Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/i0ZB22NPtvM-UOklpZMjas02_2I.roa
File: i0ZB22NPtvM-UOklpZMjas02_2I.roa (raw, json)
Hash identifier: ENqUT9mpNNvFDuFzKJZpZjaXVE7YSPVvxFsxyDgigGo=
Subject key identifier: 8B:46:41:DB:63:4F:B6:F3:3E:50:E9:25:A5:93:23:6A:CD:36:FF:62
Certificate issuer: /CN=f770eaa3d3dfa51d93c48375ba8e929917a12283
Certificate serial: 01A1A64983720F0D8884435A1B5DEE181C87
Authority key identifier: F7:70:EA:A3:D3:DF:A5:1D:93:C4:83:75:BA:8E:92:99:17:A1:22:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93Dqo9PfpR2TxIN1uo6SmRehIoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/i0ZB22NPtvM-UOklpZMjas02_2I.roa
Signing time: Wed 04 Nov 2026 11:19:58 +0000
ROA not before: Wed 04 Nov 2026 11:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 194.26.144.0/22 maxlen: 22
194.104.24.0/22 maxlen: 22
194.104.100.0/22 maxlen: 22
194.104.101.0/24 maxlen: 24
2001:67c:3c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/93Dqo9PfpR2TxIN1uo6SmRehIoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/93Dqo9PfpR2TxIN1uo6SmRehIoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93Dqo9PfpR2TxIN1uo6SmRehIoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:49:83:72:0f:0d:88:84:43:5a:1b:5d:ee:18:1c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f770eaa3d3dfa51d93c48375ba8e929917a12283
Validity
Not Before: Nov 4 11:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b4641db634fb6f33e50e925a593236acd36ff62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:49:22:24:2c:55:da:a5:3d:ae:52:c3:d5:
92:b9:5d:6a:db:fa:ef:f7:44:d0:60:6c:3e:8e:41:
9b:e1:39:d0:ca:9d:4a:5d:e1:a5:10:7f:c6:c9:23:
b8:23:4e:67:03:3e:a8:cc:9e:0b:38:24:2c:ef:0c:
70:1d:8a:cd:6a:2b:07:31:39:a2:2c:33:36:76:36:
50:40:14:10:f3:a2:6b:d0:96:d5:47:13:ac:0e:34:
8b:7b:48:02:aa:80:80:fa:b7:85:0b:5d:3a:61:8b:
f0:a6:4b:f6:f5:cf:73:71:5d:a2:6a:4e:b1:fe:ad:
ca:33:fe:83:34:c2:d9:ee:71:9e:a7:61:6c:ac:2a:
92:6c:8b:5a:56:b3:00:7a:0b:90:83:bf:39:a0:77:
dc:33:df:69:52:d3:75:ab:5c:5d:3b:f0:b6:d4:5e:
61:f5:16:1d:f9:e1:8e:75:13:5f:df:7c:ba:70:69:
42:ab:1a:53:33:cf:38:19:8b:64:e4:48:fe:24:db:
50:b5:47:bd:97:5e:81:50:93:0e:b0:4a:ad:c7:f1:
b7:40:86:0e:96:f7:44:0d:27:91:95:12:db:6d:8f:
f3:ae:09:b0:23:7e:f5:54:6e:37:c6:bc:8e:56:75:
77:82:04:7c:05:ca:b1:ea:9a:fe:38:cc:1b:f3:81:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:41:DB:63:4F:B6:F3:3E:50:E9:25:A5:93:23:6A:CD:36:FF:62
X509v3 Authority Key Identifier:
keyid:F7:70:EA:A3:D3:DF:A5:1D:93:C4:83:75:BA:8E:92:99:17:A1:22:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93Dqo9PfpR2TxIN1uo6SmRehIoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/i0ZB22NPtvM-UOklpZMjas02_2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9a4c09-71f2-4234-8d84-d26fa14552ff/1/93Dqo9PfpR2TxIN1uo6SmRehIoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.144.0/22
194.104.24.0/22
194.104.100.0/22
IPv6:
2001:67c:3c4::/48
Signature Algorithm: sha256WithRSAEncryption
ac:36:4d:af:55:cf:3d:62:db:28:8a:c1:89:17:58:91:9c:c9:
50:af:26:91:b5:4f:e0:93:1f:a9:69:f4:41:c3:46:86:1d:23:
cc:c2:1b:65:4e:2d:58:33:68:74:a6:0e:50:08:cf:c4:5d:fd:
8c:67:f3:74:31:b1:45:43:d0:8c:d1:89:bf:19:5c:c9:f6:18:
bd:80:dd:99:f2:0e:a8:79:e5:b6:0a:b4:d6:c0:2b:ff:c0:ec:
13:6b:74:1c:cd:48:f4:70:f4:da:41:2b:01:a3:df:d1:ba:b4:
93:ea:ff:37:60:23:f7:cc:01:dc:00:3a:da:a6:58:db:78:33:
fd:ef:c1:d1:ce:4e:e5:5d:f2:27:2c:02:dd:6e:73:3b:f4:20:
13:a0:07:42:9a:c4:bf:46:03:6f:e5:59:3a:42:52:c3:ce:5b:
e5:af:d0:01:ba:de:44:d1:a4:24:7a:00:ec:a1:33:3c:43:5c:
61:56:9f:5a:11:d5:15:c0:2f:6b:83:16:bb:a2:a2:d6:8f:63:
22:84:22:37:83:ce:f4:8d:a3:cf:98:cf:b5:d5:92:9f:47:ea:
61:6c:fa:75:d6:ff:52:ee:f4:7d:ad:b7:9a:a5:7c:fd:15:a3:
0f:81:23:63:0c:ec:8b:cb:5c:15:70:e3:8d:ce:4c:bf:66:ae:
7d:6a:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:57 2026 by rpki-client