Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/I7pfTXIXJHEimm7qVeQpO_tW4iU.roa
File: I7pfTXIXJHEimm7qVeQpO_tW4iU.roa (raw, json)
Hash identifier: vbwTQREFiqCMrolOMBOTM+PId5N1a7ar5KTYNrPpmWw=
Subject key identifier: 23:BA:5F:4D:72:17:24:71:22:9A:6E:EA:55:E4:29:3B:FB:56:E2:25
Certificate issuer: /CN=0013c1c1dcb709e9037a3436f5024467df0a638c
Certificate serial: 019F2368F3D559400C2E7A8C077035BE4F9C
Authority key identifier: 00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/I7pfTXIXJHEimm7qVeQpO_tW4iU.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265554
IP address blocks: 185.198.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:d5:59:40:0c:2e:7a:8c:07:70:35:be:4f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013c1c1dcb709e9037a3436f5024467df0a638c
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23ba5f4d72172471229a6eea55e4293bfb56e225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:09:72:80:e2:7d:e2:ad:d3:3c:52:2e:e3:
29:29:ab:53:f8:d4:be:19:83:eb:e3:cd:b1:a0:4b:
1a:e4:58:19:c2:b1:f5:4c:0b:43:1d:1a:7e:e2:87:
12:63:b0:dc:cb:0c:7b:43:7a:06:3b:ca:3a:87:29:
fd:72:a4:3a:e2:53:09:8d:be:d6:06:6d:3f:5c:66:
aa:71:e9:88:08:1c:f7:5f:06:32:5f:42:96:18:af:
6d:2b:8a:9b:1c:bd:55:b9:a1:06:d2:92:9d:e1:d6:
32:25:99:99:c3:8b:3a:2b:5d:b2:7f:35:14:a7:94:
e1:f5:45:df:44:81:50:12:4e:fe:2b:d5:05:f2:33:
91:31:1d:51:49:4f:44:f5:c3:8f:20:e7:72:00:b6:
f8:c0:70:f2:ef:6c:c8:69:e5:d9:69:00:fb:75:8d:
a9:18:fc:8b:e9:d6:89:b2:e7:e8:b1:61:d6:17:3c:
1d:7c:02:5b:84:ee:ae:83:8c:1c:cf:80:b7:d7:60:
e2:03:ed:eb:45:ac:ba:b6:4e:60:b0:a3:fe:29:cb:
6d:e9:79:b9:81:43:3d:42:78:23:80:0f:be:65:ce:
1e:3c:ec:2e:06:f4:6b:25:08:84:69:b0:c9:6b:58:
0b:06:79:18:2f:73:e6:45:44:3a:70:6e:44:cd:6c:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:5F:4D:72:17:24:71:22:9A:6E:EA:55:E4:29:3B:FB:56:E2:25
X509v3 Authority Key Identifier:
keyid:00:13:C1:C1:DC:B7:09:E9:03:7A:34:36:F5:02:44:67:DF:0A:63:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPBwdy3CekDejQ29QJEZ98KY4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/I7pfTXIXJHEimm7qVeQpO_tW4iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/ABPBwdy3CekDejQ29QJEZ98KY4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.100.0/22
Signature Algorithm: sha256WithRSAEncryption
88:d0:88:fb:55:31:d0:d8:09:2b:b3:89:07:d3:00:7d:af:65:
ef:80:f2:14:02:cd:6c:14:03:58:32:6a:a8:3b:23:a7:40:ce:
ef:0f:62:af:5e:8f:04:3c:88:56:f1:2a:54:d7:a6:d3:81:68:
81:c2:74:53:97:2d:3f:04:fe:8b:c9:af:09:7a:5c:5d:98:2b:
08:01:84:0a:3e:1f:71:a4:10:43:9a:10:cf:3e:3d:5b:91:db:
b0:15:ec:19:02:23:69:04:4b:b5:7b:7b:c7:99:4b:91:47:0e:
73:17:f2:52:00:75:54:fb:a3:ea:96:f6:e3:67:5f:26:63:fd:
bd:bc:f5:e1:36:e1:14:50:bd:c0:5b:41:61:44:58:5d:47:b0:
3b:3b:6d:75:e6:dc:2a:7f:fe:63:e8:7e:e9:90:1e:3d:62:9e:
ef:a7:b0:8d:e0:19:fe:25:16:7b:29:8b:94:0a:a7:c6:c6:d8:
0b:b1:b8:56:0f:2b:20:02:e8:8a:ec:6b:10:28:e0:84:8c:9b:
24:e2:29:3f:45:9e:f7:0d:b2:ea:ef:35:a7:cf:81:d1:77:a4:
1b:53:7a:c6:9c:2b:01:1b:01:47:72:13:22:cf:46:31:35:c5:
e6:3e:40:ff:59:70:55:9f:c3:75:77:36:a0:e8:52:30:0d:a6:
cf:ff:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:16 2026 by rpki-client