Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa
File: ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa (raw, json)
Hash identifier: HfggULB+36iVP97JMDur3JZVIMvMcNZa9ngwLysPNW0=
Subject key identifier: 21:34:3F:7C:B9:B1:CB:80:E3:18:12:F8:E6:FC:F6:40:43:2A:18:90
Certificate issuer: /CN=187091cfccc327e62a63b1b743acef32a506554f
Certificate serial: 019F2369258E7FEE3E2432C0F6238C6DE5DA
Authority key identifier: 18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 137.50.0.0/16 maxlen: 16
139.133.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:25:8e:7f:ee:3e:24:32:c0:f6:23:8c:6d:e5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187091cfccc327e62a63b1b743acef32a506554f
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21343f7cb9b1cb80e31812f8e6fcf640432a1890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:48:3d:d7:e5:23:ad:f4:43:9e:34:3c:21:
2a:08:be:ca:2b:68:e2:b8:bb:2a:d5:7c:06:09:b5:
d1:a0:29:c5:3f:79:d0:9f:bf:f8:b2:fd:24:bc:0e:
56:17:c8:9c:79:c8:3a:8d:79:96:f1:16:64:64:b6:
f1:bc:b2:e4:e7:5b:79:37:7b:cd:e0:18:59:5f:f8:
2d:ac:cf:2c:8b:02:ee:7f:62:d5:b1:c7:c7:47:a2:
6a:c4:e6:00:13:f4:23:16:25:c7:d2:70:a2:87:c0:
95:89:23:d9:32:fa:cd:40:aa:ce:32:38:e7:6b:36:
71:9f:36:12:17:87:50:8f:06:ac:59:53:35:09:47:
80:10:84:34:0a:28:af:78:22:10:49:e8:15:f2:a1:
16:b6:cb:d8:96:07:08:83:a9:a7:48:5b:0a:05:7f:
ab:5c:94:0d:2e:4e:2e:7e:b5:5b:e1:09:cd:e4:86:
0a:ed:11:ba:6d:b8:05:ba:36:bf:cc:44:33:34:eb:
70:88:ba:2e:ec:47:4d:f2:9c:ac:12:85:7f:a2:fc:
27:4a:0e:24:fc:07:21:8a:ed:7e:7f:a5:9b:12:89:
0a:31:11:a5:87:23:47:f6:08:6a:04:5e:cb:ff:d5:
93:19:05:60:6e:60:03:b5:36:51:f9:58:5c:f8:39:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:3F:7C:B9:B1:CB:80:E3:18:12:F8:E6:FC:F6:40:43:2A:18:90
X509v3 Authority Key Identifier:
keyid:18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.50.0.0/16
139.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:47:ed:df:c8:93:f8:35:84:4e:27:36:04:75:34:61:e0:c2:
aa:43:8d:64:2a:e2:25:92:1c:75:4c:63:43:f9:08:7f:7a:4b:
b1:c3:66:ad:e8:48:c3:31:aa:bf:7f:57:38:5a:59:47:4a:d5:
17:00:a1:a4:32:a9:69:6e:c0:98:86:ad:f3:7e:99:74:34:cf:
04:a6:36:91:79:da:f2:71:e0:52:36:ef:25:5d:16:16:76:62:
a1:10:20:b2:91:98:f4:a8:98:00:b3:14:55:5e:63:7f:96:55:
04:8d:f3:82:0c:05:e5:ee:b8:c9:f1:85:36:19:24:20:33:84:
22:66:b8:1c:9b:be:ef:ea:5e:b3:d6:01:c7:af:e5:85:18:9d:
63:80:31:ad:27:b6:db:5d:a0:e9:7d:35:42:33:61:fc:4e:5f:
24:f4:b6:c9:90:87:9b:79:e5:5f:43:f6:2b:dd:94:b0:18:53:
91:37:79:0d:fd:a6:07:d8:63:95:2d:78:41:9b:92:e7:66:b0:
aa:fe:1d:dc:00:2f:b2:e8:d6:43:06:d8:ea:ab:46:2b:70:36:
44:81:5e:27:e2:02:3c:7a:fc:f6:af:dd:c3:ae:cb:12:c2:94:
b0:1b:6a:8a:ab:ea:6d:dc:cc:a1:4b:a5:cd:33:df:e1:e1:3f:
a7:37:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:21 2026 by rpki-client