Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/pIcznINfqx5lHzJ_FcckIm8KAkI.roa
File: pIcznINfqx5lHzJ_FcckIm8KAkI.roa (raw, json)
Hash identifier: VTzx7od97DEMXBbvge07SZvj6SoKz0Y08Q2iQOfDzO0=
Subject key identifier: A4:87:33:9C:83:5F:AB:1E:65:1F:32:7F:15:C7:24:22:6F:0A:02:42
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019FB6F54651A2C1C8FFBA7662DF3A3CE656
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/pIcznINfqx5lHzJ_FcckIm8KAkI.roa
Signing time: Fri 31 Jul 2026 06:55:55 +0000
ROA not before: Fri 31 Jul 2026 06:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 80.224.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:f5:46:51:a2:c1:c8:ff:ba:76:62:df:3a:3c:e6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jul 31 06:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a487339c835fab1e651f327f15c724226f0a0242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:13:42:af:89:17:64:87:37:82:f1:3c:75:
04:ed:18:54:8a:dd:10:36:df:9c:54:3b:20:51:e3:
56:0e:0b:98:62:85:18:84:78:4a:25:12:fb:2c:cf:
74:3a:39:9b:9c:f7:45:6e:c3:f9:98:be:0c:c5:27:
89:2a:a4:e4:14:23:71:5a:a1:5c:b7:a1:c1:a7:6b:
b3:b3:29:8b:3e:0b:da:27:85:f2:30:19:f5:47:16:
62:83:c0:32:28:a9:96:75:aa:6c:28:6c:41:91:15:
b5:4d:63:fc:55:b0:2d:76:0a:a2:e5:46:a3:7a:8c:
6d:d6:fb:e8:53:dc:5d:cf:8f:f6:00:a3:65:2f:40:
b8:0d:b8:31:f4:24:1c:5c:c1:96:94:ee:59:eb:27:
15:10:cb:a2:ff:fa:27:cf:42:81:17:d7:fd:db:9b:
54:49:b8:13:8d:55:69:99:e3:02:ee:2a:ed:04:79:
93:df:11:22:18:12:68:01:0e:03:1d:5e:de:d1:94:
41:81:80:fe:9c:81:ff:93:96:32:a3:67:0c:59:4b:
83:12:bf:a8:1f:24:ec:eb:c7:42:05:db:d8:cf:bd:
40:6a:1a:8f:45:19:e8:27:79:a7:86:2c:ea:96:8b:
9b:5c:0c:32:b6:f9:7d:a5:6e:08:74:2d:35:73:55:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:33:9C:83:5F:AB:1E:65:1F:32:7F:15:C7:24:22:6F:0A:02:42
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/pIcznINfqx5lHzJ_FcckIm8KAkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:79:44:34:b2:65:9d:b7:d7:8d:b3:6a:5c:4a:2a:b5:55:4f:
3b:3c:0a:b1:74:a8:98:12:f8:1c:33:6b:53:f8:c9:00:f9:96:
a3:4a:c3:6e:ab:5c:6f:a4:1c:b0:88:b3:bd:e0:62:82:39:36:
c0:b3:d7:47:ec:4b:96:5a:53:b7:35:3b:80:55:21:21:90:79:
ab:3c:dd:6e:a9:dd:d1:5e:9b:ad:7b:2c:25:d4:1a:94:c3:1a:
e4:d1:a0:54:ec:15:06:40:73:e1:06:28:37:39:b0:28:64:29:
22:30:4f:68:7b:d7:49:84:94:25:65:89:85:48:4c:49:b9:1e:
ae:72:5f:ad:fc:47:1f:a0:77:fc:d5:9c:ef:fe:3f:d5:61:91:
43:ef:47:77:a7:47:10:5f:da:72:a3:e3:dd:06:ae:05:04:11:
25:1f:e7:47:0b:bb:6d:2e:33:65:8d:78:0e:10:45:d3:86:0d:
1d:ef:ef:21:b4:f0:ae:9c:30:fd:67:17:1f:10:7b:c8:8f:3b:
91:57:2e:4e:c4:ca:3a:fd:9b:38:60:6c:8a:b3:e7:a7:87:b1:
74:b5:51:49:fa:99:9c:3a:07:4c:75:fd:da:b8:95:18:02:83:
d6:c9:c5:73:e6:78:d9:09:3e:b2:f0:84:13:51:99:4e:26:cb:
5e:28:57:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:30:01 2026 by rpki-client