:7d:a8:f4:
7f:58:06:9e:a0:ab:39:e2:89:97:b2:f3:09:29:b4:
0a:9d:a9:e2:10:af:76:b8:36:1d:e5:91:f5:5d:74:
10:fe:e7:69:b3:b8:24:51:d6:32:c2:3b:79:64:12:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4F:11:00:9B:DF:8B:12:D5:AF:EF:01:FF:62:1F:CD:45:91:95:26
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/d08RAJvfixLVr-8B_2IfzUWRlSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.124.0/23
Signature Algorithm: sha256WithRSAEncryption
73:d4:d8:df:06:30:d4:27:09:48:60:7a:80:23:d1:67:53:56:
27:e5:c5:07:56:20:cf:26:32:06:9a:fd:b6:b6:4d:2c:13:2b:
71:1f:15:0e:11:cf:16:14:7e:b5:24:21:ef:2f:e1:52:4c:b0:
fa:fe:d6:44:d8:a0:68:28:f5:d8:8e:2c:14:80:4a:30:9f:9f:
a7:4f:31:cd:ae:4b:ad:87:2b:74:35:67:0e:27:f5:c2:03:3a:
0b:e0:46:1d:f7:00:f1:73:17:86:6b:1e:64:b7:89:c7:ab:25:
53:7d:7b:00:e2:8a:6f:58:05:4c:2a:8a:db:78:de:c4:c9:56:
29:81:0e:c8:3f:6c:2a:16:af:be:cb:08:4a:51:be:fb:40:e2:
fb:a0:72:95:51:ae:50:83:a9:3a:83:72:21:c3:22:b6:5b:58:
68:56:21:58:f5:bb:5f:47:a3:be:7a:2e:20:87:41:a7:48:48:
f2:57:f2:8b:32:63:79:bb:86:5d:7c:eb:85:aa:51:dd:d3:77:
c1:de:52:38:27:dd:8b:ae:84:ca:0c:d1:a6:37:d0:78:af:91:
90:3c:26:f8:17:1b:ab:9e:6e:d9:05:e0:ec:c9:a8:6f:30:51:
54:2f:b7:5d:0e:ae:4a:fd:2d:2e:f1:c7:02:8a:5e:35:d7:84:
ce:c3:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:02 2026 by rpki-client