Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/cIgHVKNh533KrGBu3r1u02KG0vE.roa
File: cIgHVKNh533KrGBu3r1u02KG0vE.roa (raw, json)
Hash identifier: FISV07d/2Gbmgpj8aJOUTEuVMMVqa5/L2CaIyRaP1CU=
Subject key identifier: 70:88:07:54:A3:61:E7:7D:CA:AC:60:6E:DE:BD:6E:D3:62:86:D2:F1
Certificate issuer: /CN=d6dad8855c27ac3f1d6d7e2ef8e597577a6aa920
Certificate serial: 01A10281EB0EDA00B010F54373DBA8C0FCC1
Authority key identifier: D6:DA:D8:85:5C:27:AC:3F:1D:6D:7E:2E:F8:E5:97:57:7A:6A:A9:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/cIgHVKNh533KrGBu3r1u02KG0vE.roa
Signing time: Sat 03 Oct 2026 16:03:50 +0000
ROA not before: Sat 03 Oct 2026 16:03:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212292
IP address blocks: 195.246.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:81:eb:0e:da:00:b0:10:f5:43:73:db:a8:c0:fc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dad8855c27ac3f1d6d7e2ef8e597577a6aa920
Validity
Not Before: Oct 3 16:03:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70880754a361e77dcaac606edebd6ed36286d2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:56:f9:bd:25:18:3a:2f:d9:a7:88:0e:86:
18:be:e0:5c:ea:21:e0:e1:60:b2:33:60:fc:72:78:
a4:cd:f7:e8:42:64:4c:ad:79:f5:63:2f:ab:1c:84:
9c:89:e3:58:05:5b:e2:c0:46:b2:dd:73:67:df:4c:
a3:ce:96:b7:02:02:42:e4:95:5c:75:5d:ed:14:a6:
96:85:d9:5f:dd:f5:56:47:cf:b2:25:a1:29:ad:9f:
5e:5d:11:fa:ee:9c:3a:42:e7:b0:aa:8e:1e:c4:ee:
57:45:c1:a9:99:7f:10:e1:62:8c:6a:e7:32:47:a1:
38:a2:1c:d4:ef:d3:fb:77:aa:4d:5a:d6:30:9d:fe:
1f:12:a0:36:b3:58:34:e7:5f:2e:44:db:0c:7c:8b:
ed:85:80:79:36:2e:6e:6e:9b:93:fb:de:3d:a6:fb:
46:09:34:68:53:b1:c3:51:b4:f9:13:75:33:9b:70:
0a:a6:27:e5:ee:bb:18:bf:c8:1b:fb:de:2f:67:7b:
98:e5:4a:9c:a7:f5:26:ec:45:92:39:27:08:28:0e:
4d:e2:f9:74:ec:b8:bf:ba:91:7e:f3:36:55:14:7f:
4f:40:83:97:95:17:50:15:df:2c:d9:51:bb:21:7e:
c2:16:23:a4:5b:08:ae:8d:62:06:ee:ab:eb:fd:40:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:88:07:54:A3:61:E7:7D:CA:AC:60:6E:DE:BD:6E:D3:62:86:D2:F1
X509v3 Authority Key Identifier:
keyid:D6:DA:D8:85:5C:27:AC:3F:1D:6D:7E:2E:F8:E5:97:57:7A:6A:A9:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/cIgHVKNh533KrGBu3r1u02KG0vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.232.0/23
Signature Algorithm: sha256WithRSAEncryption
53:70:f2:f1:4a:65:3d:4e:01:3f:22:db:fa:4f:2d:b2:65:66:
3e:e1:c6:72:22:3b:8b:f9:50:bc:8f:26:00:33:ef:18:62:1a:
cc:f9:0e:eb:5b:e7:1e:f7:dc:b2:18:0e:74:6a:e2:44:b8:81:
de:5c:0d:e9:24:59:aa:92:65:08:90:44:36:c4:b7:5d:ee:fb:
21:ec:7e:0f:c3:a0:ab:cf:26:79:18:70:a4:98:9b:06:c8:95:
9f:e9:e2:c2:f2:03:4b:67:a2:0f:4d:89:c7:a3:c5:eb:34:c7:
11:af:df:f4:e4:0a:02:8c:20:b0:cb:46:bf:03:42:7a:3d:9f:
59:85:d1:9c:c7:f3:95:80:c0:0c:ff:7d:ab:1d:cb:91:67:ed:
9d:31:de:b0:05:93:26:0a:68:a5:e0:b3:f0:b3:fb:bb:e5:a5:
2c:58:55:d6:5a:1e:fc:b3:20:9e:b1:ec:54:23:51:93:79:22:
c1:f8:79:b9:85:52:4e:4d:b6:69:bb:fb:f9:a6:8d:06:f8:ff:
00:ee:3d:4e:34:be:89:11:53:74:e6:83:8d:c0:8a:7c:cd:de:
33:39:c3:54:f8:d4:91:f8:5f:9e:e6:a4:cf:95:cc:69:57:44:
db:7d:b5:60:ea:d0:43:05:85:13:c0:29:bd:be:aa:f2:d8:cd:
3c:4a:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:44:20 2026 by rpki-client