Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/iIL6nVJDFuWci5CooLcheZTMf7s.roa
File: iIL6nVJDFuWci5CooLcheZTMf7s.roa (raw, json)
Hash identifier: vSGUjVlcs3gy7cKIqEEw8TdVKRq+vSgm+acCn8L3TfU=
Subject key identifier: 88:82:FA:9D:52:43:16:E5:9C:8B:90:A8:A0:B7:21:79:94:CC:7F:BB
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A01EC8DE975726A4683FFCA85ADE6EF3BD
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/iIL6nVJDFuWci5CooLcheZTMf7s.roa
Signing time: Thu 20 Aug 2026 10:47:55 +0000
ROA not before: Thu 20 Aug 2026 10:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 195.123.4.0/24 maxlen: 24
195.123.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:c8:de:97:57:26:a4:68:3f:fc:a8:5a:de:6e:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Aug 20 10:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8882fa9d524316e59c8b90a8a0b7217994cc7fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:13:6e:b1:fc:64:7d:3a:bb:32:ea:ce:0e:
b0:d4:56:28:f3:79:c8:f2:68:ce:ad:82:fb:e2:59:
65:c7:bf:e0:8d:c1:60:57:0f:4b:ac:f7:2a:d4:d4:
bd:d8:bf:4c:04:d7:ec:f1:a1:06:40:c3:20:67:40:
a1:f8:99:55:21:a7:65:11:b4:75:a0:79:af:30:40:
50:e4:8b:d2:99:5b:68:26:79:8a:25:d3:d6:25:9f:
80:1f:ee:19:16:7a:20:8a:55:43:36:df:1d:67:64:
71:be:7e:31:33:91:25:02:d3:01:74:b3:23:ba:9a:
b0:e6:02:0d:74:25:d2:2d:d9:9e:f6:57:39:62:6a:
b6:c0:ee:04:f0:82:ba:86:cc:4c:70:91:ea:c9:28:
86:33:31:de:e4:fe:64:72:a0:97:82:f2:f6:66:22:
6b:ec:1b:a9:be:cc:e0:86:a7:22:f0:c8:a9:ee:cc:
0f:48:fd:62:89:6b:92:ae:0a:d2:9e:b0:1a:54:55:
c4:48:f1:44:92:72:dd:c3:2a:be:c6:3c:bc:d1:c6:
78:df:8a:29:09:bf:5c:ad:05:8d:f3:61:d9:7e:49:
94:fd:d0:47:f8:af:0e:51:85:72:50:2e:e6:bd:64:
af:20:77:01:35:b1:24:50:ed:f5:00:33:63:ac:52:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:FA:9D:52:43:16:E5:9C:8B:90:A8:A0:B7:21:79:94:CC:7F:BB
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/iIL6nVJDFuWci5CooLcheZTMf7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.4.0/24
195.123.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4c:d4:9b:d5:1e:2c:53:38:ec:15:19:d4:65:4d:2e:7e:67:
48:15:35:97:b6:db:6f:08:59:a8:1f:c1:74:12:3a:67:b5:7d:
82:fd:ce:13:4c:27:4b:b9:5c:01:b2:6d:1a:27:7d:51:7f:13:
f9:70:c0:37:71:c5:82:40:48:f2:55:0c:fd:f8:4c:8d:79:b3:
59:1a:85:62:20:88:74:97:ca:36:42:b6:94:2e:71:41:90:3c:
12:a3:03:3d:0a:de:cc:c6:3f:c9:56:24:67:e8:c4:24:a8:e1:
ab:0e:3a:22:c6:b6:ac:a7:e7:25:01:da:c5:a3:cc:25:fd:fd:
9c:f9:3e:6a:fc:2f:41:d0:a5:36:2c:71:78:99:00:77:eb:ba:
91:24:70:fc:43:c7:72:be:07:97:45:c1:45:ac:82:79:b4:0a:
d8:f3:0e:e2:7e:e1:fd:2c:27:5e:fb:8b:ad:7d:78:0f:7f:9d:
c9:88:76:fa:cc:ad:2e:19:d9:b9:e6:1a:6b:fb:9f:e9:8d:6a:
ae:18:e9:8e:dd:f6:bf:b1:6b:61:85:a8:49:32:42:d4:ca:4e:
42:2d:10:ca:d9:7f:13:39:a0:26:85:8b:86:4f:e9:24:74:75:
d1:a2:16:3d:80:42:ef:df:b6:5b:ab:d8:c5:64:e6:ee:03:f4:
37:3c:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:13 2026 by rpki-client