Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/idFYDsFRYIBMWy9xE4a8-E3-53I.roa
File: idFYDsFRYIBMWy9xE4a8-E3-53I.roa (raw, json)
Hash identifier: 9CzGad0E5hWXEt2aEevUsspONp8+PirRTc+OMCqOHQ4=
Subject key identifier: 89:D1:58:0E:C1:51:60:80:4C:5B:2F:71:13:86:BC:F8:4D:FE:E7:72
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A159DD3FCAED9157ED245F39C23A70093C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/idFYDsFRYIBMWy9xE4a8-E3-53I.roa
Signing time: Tue 20 Oct 2026 15:10:34 +0000
ROA not before: Tue 20 Oct 2026 15:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209659
IP address blocks: 193.180.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:dd:3f:ca:ed:91:57:ed:24:5f:39:c2:3a:70:09:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 20 15:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89d1580ec15160804c5b2f711386bcf84dfee772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:22:31:f6:55:16:23:fb:d3:83:a0:8e:2b:
26:fd:8b:1d:af:e5:ca:1a:cb:86:d4:82:d1:36:44:
3e:40:b1:bc:b7:71:c2:df:19:b7:1e:72:46:54:89:
a3:fd:fc:1f:1b:2b:80:59:6e:2a:f0:4d:2a:70:de:
86:41:96:b2:ca:35:ca:e8:11:9f:0e:d8:e1:82:7a:
ef:03:e4:47:85:36:18:6b:8f:5b:d8:fb:0c:68:b8:
d3:29:bf:5e:d8:a4:cd:cd:5d:19:bc:7d:cd:da:55:
5a:8f:ad:d1:30:3c:44:01:8b:9c:a4:8f:65:a7:24:
d8:39:cc:0f:79:0d:b0:b5:6a:31:0a:00:2d:6c:1d:
46:af:0f:ce:5c:d7:8e:ac:05:dd:2e:71:e2:92:4f:
5d:61:2e:5f:ea:57:b5:70:65:fc:99:48:c2:2b:40:
bd:1e:d5:35:1a:63:ea:47:f4:9a:6d:74:f6:94:fb:
d1:09:c1:53:b8:80:68:e1:78:f1:66:65:c1:d7:48:
02:48:cc:c7:59:cc:ed:9d:bf:1d:69:1f:98:1f:f2:
3c:63:4e:d9:cd:f1:4f:89:eb:5c:0e:a2:4f:2a:0f:
96:10:4f:d9:a0:9a:5d:e7:8d:cb:05:9f:92:9c:72:
5d:ea:d6:2c:f8:8f:a5:26:0f:9a:a7:47:80:7f:97:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:58:0E:C1:51:60:80:4C:5B:2F:71:13:86:BC:F8:4D:FE:E7:72
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/idFYDsFRYIBMWy9xE4a8-E3-53I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9d:f7:fa:da:02:f5:2a:15:27:26:53:4f:79:ad:be:09:07:
99:c7:ee:49:60:8e:6f:38:de:c4:5f:d8:6a:a0:30:af:bf:bd:
a5:9b:36:e5:be:5d:b7:1d:26:cf:14:51:62:d1:21:f2:74:0b:
d1:ab:a9:69:e4:88:bf:8b:c7:31:ac:03:4e:b4:a9:78:b4:8a:
33:86:f0:5f:72:49:ee:c4:95:5e:0f:48:30:69:fa:48:ce:93:
10:9c:f5:bd:7d:8d:d9:a4:08:c3:77:50:95:0c:d2:76:3f:74:
e1:ad:cc:28:7e:ad:43:66:25:d0:91:b9:67:99:92:1f:c5:8d:
d2:a0:8b:2e:81:ce:0f:ab:9d:31:f2:74:30:7b:ac:49:58:ff:
38:31:d6:6e:4e:8d:18:71:8b:9c:ce:1a:a6:b2:26:77:cc:ff:
91:cb:e2:28:2f:08:dd:cd:1a:4b:df:a6:3c:53:20:96:a9:ea:
f6:bf:23:23:43:fa:f4:b6:53:26:8f:e8:7d:4f:22:a8:21:aa:
32:28:5a:79:48:cb:85:43:99:41:d3:ab:7f:1f:3d:25:24:d0:
16:27:2c:2d:9f:66:1a:56:38:a8:1f:a0:6d:86:ca:f8:09:cf:
bb:d8:38:4c:a3:46:12:4c:d2:a1:5d:a1:00:24:49:ac:17:1c:
14:4d:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:10 2026 by rpki-client