Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa
File: IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa (raw, json)
Hash identifier: HqeQTODPPkmuOhSBibsyQNBnS1QebGdzSoSsvCtv9f0=
Subject key identifier: 22:32:F9:09:6F:73:79:67:0E:B5:61:D6:BB:71:C9:55:69:43:46:E4
Certificate issuer: /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial: 019F2368C7BA9A58C6A1803D5E5A096BBC9A
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.85.94.0/24 maxlen: 24
45.85.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:ba:9a:58:c6:a1:80:3d:5e:5a:09:6b:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2232f9096f7379670eb561d6bb71c955694346e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:1d:a1:ec:e4:9e:03:44:a0:92:c8:05:6d:
51:c8:a1:66:5b:6f:15:19:bd:5a:04:a7:60:b2:1e:
ca:b6:68:3c:8f:37:69:a1:84:17:38:80:72:54:e1:
55:0b:a6:27:59:56:21:ef:12:0c:39:51:c9:a8:99:
24:b2:31:fb:1a:23:2f:e8:bd:d8:18:6d:c1:10:5b:
44:d2:f9:fa:55:c3:6e:b4:88:3b:26:49:df:02:3a:
c0:d9:06:da:71:a5:12:a6:0a:fb:69:74:34:23:16:
f3:3e:54:2e:97:7b:30:5d:49:e1:62:38:8f:38:a6:
1e:36:ab:d4:3d:db:0d:4e:2d:a7:67:89:e2:79:28:
db:c6:de:f4:02:21:93:e0:b7:eb:fa:c9:da:d5:a4:
28:74:b7:b6:0f:4c:cf:69:6a:0d:4b:22:fa:6f:ba:
7d:a6:32:c0:06:08:7e:cf:32:a1:cb:2b:45:89:f0:
02:78:d2:bc:e7:9b:50:0f:d0:51:4f:73:a6:8b:27:
71:74:25:aa:03:40:15:f9:29:4b:04:2c:77:13:7e:
07:40:6b:3f:c1:a5:75:08:58:1b:ac:05:7a:cc:c0:
f9:30:a1:ec:e7:19:48:c7:73:75:d3:73:7b:44:b7:
ab:fe:d1:7e:6b:59:bd:17:9d:77:b8:bb:4d:e1:b7:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:F9:09:6F:73:79:67:0E:B5:61:D6:BB:71:C9:55:69:43:46:E4
X509v3 Authority Key Identifier:
keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:83:78:86:b5:b9:68:8f:52:5a:97:ee:1e:95:32:01:bc:6b:
8c:1b:40:41:d5:26:73:62:58:74:ac:11:7e:c7:16:0c:f2:8c:
7e:18:e5:25:7b:a8:1e:20:ad:e1:89:b4:c1:d5:1a:23:a2:88:
fc:49:ee:e2:b6:45:0a:a4:77:b3:4b:04:d0:89:e7:b3:59:ec:
f0:45:c1:b5:65:fb:5d:02:4d:9a:b0:5c:d3:c6:c7:d9:4d:fb:
64:3b:5e:0c:f8:5e:61:f1:9b:1e:ed:b8:c3:04:05:21:31:b2:
aa:3c:9c:ca:79:d2:44:3c:e6:b8:eb:c4:5f:60:95:eb:78:c7:
57:37:82:a2:55:9d:9f:5b:09:5c:35:a4:1f:8c:bf:df:db:5e:
7d:f2:db:88:3b:83:28:99:0c:f1:da:e9:27:be:d7:08:29:75:
c1:e5:0c:a0:46:e2:f3:a3:d1:2c:7b:ab:6f:2d:c8:4d:64:2e:
40:a8:b0:e3:e6:7a:e8:9b:83:cc:39:5b:83:55:0d:c0:8d:2b:
31:bd:cb:6d:58:d2:46:3c:4d:8a:81:20:47:ab:a7:23:bd:30:
09:32:f3:55:06:bf:e9:fa:4b:9d:8b:97:54:98:a2:93:37:69:
cf:59:1e:67:1b:f3:87:a7:23:c9:a3:82:b4:ae:e0:e3:2e:2c:
38:ec:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client