Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ISsGxHIyrOPNYfVnvYomPgXoioM.roa
File: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (raw, json)
Hash identifier: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=
Subject key identifier: 21:2B:06:C4:72:32:AC:E3:CD:61:F5:67:BD:8A:26:3E:05:E8:8A:83
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A047C252C5529707C658DC08EB79998595
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ISsGxHIyrOPNYfVnvYomPgXoioM.roa
Signing time: Fri 28 Aug 2026 09:45:12 +0000
ROA not before: Fri 28 Aug 2026 09:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 2.59.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:c2:52:c5:52:97:07:c6:58:dc:08:eb:79:99:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 28 09:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=212b06c47232ace3cd61f567bd8a263e05e88a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:ec:05:42:8b:3e:d7:b4:f4:98:66:91:0c:
82:52:22:81:17:75:2b:0a:3a:50:a4:e2:56:76:70:
26:0a:54:a7:cf:fe:c6:7d:d5:a4:c4:68:d8:4a:3b:
5d:ae:42:98:22:32:aa:dd:39:d8:da:b1:e2:42:db:
ed:1c:a7:4d:57:96:6d:50:c8:66:d9:fb:fe:7c:4b:
1d:ab:c7:38:70:63:89:38:10:80:25:c3:a7:1b:07:
76:56:4f:bc:3b:4d:68:20:85:08:e0:43:7d:03:54:
02:dc:89:1c:ba:24:3f:70:9f:1c:e7:e0:ee:2d:90:
e6:0f:f6:c9:db:ce:7c:e5:40:c0:ee:22:88:49:e8:
44:aa:35:21:34:c0:41:7f:61:82:91:2e:55:f4:22:
38:43:3e:05:2f:6b:5e:2e:2d:d6:f8:fb:4f:b4:10:
dd:14:09:79:22:6c:64:a2:db:81:ed:5b:ff:e2:35:
79:af:5b:ac:71:50:67:7a:cc:d5:c4:e3:4e:61:12:
5a:b7:8e:02:7b:4f:d4:0a:6e:6d:75:5b:5f:2c:73:
ae:a2:db:b8:8f:42:d3:89:7d:92:6e:de:2b:71:96:
9c:3a:d6:7b:4e:45:07:93:14:1a:75:2a:be:03:7c:
e6:27:7d:d3:41:a3:9c:61:5d:05:af:72:d4:5e:e1:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:06:C4:72:32:AC:E3:CD:61:F5:67:BD:8A:26:3E:05:E8:8A:83
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ISsGxHIyrOPNYfVnvYomPgXoioM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
Signature Algorithm: sha256WithRSAEncryption
31:14:34:4f:78:42:09:56:bb:e4:82:1c:06:ce:37:a1:da:bf:
93:4f:d8:64:7c:44:37:b3:81:55:97:9b:c8:ba:05:a2:85:d4:
c8:e9:d9:75:e1:08:8b:7e:7a:cc:ad:7e:ee:11:67:e6:cc:13:
24:fc:15:33:2f:c7:48:e6:32:96:70:2b:03:ed:3b:cd:5c:26:
89:08:44:e2:77:60:5b:53:4e:ef:3b:3e:c9:10:ed:de:37:e5:
e9:27:40:46:dd:de:52:a5:b0:1d:5a:ac:d9:6b:db:5f:4a:98:
ba:75:cb:ab:6a:de:9b:2d:f5:30:09:2e:a3:8d:84:62:cb:a1:
43:7f:e8:e9:de:e8:7f:5d:12:ae:1e:a2:2b:f1:6d:ad:44:6d:
bc:02:b0:43:f9:c8:3a:c9:1a:3c:59:c7:59:a7:58:0b:5d:5a:
a6:67:69:0c:1c:df:dd:12:1f:a6:7a:a4:74:f8:bb:39:0a:6c:
39:ad:da:6a:49:ca:cf:66:63:28:84:d4:8b:e9:35:d4:55:2f:
c0:ac:a7:dc:69:31:47:e0:ed:30:a5:e9:9c:82:a1:de:af:f9:
39:db:2a:f9:21:63:17:ac:3a:25:a0:84:4b:e6:08:f2:a7:6b:
61:89:92:09:6f:ca:d9:30:69:da:3a:ce:f2:5e:fc:36:6a:30:
44:ca:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 06:25:54 2026 by rpki-client