Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/IXIJrAigMS2KyNlGn9SAWS-uqGg.roa
File: IXIJrAigMS2KyNlGn9SAWS-uqGg.roa (raw, json)
Hash identifier: X7AJTqMC9nUdid2/jCikNAnO+sineLkma/nJ09OZfic=
Subject key identifier: 21:72:09:AC:08:A0:31:2D:8A:C8:D9:46:9F:D4:80:59:2F:AE:A8:68
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 01A020D075D68BBC517A86A48172E8E72609
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/IXIJrAigMS2KyNlGn9SAWS-uqGg.roa
Signing time: Thu 20 Aug 2026 20:15:27 +0000
ROA not before: Thu 20 Aug 2026 20:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216321
IP address blocks: 69.38.206.0/24 maxlen: 24
176.10.89.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
2a13:d8c0::/40 maxlen: 40
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 48
2a13:d8c2::/40 maxlen: 40
2a13:d8c2:6::/48 maxlen: 48
2a13:d8c3::/32 maxlen: 32
2a13:d8c3:2::/48 maxlen: 48
2a13:d8c4:2::/48 maxlen: 48
2a13:d8c4:7::/48 maxlen: 48
2a13:d8c4:8::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:d0:75:d6:8b:bc:51:7a:86:a4:81:72:e8:e7:26:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Aug 20 20:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=217209ac08a0312d8ac8d9469fd480592faea868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:02:d0:22:fd:9b:0f:c4:65:e0:5b:29:27:
8e:23:b2:bb:5c:97:6b:96:6d:a6:88:e4:30:11:8f:
8a:d5:c0:44:96:cb:09:b4:b9:12:12:b3:d9:41:82:
07:90:da:64:64:36:b5:b0:4a:a2:e7:6f:4c:99:ec:
a7:99:c1:a3:7b:28:c2:d1:de:54:f3:3b:17:2b:ac:
76:17:43:aa:d2:a0:bd:58:86:eb:0b:26:ec:20:fc:
bb:bc:b2:76:44:b2:e1:b7:48:fd:f1:5d:45:95:cf:
d8:26:82:c3:8c:7c:10:10:48:a5:44:5b:ad:4c:35:
57:7b:0f:dc:2e:03:eb:6d:2e:37:87:da:fa:95:a9:
d0:db:44:06:65:c6:2d:44:bd:89:77:fd:2d:1b:48:
90:67:cf:66:49:bf:05:92:dc:e9:cc:79:e2:35:ea:
88:80:a9:34:12:31:70:c2:21:de:01:f9:58:b7:bb:
e3:5b:73:d8:01:21:99:a8:de:22:c6:28:f3:82:b2:
6b:d2:11:eb:fc:00:58:48:80:9b:a1:46:3e:6e:64:
08:dc:9c:cf:a6:dc:1d:b5:88:cf:25:20:09:37:c3:
35:06:17:e5:d8:00:45:86:92:c8:49:db:e1:79:d9:
f9:52:7d:54:bf:3b:a8:d7:32:7e:70:94:3a:1b:9c:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:09:AC:08:A0:31:2D:8A:C8:D9:46:9F:D4:80:59:2F:AE:A8:68
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/IXIJrAigMS2KyNlGn9SAWS-uqGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.38.206.0/24
176.10.89.0/24
202.181.204.0/24
IPv6:
2a13:d8c0::/40
2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff
2a13:d8c4:2::/48
2a13:d8c4:7::-2a13:d8c4:8:ffff:ffff:ffff:ffff:ffff
2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:f2:be:80:64:d9:4b:13:e9:cc:24:bc:7a:c3:7b:8c:2a:c9:
20:7f:2b:bb:35:25:d8:ed:17:f0:b7:d5:6b:8e:f6:ab:f2:0c:
bd:55:39:ee:88:a4:9a:f5:a9:a3:92:2a:f2:35:93:e4:6d:e6:
d0:9d:78:fa:a7:ae:dd:53:c5:15:61:4b:8b:ce:7b:47:54:b6:
99:af:82:45:42:ae:31:f7:b6:05:bf:32:3f:f1:da:6c:79:87:
a6:9d:16:f0:64:3d:c9:8b:ff:43:42:30:4f:77:d1:b1:2d:44:
92:82:45:fa:52:d6:60:0c:5b:e8:c0:25:0f:6d:a8:db:e6:6d:
60:66:2f:4a:f4:45:f7:c3:9d:5a:4a:93:5a:27:37:6e:d4:88:
d2:32:c9:52:97:0e:0a:43:59:ea:67:20:45:d7:80:f7:0a:99:
a1:8c:31:7b:cf:0e:b0:bf:1f:93:9e:3e:84:bd:64:ef:ca:91:
bd:46:bb:77:83:ce:d0:d7:ba:b1:41:a2:2e:bc:b5:83:c3:51:
e7:c1:78:ce:ed:d9:84:55:93:22:88:80:5c:d2:e3:39:5f:9e:
76:d8:50:d2:66:ee:7a:9a:27:77:62:8f:03:25:cd:fc:b8:fe:
7e:ef:c2:a1:d3:7f:e9:9f:d1:26:85:9a:e8:5c:05:ce:fc:c1:
fb:3c:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:21 2026 by rpki-client