Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ItesaVX--6KIVOzO1n7b4meAsTQ.roa
File: ItesaVX--6KIVOzO1n7b4meAsTQ.roa (raw, json)
Hash identifier: a3y/rOug173Kv/I7FwC9vb7V161WYP4DVkMQwR23EHs=
Subject key identifier: 22:D7:AC:69:55:FE:FB:A2:88:54:EC:CE:D6:7E:DB:E2:67:80:B1:34
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0CC6E7A021128051554CA21D03D571FD9
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ItesaVX--6KIVOzO1n7b4meAsTQ.roa
Signing time: Wed 23 Sep 2026 04:03:07 +0000
ROA not before: Wed 23 Sep 2026 04:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 94.184.32.0/24 maxlen: 24
94.184.36.0/24 maxlen: 24
94.184.41.0/24 maxlen: 24
94.184.43.0/24 maxlen: 24
94.184.45.0/24 maxlen: 24
94.184.46.0/24 maxlen: 24
94.184.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6e:7a:02:11:28:05:15:54:ca:21:d0:3d:57:1f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 23 04:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22d7ac6955fefba28854ecced67edbe26780b134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:26:89:79:2b:69:1a:26:f1:4d:e4:e4:32:
ab:6b:16:c7:01:a8:31:6d:54:1c:da:07:7d:ce:84:
10:8e:a4:97:ee:bf:2e:8a:25:9b:6a:19:af:82:ee:
98:d2:84:73:63:51:01:ee:46:42:bd:a8:e9:c8:82:
1d:73:b7:e3:cf:7c:99:b3:73:af:f6:d6:3a:8e:9c:
d5:19:9c:f3:3f:ae:40:4c:09:25:2c:9a:f9:d7:f4:
51:ce:4e:4f:41:1a:ea:c8:b4:96:44:9c:8e:94:64:
bc:3e:0d:8d:f9:48:06:c5:48:bf:3c:6d:f7:d0:b2:
a6:29:eb:17:0c:d8:87:2c:fb:1a:14:27:3a:bc:ef:
98:ca:7b:e0:4b:ab:ce:cb:c0:61:cc:fe:5b:7f:32:
8b:75:6b:98:86:90:b4:d1:8a:36:b5:25:ac:81:b7:
9a:fc:8d:50:8a:b2:ad:d3:1f:3f:c2:1b:dc:ff:a9:
f3:25:7a:2c:c9:9b:4e:c9:7b:05:3e:2d:74:96:31:
2e:23:d9:b9:55:e2:cb:83:c2:e6:2a:fb:d5:45:53:
ad:56:d7:4f:f1:90:5f:5a:0f:2b:ed:50:d8:a8:f2:
3d:db:4d:46:d2:71:40:4d:85:2b:c5:40:56:c5:2c:
86:5f:bb:29:7a:cd:40:31:44:22:52:32:35:ab:ab:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:AC:69:55:FE:FB:A2:88:54:EC:CE:D6:7E:DB:E2:67:80:B1:34
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ItesaVX--6KIVOzO1n7b4meAsTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.32.0/24
94.184.36.0/24
94.184.41.0/24
94.184.43.0/24
94.184.45.0-94.184.47.255
Signature Algorithm: sha256WithRSAEncryption
34:d9:fa:e7:26:1f:c8:13:80:9b:8c:55:dc:f1:3b:32:db:22:
22:e3:d8:34:bf:0d:05:c1:ea:5c:31:82:0f:8d:0e:bd:1e:b0:
1d:cb:e5:ed:25:1a:f1:6b:82:7a:07:04:7a:b3:43:f4:10:f8:
36:c6:b7:30:3e:9c:38:da:3b:bf:e9:75:24:fa:3b:52:a7:af:
8a:d4:15:d8:3d:7f:8f:9c:d0:d5:77:37:03:a2:cf:bf:8a:c2:
fa:ab:05:f6:43:87:85:a7:4d:c3:eb:98:df:db:0d:4e:8f:92:
a7:71:07:9b:be:2c:c9:4b:71:44:56:cc:23:55:c4:39:76:5c:
51:6d:27:95:0b:6b:3e:e0:6e:3d:57:6b:ee:fe:38:31:42:63:
3b:2c:ef:54:d6:bd:da:1c:67:99:8b:9f:28:c4:69:3b:c8:c2:
04:79:83:5e:b6:f4:09:70:b0:ef:57:11:08:12:11:0a:86:41:
80:cc:f5:dc:9e:56:4a:04:28:0f:06:59:12:5d:1d:3e:80:b4:
a5:5b:84:c9:43:01:dc:be:26:62:50:87:a1:49:d1:47:ca:73:
42:95:1e:95:4e:cd:b9:be:c4:01:e7:2a:74:81:a0:37:1a:30:
90:46:6f:74:2a:5d:48:0b:4b:f2:5e:a6:d7:c1:4d:30:0e:44:
91:d0:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:41:04 2026 by rpki-client