Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ip1HgMBLpV6HRA3CGzQCwlEf1Ew.roa
File: ip1HgMBLpV6HRA3CGzQCwlEf1Ew.roa (raw, json)
Hash identifier: zcmr/7jDKb0S+FFTqUQsbTVuMEPwCDZtaORWkf2vldc=
Subject key identifier: 8A:9D:47:80:C0:4B:A5:5E:87:44:0D:C2:1B:34:02:C2:51:1F:D4:4C
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019EFB193821E68FEB707BFD2C06392FA4E5
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ip1HgMBLpV6HRA3CGzQCwlEf1Ew.roa
Signing time: Wed 24 Jun 2026 19:26:34 +0000
ROA not before: Wed 24 Jun 2026 19:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201097
IP address blocks: 132.243.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:19:38:21:e6:8f:eb:70:7b:fd:2c:06:39:2f:a4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Jun 24 19:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a9d4780c04ba55e87440dc21b3402c2511fd44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:e0:b8:d2:fe:8d:d0:de:3f:96:9e:dd:bb:
8c:e6:22:5b:ce:d4:49:d5:7c:8e:7f:25:9c:39:64:
43:24:c0:d4:1d:3f:54:fe:c8:4e:17:01:35:2e:73:
2a:7c:e5:8a:d5:af:ac:1e:e5:01:2a:3b:9d:08:51:
e2:b2:a8:9b:34:f2:53:97:fb:fd:36:cc:c5:f3:7c:
f9:09:20:7e:8d:1f:84:16:0d:c4:03:03:3d:86:49:
46:fb:be:2c:f3:99:5e:c9:97:aa:a3:74:91:80:a3:
38:4b:cf:b3:be:3e:c6:37:b7:2d:9f:15:5d:ba:75:
3a:16:1a:c0:ec:5a:f6:86:bf:82:25:26:6f:b4:c1:
cf:34:24:a9:98:df:89:b8:3f:40:c4:21:f0:63:30:
8c:16:b5:d8:d8:4f:39:b9:3f:77:eb:39:ab:2e:b9:
93:5e:38:0a:4d:5b:51:d6:58:01:e5:5d:f3:b7:ba:
3b:1e:5a:f8:a3:80:6f:70:e7:7d:9f:31:11:e6:68:
87:aa:76:05:41:d8:23:68:e7:b4:f3:96:05:e9:69:
34:8a:a2:94:6c:b4:73:13:93:09:bb:38:2a:02:c4:
7b:e6:6b:34:bc:07:ba:35:58:7a:48:73:8c:8f:b3:
05:77:0b:b1:90:36:01:b6:41:b2:ba:73:48:2b:0f:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:47:80:C0:4B:A5:5E:87:44:0D:C2:1B:34:02:C2:51:1F:D4:4C
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ip1HgMBLpV6HRA3CGzQCwlEf1Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.199.0/24
Signature Algorithm: sha256WithRSAEncryption
46:73:19:e7:7d:b5:cc:35:41:c7:37:2f:4b:15:d5:f0:a0:3e:
48:85:39:aa:a8:e4:6e:27:24:95:db:1b:13:c6:f0:43:bf:f2:
9b:e0:56:87:cb:09:97:23:48:39:5b:8e:28:b0:00:dd:4d:f8:
ab:f9:d2:2e:00:72:e5:b7:9c:bd:b2:fd:3d:b7:99:32:0b:a0:
68:15:69:79:21:cf:7d:66:d8:ae:47:21:bf:fe:fc:7f:b4:69:
ec:43:ab:fb:64:3a:45:ab:cf:e1:86:87:48:bd:91:06:46:4f:
38:c9:dc:f8:5c:35:10:0f:b4:82:07:26:39:a9:4c:ec:9c:60:
e6:dc:f1:4d:76:e3:d5:77:b7:2b:8a:73:c7:e8:5e:2f:0a:b2:
b7:31:b6:0a:09:1e:b7:59:df:da:43:54:29:c6:3e:dd:76:0e:
18:e8:be:ed:8d:14:9e:e2:fd:4a:b6:81:89:64:e4:4a:ad:0d:
e0:a4:67:35:bd:74:9f:59:c9:25:ec:ea:b7:1c:19:3f:28:20:
cd:d6:95:b8:41:4d:96:d1:81:07:32:f4:f9:ee:7e:cc:15:47:
be:e7:d6:ab:eb:20:42:5f:f5:24:51:b3:a4:34:9d:c4:3a:46:
3d:c8:9f:98:e4:5a:54:2b:19:89:5e:3f:4a:fd:37:f7:a0:1a:
e4:9e:e3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:36:02 2026 by rpki-client