Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IcBugOryk6Mm5zCokmy17j1PQho.roa
File: IcBugOryk6Mm5zCokmy17j1PQho.roa (raw, json)
Hash identifier: 0xXAxUXR32NikdGiRvVF0DRTTW7M7Y9+3A8DoyTBFo4=
Subject key identifier: 21:C0:6E:80:EA:F2:93:A3:26:E7:30:A8:92:6C:B5:EE:3D:4F:42:1A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F860F8F8C0AECD487569E7F86E28736F7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IcBugOryk6Mm5zCokmy17j1PQho.roa
Signing time: Tue 21 Jul 2026 19:03:14 +0000
ROA not before: Tue 21 Jul 2026 19:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213316
IP address blocks: 192.124.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0f:8f:8c:0a:ec:d4:87:56:9e:7f:86:e2:87:36:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 21 19:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c06e80eaf293a326e730a8926cb5ee3d4f421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:54:5b:80:1a:6e:ee:83:8f:60:e3:ed:db:
0d:dc:db:00:30:a5:91:00:55:47:4f:c0:0f:60:ef:
87:3b:3e:ce:75:a6:f4:af:a6:59:eb:47:a7:4c:b6:
51:4a:7b:24:6d:14:98:7f:48:6c:3e:2d:09:58:db:
5a:c6:90:61:9e:ee:6b:fb:8b:ed:11:6b:7c:72:73:
3c:49:45:92:cd:25:ab:97:f5:07:36:53:67:f9:e3:
fc:f5:51:1f:8f:6a:99:48:b8:df:6b:e7:fb:50:f6:
eb:5c:39:92:64:aa:9a:50:3c:ff:5a:a1:fd:01:5e:
6b:8b:c2:32:37:71:d4:06:c7:6f:f5:df:b2:43:58:
3e:9d:2e:79:3f:4f:0a:c7:e6:55:92:b6:e0:6a:9e:
ff:ae:52:3a:88:1b:2a:c9:43:71:16:a5:f9:59:e2:
c0:39:e7:86:f5:eb:a0:c6:ef:b8:7c:50:44:d5:a6:
36:18:cf:55:58:01:4e:04:e6:dc:95:9d:06:6f:a0:
60:9c:5b:19:69:88:6a:16:d9:20:b4:3b:83:4f:b2:
6a:1d:db:1f:39:34:42:ca:bf:c6:20:1d:37:bc:7e:
01:4a:f5:e1:d6:01:36:3d:02:e5:75:cf:9f:10:5e:
df:3a:10:d6:76:60:f2:21:52:c7:28:63:6d:61:84:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C0:6E:80:EA:F2:93:A3:26:E7:30:A8:92:6C:B5:EE:3D:4F:42:1A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IcBugOryk6Mm5zCokmy17j1PQho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
Signature Algorithm: sha256WithRSAEncryption
23:13:6e:b8:3d:97:7c:d4:6d:41:d8:4e:de:28:3c:29:79:8c:
0b:2e:f0:c0:1c:b6:2d:02:f6:19:bb:b7:d9:c0:3e:04:dd:ca:
01:b4:8c:e3:e4:e9:7f:f2:37:b5:a8:8a:c3:a4:12:45:3b:6d:
8c:a1:25:43:41:ba:4c:81:53:b8:7b:d5:0a:80:b0:2a:85:ec:
33:11:be:94:a9:fa:e5:b2:11:fc:d0:93:77:f6:f8:8b:f7:ff:
3a:04:24:d5:a7:ba:8d:01:14:5b:54:a4:f6:a7:39:c9:e3:68:
b9:94:81:94:98:32:5d:97:e3:eb:fb:81:90:01:9d:5c:10:2e:
cc:2a:44:72:d2:db:d6:9b:34:83:9b:bf:19:40:43:f4:45:84:
67:b3:d7:33:91:46:4b:c8:f5:e5:f1:07:fb:e2:be:ad:cb:48:
28:2c:d6:17:e7:69:7e:cd:fe:7b:57:7c:e0:b1:79:e9:38:79:
3e:c2:eb:3f:1e:b5:f6:53:39:c4:08:6c:46:4a:da:50:48:0b:
ab:97:8e:80:8d:b3:32:cd:a4:ba:78:e4:d5:e8:f5:0a:7c:a2:
f0:a6:1a:d3:ba:91:29:2e:6f:cd:40:21:55:e5:67:3a:83:22:
11:0b:29:37:97:65:da:96:84:17:20:56:9f:01:ca:bf:6a:ff:
74:f9:86:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+GD4+MCuzUh1aef4bihzb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNzIxMTkwMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWMwNmU4MGVhZjI5M2EzMjZlNzMwYTg5MjZjYjVlZTNkNGY0MjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PNUW4Aabu6Dj2Dj7dsN3NsAMKWR
AFVHT8APYO+HOz7Odab0r6ZZ60enTLZRSnskbRSYf0hsPi0JWNtaxpBhnu5r+4vt
EWt8cnM8SUWSzSWrl/UHNlNn+eP89VEfj2qZSLjfa+f7UPbrXDmSZKqaUDz/WqH9
AV5ri8IyN3HUBsdv9d+yQ1g+nS55P08Kx+ZVkrbgap7/rlI6iBsqyUNxFqX5WeLA
OeeG9eugxu+4fFBE1aY2GM9VWAFOBObclZ0Gb6BgnFsZaYhqFtkgtDuDT7JqHdsf
OTRCyr/GIB03vH4BSvXh1gE2PQLldc+fEF7fOhDWdmDyIVLHKGNtYYSixQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHAboDq8pOjJucwqJJste49T0IaMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSWNCdWdPcnlrNk1tNXpDb2tteTE3ajFQUWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHy0MA0G
CSqGSIb3DQEBCwUAA4IBAQAjE264PZd81G1B2E7eKDwpeYwLLvDAHLYtAvYZu7fZ
wD4E3coBtIzj5Ol/8je1qIrDpBJFO22MoSVDQbpMgVO4e9UKgLAqhewzEb6Uqfrl
shH80JN39viL9/86BCTVp7qNARRbVKT2pznJ42i5lIGUmDJdl+Pr+4GQAZ1cEC7M
KkRy0tvWmzSDm78ZQEP0RYRns9czkUZLyPXl8Qf74r6ty0goLNYX52l+zf57V3zg
sXnpOHk+wus/HrX2UznECGxGStpQSAurl46AjbMyzaS6eOTV6PUKfKLwphrTupEp
Lm/NQCFV5Wc6gyIRCyk3l2XaloQXIFafAcq/av90+YZt
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:26 2026 by rpki-client