Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I8TNz7wL3ggmbnUv_yM9kOvrAzM.roa
File: I8TNz7wL3ggmbnUv_yM9kOvrAzM.roa (raw, json)
Hash identifier: cptZVowFHlSYaOzY3wpSwttD+8oBkBFo2NhJR2TNpjA=
Subject key identifier: 23:C4:CD:CF:BC:0B:DE:08:26:6E:75:2F:FF:23:3D:90:EB:EB:03:33
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CEABC3D7E2DE03D3A9E7E7D1659337A32
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I8TNz7wL3ggmbnUv_yM9kOvrAzM.roa
Signing time: Sat 14 Mar 2026 05:05:30 +0000
ROA not before: Sat 14 Mar 2026 05:05:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 5.175.170.0/24 maxlen: 24
89.144.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:bc:3d:7e:2d:e0:3d:3a:9e:7e:7d:16:59:33:7a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 14 05:05:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23c4cdcfbc0bde08266e752fff233d90ebeb0333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:8c:0b:7d:72:61:53:23:ee:93:b6:39:90:
1d:4c:55:45:ca:34:90:48:19:78:9a:f8:76:80:27:
1c:13:df:0a:e1:1f:ff:5a:62:e5:07:96:34:d6:52:
26:ed:d9:27:19:91:88:67:b9:7d:4d:5a:49:e3:56:
d0:0a:95:9d:d7:ff:24:df:ae:66:66:c7:1a:62:9f:
0f:81:d6:94:dc:be:8b:88:52:7a:f1:b4:b2:01:5e:
09:e8:28:6c:4f:a0:a1:f1:9a:73:41:a7:71:a9:d1:
dd:6c:1d:be:64:af:5e:40:0e:16:44:f1:7d:ed:2e:
3c:f9:68:0d:82:42:b6:cc:08:ba:73:11:6d:61:de:
60:94:be:6d:40:08:07:36:4b:45:f0:b7:e0:f4:7f:
15:6a:ce:56:b6:81:32:05:42:21:b2:58:b0:3e:27:
9f:19:9c:2c:e9:cb:41:4e:fb:74:f3:5c:e8:f4:ad:
1c:64:15:72:34:e8:6c:14:12:d0:8a:a0:46:96:33:
b8:4e:b8:92:0c:8d:50:9a:37:14:13:e1:30:c6:d5:
c2:2c:6c:e1:f6:a1:21:93:8e:c2:fc:6c:67:72:f2:
dc:d4:d9:57:79:99:34:16:0e:2d:92:74:34:16:f7:
44:dc:bf:fc:04:e7:1c:47:cc:a4:ae:71:b7:47:9a:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:CD:CF:BC:0B:DE:08:26:6E:75:2F:FF:23:3D:90:EB:EB:03:33
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I8TNz7wL3ggmbnUv_yM9kOvrAzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.170.0/24
89.144.63.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2e:e0:b8:4a:1c:f9:cf:cb:4f:57:57:d5:ad:da:d7:24:37:
64:fd:6b:95:5e:cd:93:52:d7:0f:4f:91:1a:62:ce:c1:09:f8:
10:ae:b6:86:8d:26:14:82:da:de:4b:49:3e:49:1b:b5:63:02:
fb:d8:17:3b:b7:aa:af:67:fd:35:e7:21:4d:bf:68:41:35:21:
80:f1:ad:6d:be:1a:d0:0c:e8:5a:5c:90:ef:c9:03:39:aa:d7:
3f:86:10:2d:cb:20:03:5f:34:75:1c:78:17:68:93:36:d9:65:
58:8f:00:df:a4:4a:e9:32:2a:50:83:7e:d0:da:2d:ef:11:0a:
29:98:ed:f3:4d:80:76:f9:b0:12:95:5f:b9:08:c7:a0:d2:c7:
d1:d9:d1:e1:3f:fd:64:e6:cb:ae:f8:9e:da:59:04:fc:44:9d:
9a:4a:08:74:d7:82:9c:0f:ba:ee:36:05:ce:14:53:b8:9f:5d:
70:e7:b0:a4:53:0b:63:1d:b2:d6:d9:7f:d4:43:80:d3:58:ae:
c9:a3:00:72:4c:64:1b:a6:38:26:ca:c3:9c:a4:58:98:f7:39:
8e:97:c0:9d:58:f9:17:a5:0d:74:88:39:84:72:39:9a:e6:6c:
f2:b4:74:05:50:14:9f:a8:63:b1:51:00:90:01:5c:68:25:00:
fb:17:a6:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZzqvD1+LeA9Op5+fRZZM3oyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzE0MDUwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2M0Y2RjZmJjMGJkZTA4MjY2ZTc1MmZmZjIzM2Q5MGViZWIwMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtmMC31yYVMj7pO2OZAdTFVFyjSQ
SBl4mvh2gCccE98K4R//WmLlB5Y01lIm7dknGZGIZ7l9TVpJ41bQCpWd1/8k365m
ZscaYp8PgdaU3L6LiFJ68bSyAV4J6ChsT6Ch8ZpzQadxqdHdbB2+ZK9eQA4WRPF9
7S48+WgNgkK2zAi6cxFtYd5glL5tQAgHNktF8Lfg9H8Vas5WtoEyBUIhsliwPief
GZws6ctBTvt081zo9K0cZBVyNOhsFBLQiqBGljO4TriSDI1QmjcUE+EwxtXCLGzh
9qEhk47C/GxncvLc1NlXeZk0Fg4tknQ0FvdE3L/8BOccR8ykrnG3R5rDtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCPEzc+8C94IJm51L/8jPZDr6wMzMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSThUTno3d0wzZ2dtYm5Vdl95TTlrT3ZyQXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa+qAwQA
WZA/MA0GCSqGSIb3DQEBCwUAA4IBAQA4LuC4Shz5z8tPV1fVrdrXJDdk/WuVXs2T
UtcPT5EaYs7BCfgQrraGjSYUgtreS0k+SRu1YwL72Bc7t6qvZ/015yFNv2hBNSGA
8a1tvhrQDOhaXJDvyQM5qtc/hhAtyyADXzR1HHgXaJM22WVYjwDfpErpMipQg37Q
2i3vEQopmO3zTYB2+bASlV+5CMeg0sfR2dHhP/1k5suu+J7aWQT8RJ2aSgh014Kc
D7ruNgXOFFO4n11w57CkUwtjHbLW2X/UQ4DTWK7JowByTGQbpjgmysOcpFiY9zmO
l8CdWPkXpQ10iDmEcjma5mzytHQFUBSfqGOxUQCQAVxoJQD7F6bF
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:10 2026 by rpki-client