Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/IZCAUD82f3i2oA0GiMqBNWsoJwI.roa
File: IZCAUD82f3i2oA0GiMqBNWsoJwI.roa (raw, json)
Hash identifier: SbW567nXRMDWSIGCIjwxO7prJ7rI/ygbNehL8/xOQB8=
Subject key identifier: 21:90:80:50:3F:36:7F:78:B6:A0:0D:06:88:CA:81:35:6B:28:27:02
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 019CBE247AD27869AE3DD151A75403B7B9C1
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/IZCAUD82f3i2oA0GiMqBNWsoJwI.roa
Signing time: Thu 05 Mar 2026 13:16:27 +0000
ROA not before: Thu 05 Mar 2026 13:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207981
IP address blocks: 195.168.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:24:7a:d2:78:69:ae:3d:d1:51:a7:54:03:b7:b9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Mar 5 13:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=219080503f367f78b6a00d0688ca81356b282702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:52:6c:7d:b0:93:09:ab:7b:60:2f:eb:ff:
2b:99:69:24:d8:97:58:8c:1d:ef:f9:fb:b8:34:b8:
5b:d0:8a:dc:29:6f:25:37:7a:6a:7d:1f:1a:17:40:
48:d3:ae:91:38:59:53:80:0c:6f:2e:f9:33:54:10:
9d:6d:ea:ec:14:3e:e4:9c:02:c0:27:0e:ab:4a:dc:
e4:82:f8:46:00:1c:c7:5c:4a:2b:1d:b0:3f:02:26:
3e:9e:80:2b:c8:b3:18:eb:64:b0:56:09:17:51:b0:
d5:34:e4:70:aa:e1:f1:77:1d:6a:f0:b1:5d:61:3f:
1d:8f:3f:ea:1d:bd:a0:04:eb:6e:43:71:72:f1:3e:
5f:be:1e:2a:97:8b:6b:fb:f2:de:14:a8:ad:8a:b8:
75:5d:0f:37:a8:91:18:15:fa:8b:13:5f:28:b5:4f:
aa:19:7c:cf:5e:da:00:5e:c5:a7:49:87:dd:c9:58:
e5:f6:a9:89:0d:71:c2:a4:9e:02:36:63:02:6e:f2:
3a:56:7b:2d:e6:89:d8:4e:55:8a:a7:ff:97:2c:82:
bd:8c:b5:01:61:f7:12:b4:c6:e9:bf:a0:e8:bc:26:
f1:45:0e:fb:fe:19:c0:2a:80:f9:85:69:6e:05:f4:
67:2c:e9:d9:c6:5e:e2:df:6c:26:7b:63:b8:14:ff:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:90:80:50:3F:36:7F:78:B6:A0:0D:06:88:CA:81:35:6B:28:27:02
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/IZCAUD82f3i2oA0GiMqBNWsoJwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
06:98:cc:05:51:d8:0b:b5:69:2f:b4:9f:e5:49:08:4a:d6:37:
07:aa:cc:67:48:8e:9c:50:c6:c1:f2:82:c3:04:74:7e:36:f6:
70:32:f8:13:13:f8:18:e2:f1:1f:cd:de:1e:de:58:c0:b7:c3:
5e:f8:62:7d:20:b7:8e:01:fd:1d:a0:1b:10:e9:28:a3:45:18:
ad:b1:1d:91:16:37:fd:67:48:58:d5:53:87:8b:9c:80:6d:8a:
a7:03:f1:b9:c9:c2:7f:2c:5a:7f:ee:d9:dd:60:a3:0a:85:81:
b3:bc:26:e5:01:d7:32:8e:45:29:53:9b:34:fe:9e:25:6b:c0:
ad:88:2d:21:dd:7c:aa:b6:83:6d:52:21:75:cb:f8:ba:27:66:
51:5a:4a:9d:77:40:18:25:d5:67:48:d5:30:dc:e5:59:48:08:
e4:a4:ba:90:ff:fe:27:ca:da:f5:c2:37:4d:28:87:3a:ee:b5:
f6:e6:90:44:ab:d7:f4:17:65:4a:46:b9:e1:69:34:ec:17:b7:
d2:c5:4b:fa:14:84:ff:c5:3e:21:06:5c:e0:c0:b6:fd:0e:15:
40:8e:07:8d:2a:9b:5d:fe:84:96:ae:3c:60:f4:70:04:e9:43:
6e:ed:3f:b5:98:ab:fe:6f:c9:77:d3:0a:dd:43:cd:66:5c:9d:
31:d5:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:04 2026 by rpki-client