Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/ICHDtFpI4vWV4cVTKGm5wN7r-QM.roa
File: ICHDtFpI4vWV4cVTKGm5wN7r-QM.roa (raw, json)
Hash identifier: fMljpn2lrUVr1wsjQKKChjoAlG7wIJBwuX2U7qX0fOA=
Subject key identifier: 20:21:C3:B4:5A:48:E2:F5:95:E1:C5:53:28:69:B9:C0:DE:EB:F9:03
Certificate issuer: /CN=c02fe545afcddb1e1690b2ff84e8a798f5a9fb2e
Certificate serial: 019F2368C066DDF87892EE4A7600A616E50D
Authority key identifier: C0:2F:E5:45:AF:CD:DB:1E:16:90:B2:FF:84:E8:A7:98:F5:A9:FB:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC_lRa_N2x4WkLL_hOinmPWp-y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/ICHDtFpI4vWV4cVTKGm5wN7r-QM.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42731
IP address blocks: 194.176.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC_lRa_N2x4WkLL_hOinmPWp-y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c0:66:dd:f8:78:92:ee:4a:76:00:a6:16:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02fe545afcddb1e1690b2ff84e8a798f5a9fb2e
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2021c3b45a48e2f595e1c5532869b9c0deebf903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:54:81:de:93:5e:f9:3a:ac:31:98:4c:89:
7a:b6:49:1e:c3:43:56:d0:03:98:4e:58:3a:1c:e4:
37:e9:99:d3:b6:a6:c0:61:9a:7c:a0:31:3e:2d:cc:
45:ae:e9:59:a3:26:e6:fa:30:8e:cc:c6:97:30:ba:
0b:ad:59:19:8e:76:d2:c4:16:0b:63:7a:18:31:15:
ad:92:f6:7b:f6:8c:6c:da:cb:9e:df:d7:85:5c:31:
24:9f:c5:e7:a6:b2:87:9c:27:a0:fd:50:7b:52:9b:
d6:47:b0:b3:f8:bb:87:50:77:1f:fb:eb:d7:31:c7:
8c:a8:62:d5:32:34:dd:da:da:1c:06:ba:9e:3e:3f:
5e:0d:3d:43:79:18:c2:31:45:bf:65:53:e6:14:4f:
1e:f1:ff:45:b7:2d:f4:0c:36:85:3a:59:43:07:85:
01:24:73:ec:af:7f:25:49:28:56:23:82:8e:1c:21:
c8:19:01:29:ed:5d:6b:2a:45:ef:d2:38:dd:04:5d:
e7:6f:8e:41:c4:aa:83:f4:73:ff:71:5f:4b:7a:bd:
e7:15:54:5c:bb:df:88:74:2b:17:cd:e0:74:b1:26:
d6:d5:ac:3b:23:6d:fa:f4:c1:ba:3b:97:27:d8:95:
39:f6:b8:0a:9c:61:94:13:79:cd:f4:1e:db:ee:6b:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:C3:B4:5A:48:E2:F5:95:E1:C5:53:28:69:B9:C0:DE:EB:F9:03
X509v3 Authority Key Identifier:
keyid:C0:2F:E5:45:AF:CD:DB:1E:16:90:B2:FF:84:E8:A7:98:F5:A9:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC_lRa_N2x4WkLL_hOinmPWp-y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/ICHDtFpI4vWV4cVTKGm5wN7r-QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/wC_lRa_N2x4WkLL_hOinmPWp-y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d0:9e:24:ac:91:f7:b0:70:53:f9:6f:e3:3f:35:eb:4f:f7:
17:39:12:4f:ed:2f:bd:04:45:88:a4:5b:d2:67:62:eb:13:44:
3f:c8:3e:ab:e6:54:6f:c2:50:92:8d:f7:0e:9e:1e:2d:e2:19:
82:a9:f8:7b:01:7e:ad:79:68:4c:33:db:56:4d:fb:25:83:0f:
b9:e7:cb:06:18:fb:8f:a3:51:4d:6b:9a:87:60:58:dc:fa:7f:
50:27:45:39:f1:af:b4:5c:db:f2:da:e9:99:ed:51:37:e4:f3:
81:ca:a5:68:48:82:09:ca:07:c7:21:5f:7d:00:17:7a:42:70:
0a:f6:93:64:c3:15:9a:a6:34:34:85:99:d6:55:e5:b2:ba:81:
78:0c:f4:61:79:04:84:f6:e1:84:25:44:57:f5:dc:08:90:6d:
c5:4a:13:22:52:45:1f:c0:4f:2f:35:e4:fb:91:58:3b:f1:37:
c7:81:2b:61:30:d4:a1:22:57:dc:6e:e9:a0:f1:0d:18:fd:c3:
9b:46:f6:18:92:10:4d:99:52:76:68:80:5f:7d:4e:48:5b:30:
67:2c:58:25:b2:cb:4b:27:86:93:d2:b4:8f:3e:a3:df:e1:af:
ae:12:32:59:f9:ac:ff:8b:8b:52:86:52:2c:c4:9c:89:01:14:
be:ad:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:01 2026 by rpki-client