Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IFda9Uqsk7EeiJXZqIwojYx51Bo.roa
File: IFda9Uqsk7EeiJXZqIwojYx51Bo.roa (raw, json)
Hash identifier: Cd1wlTNf4dKMvJtyA+PbAWbegLFqsNEMc8TtcU57F+A=
Subject key identifier: 20:57:5A:F5:4A:AC:93:B1:1E:88:95:D9:A8:8C:28:8D:8C:79:D4:1A
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019FF4E27C7CEBB8B3C9C16078B44213F4F1
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IFda9Uqsk7EeiJXZqIwojYx51Bo.roa
Signing time: Wed 12 Aug 2026 07:31:51 +0000
ROA not before: Wed 12 Aug 2026 07:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219165
IP address blocks: 141.101.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:e2:7c:7c:eb:b8:b3:c9:c1:60:78:b4:42:13:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 12 07:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20575af54aac93b11e8895d9a88c288d8c79d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:e5:3e:4d:8e:31:d0:fb:a3:47:a0:a7:1a:
a9:6b:53:f6:bc:db:3a:4a:c6:12:dc:48:14:f3:f8:
58:4a:47:e0:61:5b:76:46:fd:63:c3:b0:f7:5d:9a:
16:30:3d:f9:ad:ba:b2:79:a1:a6:5c:94:28:1b:29:
71:c6:81:a1:ef:d9:c8:a8:c6:77:2d:33:1a:05:11:
6d:fc:c3:74:e2:aa:99:be:c9:c0:19:76:03:0d:11:
42:12:89:66:3e:50:99:ab:36:90:c6:56:68:69:a6:
4c:8c:90:56:0e:0a:e8:82:80:f6:64:a7:4f:34:39:
07:e7:fc:34:cb:4e:13:c4:2d:6c:0b:30:d6:46:d8:
93:b3:8c:e2:a8:38:89:07:8f:9c:0b:18:bc:f4:85:
4d:f2:e8:73:f8:fb:e7:44:ba:33:26:5b:87:21:58:
05:3b:2c:fb:e4:06:e3:86:9c:53:75:dc:cf:6c:e2:
2a:fc:86:7f:86:15:6e:8e:6f:a4:cc:33:86:1d:4d:
92:99:a1:23:84:69:82:11:23:b0:00:c9:af:a1:d5:
cd:3c:a4:1a:d6:e5:94:60:d2:33:bd:1d:1c:0f:14:
d4:e2:94:83:2a:4b:e8:76:ea:c4:34:1c:61:33:7a:
a2:60:d3:d6:fc:6c:d6:e5:00:10:6e:2f:e4:52:db:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:5A:F5:4A:AC:93:B1:1E:88:95:D9:A8:8C:28:8D:8C:79:D4:1A
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IFda9Uqsk7EeiJXZqIwojYx51Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:af:28:50:da:c3:01:ec:8d:79:06:40:7e:29:e8:24:f6:26:
c8:25:9c:3d:a4:ee:4e:77:ee:90:6f:6f:72:7c:da:4e:bc:19:
8d:c7:6f:16:48:7e:78:4c:d3:8c:b9:63:e4:3a:e0:da:ae:86:
b6:dd:ed:4c:5b:f0:22:64:36:43:79:a4:83:35:a3:4a:cc:56:
25:22:3a:49:ae:ef:fa:05:9a:24:c8:27:69:7e:b2:e1:c4:ac:
e4:a4:c7:a5:8d:3d:c4:4f:ff:44:0d:de:52:da:25:40:1e:63:
e2:f2:74:e8:af:a2:54:fc:4c:d4:17:0e:93:d7:45:de:78:bd:
13:3a:81:c1:f6:06:db:a9:c1:67:1a:23:29:15:93:17:1f:39:
5a:9a:52:83:04:a6:50:43:d8:a7:a7:43:e4:6b:52:ff:0f:da:
b1:4e:d6:ec:5c:6a:24:a8:df:ce:2a:c9:79:87:a7:51:48:9f:
3b:7b:81:13:d9:ab:95:f9:10:32:ef:7f:a4:20:8b:e4:bd:15:
10:97:67:4e:ce:09:8b:22:52:77:d7:26:b0:b6:e7:58:c4:34:
16:88:72:5d:ce:80:12:fd:d2:71:7e:d6:f1:13:c3:90:3c:6a:
f8:e4:d7:4c:1b:1b:4c:94:1a:36:26:4c:a3:3c:08:e2:7f:47:
8d:8e:d4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:19:43 2026 by rpki-client