Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ii9LtIl5z4pfeWcOSv4chuHToL0.roa
File: ii9LtIl5z4pfeWcOSv4chuHToL0.roa (raw, json)
Hash identifier: XZ9+lbsPmgFqiDNRTZUxX1Y4b8nNUBrBj4+Zb+KEdjI=
Subject key identifier: 8A:2F:4B:B4:89:79:CF:8A:5F:79:67:0E:4A:FE:1C:86:E1:D3:A0:BD
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A1A0AB194E77C5C4495590B8BECDE45581
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ii9LtIl5z4pfeWcOSv4chuHToL0.roa
Signing time: Tue 03 Nov 2026 09:08:50 +0000
ROA not before: Tue 03 Nov 2026 09:08:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218947
IP address blocks: 153.56.210.0/24 maxlen: 24
153.56.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:ab:19:4e:77:c5:c4:49:55:90:b8:be:cd:e4:55:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Nov 3 09:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a2f4bb48979cf8a5f79670e4afe1c86e1d3a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:61:0b:f8:ff:f5:e8:5e:7b:2e:80:87:a6:
09:ff:31:72:39:4f:a9:e0:76:c5:5a:81:83:e4:6e:
ea:66:99:0f:4e:27:da:e0:cd:c1:d3:ca:41:f7:bb:
60:bb:fc:34:27:ad:cd:e2:bf:a0:8c:fe:7f:33:88:
f0:31:49:61:c0:72:bd:23:6a:95:a0:03:b9:73:44:
74:a0:3a:04:17:51:a5:b1:73:24:aa:8b:be:cb:b4:
1d:a6:21:3a:e1:70:31:fa:5f:2e:39:5f:4c:f3:6e:
27:b6:c9:3c:3b:01:70:04:0e:f3:44:fd:3c:eb:38:
5b:d9:83:a2:29:8d:5b:dd:04:b8:28:d8:1e:aa:97:
69:ad:64:83:31:cf:e7:36:71:58:0a:32:ad:3e:e8:
18:6b:83:ea:36:5e:83:8c:4c:54:1b:6c:51:3d:fd:
63:fe:73:62:23:90:b0:15:ef:09:fa:1e:6c:1b:8f:
e6:03:61:5c:25:2a:c8:b8:45:c2:a8:aa:42:f1:fb:
9b:4c:aa:68:4a:f2:bb:5e:48:9c:5c:f2:89:b1:b8:
c8:2f:fb:65:d0:75:fe:08:f4:b9:fd:c2:a8:f1:84:
39:91:13:32:72:b8:21:90:de:e7:e7:cf:a1:4e:1b:
fb:5f:15:93:5a:78:98:e6:3a:d7:47:0e:d2:ee:29:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:4B:B4:89:79:CF:8A:5F:79:67:0E:4A:FE:1C:86:E1:D3:A0:BD
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ii9LtIl5z4pfeWcOSv4chuHToL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.210.0/24
153.56.245.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ee:74:01:d0:7e:5c:89:f5:49:9b:be:79:45:e5:8b:00:67:
90:38:bd:35:a6:5e:9c:2f:97:d0:cd:df:2a:91:95:d1:45:25:
ef:0f:e8:a0:64:ab:89:47:a6:44:3c:8c:ae:cb:61:99:a3:fb:
26:5e:54:1c:58:9b:b7:0a:f3:da:03:66:f1:71:59:02:fe:fc:
e9:f7:4a:70:06:45:63:e3:99:b6:31:13:d0:d5:eb:69:74:53:
1e:e1:6c:c9:c2:61:97:ae:88:32:cc:a3:23:d6:62:ff:8b:88:
7a:bc:5e:eb:c3:6f:93:aa:bf:8f:5e:18:24:a3:db:8e:9a:3d:
31:85:15:81:f8:d4:05:1c:ad:a9:db:fb:d8:ff:62:41:cc:43:
2c:34:d2:28:c9:1b:e9:dc:73:48:dc:9b:54:8b:3a:76:8a:e6:
0d:52:94:85:df:08:8e:7c:dd:c0:a9:d2:39:a7:1a:01:4d:d3:
36:34:9f:d2:9c:53:2e:61:ea:89:eb:cc:c6:fd:48:b1:90:92:
0c:7e:96:a9:8d:15:9e:55:a9:b3:28:0e:84:1f:3f:00:3c:38:
70:34:c3:57:cc:97:a5:9b:12:2d:30:83:cd:6b:bb:9f:d1:8b:
cb:7c:a7:56:7c:7b:24:f9:4a:80:1e:c7:e7:5f:4a:1a:54:6b:
05:37:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:32:51 2026 by rpki-client