Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/iR63CY1kK3TiPhYx6WEO-yojkgY.roa
File: iR63CY1kK3TiPhYx6WEO-yojkgY.roa (raw, json)
Hash identifier: yNqWBZbEljIAfAFMt1cH42zOzS6vcf4m1YoQHlDtmc0=
Subject key identifier: 89:1E:B7:09:8D:64:2B:74:E2:3E:16:31:E9:61:0E:FB:2A:23:92:06
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019D2519C468FC27BE69D089E6958BF9D2B2
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/iR63CY1kK3TiPhYx6WEO-yojkgY.roa
Signing time: Wed 25 Mar 2026 13:05:38 +0000
ROA not before: Wed 25 Mar 2026 13:05:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 141.133.140.0/24 maxlen: 24
141.133.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:19:c4:68:fc:27:be:69:d0:89:e6:95:8b:f9:d2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 25 13:05:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=891eb7098d642b74e23e1631e9610efb2a239206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:52:c9:f7:6f:a9:7f:da:0a:b9:82:f8:d6:
7a:e7:1d:46:4f:bf:ca:ab:7c:be:01:75:4d:03:c8:
29:24:75:6b:36:33:b6:2a:d1:11:72:12:a0:aa:fc:
f4:82:a9:3c:46:9b:40:7f:c7:ad:8b:5d:19:56:15:
b0:d5:9b:84:9c:b3:e2:ee:0a:f0:66:44:00:bb:f5:
39:0b:7f:62:f7:e8:9a:8e:c2:77:00:80:43:51:28:
6e:f0:da:98:ea:90:1d:5d:42:5b:d5:d8:ab:8f:fc:
d4:e7:29:24:66:34:53:be:e4:27:81:45:16:93:5f:
b8:ea:4b:ba:a7:22:aa:2b:06:60:90:78:32:60:37:
44:4a:7a:4a:c7:bc:cb:73:60:45:68:df:5b:d2:2a:
46:9d:e4:70:79:1e:a2:5a:e2:cc:1c:23:8d:69:2e:
92:d4:00:28:9e:05:81:26:cb:15:0e:a7:f1:a2:82:
df:60:d3:1b:a3:3e:8b:9f:57:cf:aa:37:40:9b:d8:
90:43:63:2c:bd:6b:59:88:6e:85:57:9a:9f:86:a3:
96:6a:12:ee:2a:f8:ff:d0:7c:de:03:00:76:d5:ef:
ad:33:42:45:d0:f8:ff:9f:07:7a:0f:81:bb:02:0f:
a7:a1:b5:cd:ce:8d:98:5d:8a:4a:1c:ca:79:ac:e0:
c5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:B7:09:8D:64:2B:74:E2:3E:16:31:E9:61:0E:FB:2A:23:92:06
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/iR63CY1kK3TiPhYx6WEO-yojkgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.133.140.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:0e:d7:c0:c3:58:49:25:4a:84:ae:44:73:18:30:4c:4e:94:
88:13:6c:aa:3c:02:de:74:9a:26:d7:6d:02:5f:de:ca:94:26:
19:f5:1f:cf:93:fa:c7:0f:1c:60:03:ea:a3:d6:0a:98:43:25:
76:23:f3:90:a6:72:f9:3c:fc:0e:96:68:2e:61:4c:d4:69:d2:
fc:4d:49:53:18:32:c9:a7:fa:49:1e:73:fa:86:1b:e1:c0:b0:
e7:b2:35:bc:cc:1a:65:d6:7d:12:c0:d0:84:f7:58:46:d3:fc:
81:81:13:af:ba:16:62:58:12:68:40:7d:0d:54:23:c2:7e:2b:
6d:58:19:10:2e:6d:57:11:e6:fb:80:16:79:e4:65:d0:a2:0c:
92:72:2e:e5:44:9a:86:08:70:f0:3f:b2:73:2c:a3:48:68:7d:
f6:bd:62:fb:1f:19:59:f8:10:a5:9f:63:49:2f:51:cb:13:bb:
0e:51:c1:15:c6:e5:ab:41:b3:1f:6b:8e:2f:e8:52:ba:20:ba:
2a:4e:68:64:16:ad:03:42:12:1e:f0:dd:bb:22:c5:9b:83:ec:
15:7c:91:ff:92:6b:66:aa:81:e1:7f:59:02:88:35:34:da:60:
66:17:bd:46:2e:a2:6a:b6:59:50:ed:23:e8:8c:89:a0:bd:35:
02:b9:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:52 2026 by rpki-client