Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa
File: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (raw, json)
Hash identifier: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=
Subject key identifier: 23:50:31:F7:C1:4C:4D:4A:B5:11:9F:06:74:2A:53:68:F6:52:4E:E2
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019DB67BA56D6C812D63A00F8F99701C2654
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa
Signing time: Wed 22 Apr 2026 18:37:29 +0000
ROA not before: Wed 22 Apr 2026 18:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214504
IP address blocks: 195.216.168.0/24 maxlen: 24
195.216.169.0/24 maxlen: 24
213.182.212.0/24 maxlen: 24
213.182.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:7b:a5:6d:6c:81:2d:63:a0:0f:8f:99:70:1c:26:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Apr 22 18:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=235031f7c14c4d4ab5119f06742a5368f6524ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:12:12:f1:f3:3c:5e:bf:bd:5b:22:92:f0:
e6:1d:8d:ac:52:da:1d:19:3f:bc:a0:a8:a3:9b:4e:
c6:fd:85:64:13:83:c1:00:cc:13:7f:cc:aa:e0:44:
06:11:07:5f:5d:7c:3c:67:5b:8f:89:98:67:51:d5:
1b:b7:e5:32:51:c0:35:90:6b:ea:44:c7:b4:3b:b3:
96:2e:7a:8a:0f:3d:3c:5b:92:c4:a3:a9:c3:21:b4:
c7:0e:37:8c:b7:f2:72:25:df:a3:8c:63:92:bb:63:
39:19:bf:9b:14:a6:ef:e4:6c:8a:ea:4e:d2:15:d0:
03:57:12:a3:dc:e8:01:c3:d5:5b:01:51:5e:d8:44:
cd:44:8a:a4:b2:ca:b6:6f:3f:07:06:ad:2e:c5:f1:
20:72:71:af:78:0a:af:3e:bd:06:da:ad:55:4a:75:
e6:cb:6e:98:fd:e8:d4:07:db:36:d9:58:df:ba:46:
17:e1:e7:5d:dc:9e:d0:53:e0:99:64:b8:70:24:d7:
f4:f5:b4:35:2b:45:94:2f:05:03:7e:dc:be:48:9b:
75:03:7b:48:d4:70:5c:24:13:f2:47:83:fc:85:78:
f3:4d:1c:c2:40:7d:15:48:79:17:3d:f1:ef:d9:41:
32:bf:73:10:e3:ac:bc:45:a4:26:d6:e9:fe:fb:27:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:50:31:F7:C1:4C:4D:4A:B5:11:9F:06:74:2A:53:68:F6:52:4E:E2
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.168.0/23
213.182.212.0/23
Signature Algorithm: sha256WithRSAEncryption
45:db:80:15:89:50:2f:76:0b:61:70:e4:4c:9d:92:05:f1:af:
80:2b:b6:49:9c:ca:c4:24:ed:38:cf:65:54:42:2f:5f:e1:ef:
a4:6f:27:72:47:63:e2:94:7d:61:af:26:b4:7c:fa:49:61:93:
b3:c1:69:db:40:a6:c2:05:2c:5f:a0:c7:6b:91:df:42:e4:24:
74:fd:28:f3:27:fc:50:bf:5f:f0:de:79:bc:4b:33:e1:90:28:
bb:f1:b3:d0:cd:a8:94:91:a3:b0:f0:18:88:f8:1f:f4:e2:6a:
9a:c5:c2:5f:14:20:ef:84:28:b4:b6:ee:ee:03:1b:82:12:1b:
e5:24:de:05:77:df:08:58:2a:9f:61:42:4f:9c:45:8d:54:d7:
33:8f:89:c3:df:5e:ae:dd:d3:41:db:bb:c9:69:f6:49:f2:bd:
a2:ee:ba:00:ee:10:da:e4:68:f5:4e:5f:58:96:30:7d:ae:94:
cb:f9:24:42:ff:1d:7b:0b:e4:b7:c0:db:1a:cb:e6:f6:50:d5:
bb:4c:f4:2b:78:62:18:c7:f3:0a:a6:c3:38:1c:18:5d:62:84:
74:66:c8:9c:cc:74:e1:74:1a:bd:16:63:63:70:75:98:87:3f:
22:2d:4a:ad:49:82:d8:44:b5:9e:eb:89:ca:9a:33:2e:dd:79:
de:b8:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:18 2026 by rpki-client