Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x59ePzIrh9c6hn_5bRU2hwGitik.roa
File: x59ePzIrh9c6hn_5bRU2hwGitik.roa (raw, json)
Hash identifier: L7JUQn/ZGvqH+PIChnYoTX9LFaY+xRzqwA7KE/NOzjs=
Subject key identifier: C7:9F:5E:3F:32:2B:87:D7:3A:86:7F:F9:6D:15:36:87:01:A2:B6:29
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0869EC8913F3F1462B9591B6F39F1FE9E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x59ePzIrh9c6hn_5bRU2hwGitik.roa
Signing time: Wed 09 Sep 2026 14:42:28 +0000
ROA not before: Wed 09 Sep 2026 14:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48540
IP address blocks: 194.14.97.0/24 maxlen: 24
194.68.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:9e:c8:91:3f:3f:14:62:b9:59:1b:6f:39:f1:fe:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 9 14:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c79f5e3f322b87d73a867ff96d15368701a2b629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:f0:08:20:46:06:49:c0:dc:63:5f:e0:ec:
86:26:73:a3:16:84:dc:90:83:be:08:d6:49:db:4e:
0a:81:d1:f9:99:fa:e7:41:28:49:f5:6a:0e:7d:88:
49:c7:c8:c5:a6:39:fd:53:40:f2:a4:c6:93:c9:a5:
77:bd:bc:be:14:84:5f:bb:90:bb:2c:a5:d6:b1:c9:
ca:dd:e4:d9:c6:26:6e:0e:9c:99:29:74:70:c3:d1:
9f:67:d7:3a:4b:04:bb:32:6d:d4:47:f3:81:a0:43:
fc:49:f6:af:01:38:53:9a:64:e2:10:cb:b9:9b:0f:
07:46:c4:2e:4a:e7:b9:67:92:27:38:7f:31:7d:ef:
1d:6a:d4:72:88:d3:0f:d6:c9:4a:a1:a4:a6:a1:e8:
ae:e4:26:aa:dc:84:5a:41:f0:0f:cc:60:9e:2b:c8:
57:c4:e5:a9:a9:8e:dd:34:fd:6e:a4:df:74:a4:dd:
8f:2f:cb:8f:19:24:a8:60:fb:c4:7a:5f:17:48:9e:
97:b5:b6:b3:f8:87:b0:6b:fe:a4:6e:53:cf:9d:94:
11:4b:0b:1e:43:e6:0e:66:3d:e9:3b:d1:90:43:8a:
8d:b8:86:1e:da:52:f3:c6:3e:fe:0c:c7:34:e7:b9:
95:55:6a:4c:d2:ee:75:3c:ae:fa:14:60:cb:4c:ab:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:5E:3F:32:2B:87:D7:3A:86:7F:F9:6D:15:36:87:01:A2:B6:29
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x59ePzIrh9c6hn_5bRU2hwGitik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.97.0/24
194.68.2.0/24
Signature Algorithm: sha256WithRSAEncryption
49:99:41:1e:91:35:a2:15:98:3f:d4:68:99:18:a6:a2:29:0e:
ec:82:8c:4b:32:4c:4e:20:20:6a:c0:fc:e4:7f:f1:8f:8e:08:
02:5a:e2:da:ab:5f:5f:f6:14:9d:36:dd:8a:82:1a:1d:69:7e:
5e:3b:e2:83:71:47:30:4b:49:92:e8:41:83:f7:92:d7:35:c2:
1f:5b:98:04:ef:b9:ae:bd:51:9e:cd:d2:e7:83:e8:fe:93:cf:
51:0c:ea:5d:64:f0:e5:6d:64:5a:42:a2:b4:ae:9d:7a:77:6a:
58:d2:59:49:49:8e:20:54:8e:33:99:01:3a:f5:c0:55:e4:e4:
ee:6e:28:c1:0c:bd:4b:07:83:a1:47:f4:9a:07:89:ee:c2:4d:
c2:cb:f0:6d:5a:58:6b:d2:aa:0e:f9:0c:3f:32:5b:bc:fd:6c:
4d:8b:2a:14:67:bd:93:53:b7:32:e6:ef:60:a7:3c:7e:38:35:
4b:4d:35:bc:41:a4:2a:0e:a4:2a:d6:e2:f5:20:67:8f:54:f1:
3c:25:22:6f:ef:59:af:07:37:02:20:d7:8e:7c:8a:5d:c3:1c:
05:61:8b:48:f8:5d:94:19:6a:93:a5:0c:db:01:3d:47:5d:a9:
87:1d:59:7b:79:7f:8f:d1:eb:8c:48:22:0f:db:a9:f6:bd:d7:
82:e0:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:35 2026 by rpki-client