Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/ItN4mW12iVyH6BrYFKfPQy7lr08.roa
File: ItN4mW12iVyH6BrYFKfPQy7lr08.roa (raw, json)
Hash identifier: /6ILhaZ9nnrQCe2x3LhpJcOwVGQyxXtUIIDXznVVDPA=
Subject key identifier: 22:D3:78:99:6D:76:89:5C:87:E8:1A:D8:14:A7:CF:43:2E:E5:AF:4F
Certificate issuer: /CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Certificate serial: 019F2369101388CED615188BDBD73D3EA351
Authority key identifier: 96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/ItN4mW12iVyH6BrYFKfPQy7lr08.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49072
IP address blocks: 195.230.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:13:88:ce:d6:15:18:8b:db:d7:3d:3e:a3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22d378996d76895c87e81ad814a7cf432ee5af4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:ec:74:ea:e7:62:5d:0a:44:05:05:b7:2b:
3f:2c:a8:f9:e4:3c:0f:4d:16:7a:62:0d:75:fc:39:
0d:5e:3a:0e:ef:5e:17:b0:b9:dd:78:90:2c:ac:e9:
8e:4c:e8:7b:2c:7c:68:7c:2d:f4:da:18:04:ab:5e:
c9:4d:bb:88:3f:a2:da:c5:58:5f:4e:bd:7a:45:6c:
76:77:d3:f4:fe:ed:be:f0:8c:cf:08:3b:98:d3:0f:
c8:29:68:6c:bf:28:4c:5f:1b:d9:88:15:fc:91:35:
3d:3f:91:1a:c7:9d:a6:63:fe:6a:3b:a4:ee:6a:68:
af:d1:4a:d5:23:f5:01:da:c1:7d:57:af:62:2a:e7:
cc:2d:66:6d:01:d6:08:09:2b:68:44:82:e8:3e:bb:
38:b0:fc:74:2c:31:3c:e5:96:97:20:ef:67:ec:53:
bd:90:61:6d:e9:d8:f0:0f:95:b2:28:c7:9e:bf:df:
81:ed:4d:06:47:e9:e7:64:e5:5d:74:ee:42:1d:3e:
9d:64:a3:5d:9f:89:ef:f8:e4:0e:38:a1:50:84:0d:
0d:a1:1f:7c:a8:51:20:c3:be:8b:8e:20:e9:ec:75:
ad:1b:23:4c:ef:5b:cd:dd:c9:68:f3:1c:97:13:c4:
41:04:c6:ea:30:38:ce:26:a3:0c:07:76:f3:58:20:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:78:99:6D:76:89:5C:87:E8:1A:D8:14:A7:CF:43:2E:E5:AF:4F
X509v3 Authority Key Identifier:
keyid:96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/ItN4mW12iVyH6BrYFKfPQy7lr08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.26.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3e:35:5c:b6:79:23:3e:b3:84:1e:29:e3:5c:64:b3:2e:8f:
e3:4e:16:c7:ea:8b:f8:51:74:59:7f:9d:ec:51:28:d9:f5:70:
30:8e:6a:4a:15:ac:8f:08:ce:5e:8c:13:a7:ea:58:b2:a2:0f:
22:a4:ea:85:35:44:1c:7c:18:4f:70:a7:e6:df:fd:b0:5b:b9:
4c:7a:2b:e8:67:2d:af:3f:5d:2b:06:08:28:ae:ef:2d:f6:31:
35:b5:35:30:43:7b:d6:1b:f7:c3:d7:a8:1c:32:1b:c6:5e:7f:
72:49:e8:d5:fe:d5:01:f7:ed:af:50:15:df:b9:76:50:44:e1:
cd:f4:c7:cc:1a:85:77:f9:02:2b:59:f1:04:82:4f:2a:1f:34:
ca:60:82:cb:25:7c:ae:68:9c:fb:21:8c:13:1f:7c:91:77:20:
e8:18:62:4f:ec:bb:9c:15:04:44:3f:71:94:e6:6a:94:6a:85:
ff:91:b5:3e:86:d9:99:02:0f:f6:a1:7f:c4:4a:ec:b3:4a:e4:
2f:05:39:40:41:d1:34:ed:2e:cc:0b:98:ee:2e:f6:61:65:12:
f7:d7:db:0c:8e:99:7d:06:75:db:d3:db:a7:e7:54:c2:1b:a8:
6a:46:aa:d0:c1:7d:49:5e:66:b6:0d:63:91:cc:45:23:6c:cf:
3a:c4:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:46 2026 by rpki-client