Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/IuoZZZv4Idh6XvorGPkALwXDxNM.roa
File: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (raw, json)
Hash identifier: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=
Subject key identifier: 22:EA:19:65:9B:F8:21:D8:7A:5E:FA:2B:18:F9:00:2F:05:C3:C4:D3
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019DB57A55DB48A5017660BF711F398807C3
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/IuoZZZv4Idh6XvorGPkALwXDxNM.roa
Signing time: Wed 22 Apr 2026 13:56:26 +0000
ROA not before: Wed 22 Apr 2026 13:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 147.185.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:7a:55:db:48:a5:01:76:60:bf:71:1f:39:88:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 22 13:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22ea19659bf821d87a5efa2b18f9002f05c3c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:f5:75:f7:df:1d:29:d4:ff:9a:8d:7b:98:
37:2d:82:cb:2d:f7:3a:75:63:93:ef:94:c5:43:a6:
9e:c7:21:ac:3a:29:ca:a5:25:e9:66:cd:64:32:a7:
4f:f7:c1:ac:8b:9c:5e:e3:60:a7:60:15:5c:d1:6c:
ee:f4:79:7c:3e:66:06:f6:da:0f:6e:5c:82:b5:b0:
61:88:93:1d:35:d3:f3:6f:ef:12:b1:b2:88:74:88:
81:64:f8:20:ac:d6:f5:15:fe:32:4b:0c:4f:ae:4e:
63:79:81:7c:3c:5e:67:33:36:9f:f6:88:f1:0a:57:
54:8b:c2:cd:09:1c:44:f8:8e:ea:58:78:e6:37:bc:
89:18:74:79:96:e1:2b:3e:29:ac:5e:64:e8:4e:86:
00:ea:14:e2:00:fd:86:f6:c6:8e:cb:fe:e9:ff:5d:
70:d1:6d:44:f9:7d:e4:7d:fe:3d:be:60:e0:ac:38:
8c:c5:b7:d5:50:64:14:21:77:e5:36:75:98:53:50:
37:bf:c2:ca:09:48:fb:1b:c9:c5:0b:d9:18:db:0f:
46:d0:25:0e:79:d1:c5:a4:17:8b:d4:6e:88:3a:60:
63:3e:fe:99:32:f6:8e:60:0f:4b:b8:4d:2b:4e:1f:
8f:f8:96:1b:b8:b1:2f:0e:4b:28:ee:7b:11:46:af:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:19:65:9B:F8:21:D8:7A:5E:FA:2B:18:F9:00:2F:05:C3:C4:D3
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/IuoZZZv4Idh6XvorGPkALwXDxNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:27:72:3e:40:34:a8:bc:59:3f:9d:7f:bb:fd:f1:36:91:bf:
6e:db:83:b3:aa:e6:19:46:79:b3:8a:2a:6b:14:5e:da:ed:9b:
a4:87:48:44:92:23:7f:fa:11:f7:b4:f9:83:c4:66:f5:98:6e:
2c:73:9a:08:48:cb:22:53:15:15:a0:17:75:b0:01:16:dc:e9:
a7:2b:d5:38:95:70:f0:fd:36:6b:61:06:ca:75:d5:72:02:be:
5f:fd:79:48:db:77:0c:a2:96:2a:d3:14:ce:b8:a2:bc:1f:34:
14:12:32:89:37:db:2e:09:d1:f9:20:ee:16:68:f6:7a:74:ab:
96:56:4e:7a:08:a7:af:ba:e6:20:91:e4:f2:11:53:76:7f:a4:
2c:c8:ce:f6:48:b9:2c:0b:de:b4:75:6c:eb:e0:d0:8d:af:08:
31:02:b5:f9:94:c8:df:23:e9:c1:cf:c4:8a:a6:9d:11:14:a6:
04:dc:e1:12:96:d9:61:ff:22:e6:2e:0a:65:79:7a:8b:cf:69:
7a:61:00:c6:75:5a:c7:6c:5a:56:99:5a:b6:02:d1:71:9a:cb:
0f:ac:80:fb:0c:14:97:cd:fd:0d:b5:c9:85:d6:6a:87:9e:5f:
a4:d9:c6:3c:ca:7b:91:b2:4b:b6:1a:87:1b:61:19:14:4c:c6:
7c:e9:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:01 2026 by rpki-client