Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1yiinZt5yJoGopjt3t085HIa_Q0.roa
File: 1yiinZt5yJoGopjt3t085HIa_Q0.roa (raw, json)
Hash identifier: vZdoiMzPaaUlhrf9iJObwmVsFywWeYo5GhjDIZ5r4E4=
Subject key identifier: D7:28:A2:9D:9B:79:C8:9A:06:A2:98:ED:DE:DD:3C:E4:72:1A:FD:0D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A08B2896DD39039ADAE8CCF46D4D565306
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1yiinZt5yJoGopjt3t085HIa_Q0.roa
Signing time: Thu 10 Sep 2026 11:51:28 +0000
ROA not before: Thu 10 Sep 2026 11:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1653
IP address blocks: 192.36.125.0/24 maxlen: 24
192.71.228.0/24 maxlen: 24
194.14.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:28:96:dd:39:03:9a:da:e8:cc:f4:6d:4d:56:53:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 10 11:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d728a29d9b79c89a06a298eddedd3ce4721afd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:74:f8:77:aa:df:22:34:45:61:80:08:e2:
2a:4a:f9:f5:da:0f:ba:39:4d:13:cd:ad:61:70:28:
80:55:ed:02:f7:6f:0e:79:6c:89:9d:ee:35:bc:dc:
19:0c:c4:13:c6:3b:5a:9c:09:f0:76:b0:14:4d:9a:
3d:13:b9:67:7e:8d:30:2e:e5:81:7f:de:46:71:b9:
56:13:62:8c:8f:70:1c:6e:bb:c1:de:12:86:01:92:
60:a2:ac:80:43:5e:1f:a2:2b:1c:91:1d:19:34:7e:
37:34:11:16:12:90:97:4e:ff:74:06:47:85:03:18:
a2:15:3d:6c:73:0f:36:7c:b0:d1:87:a4:01:3c:b5:
f5:29:04:48:9d:0b:e6:5c:77:cb:53:cf:a3:e7:46:
e2:2b:c1:25:ab:64:86:33:66:3e:db:b7:74:89:aa:
fa:ac:32:a1:6a:78:e2:0b:be:f9:52:0d:a2:22:f8:
f8:02:9d:a6:96:8f:54:55:35:72:f9:b3:dc:ed:29:
0c:f4:55:db:70:f2:fd:fc:67:e4:42:f8:8f:fd:2a:
a4:a9:7c:43:46:8c:c9:6f:a9:34:fa:9b:ae:f5:5e:
5e:02:0c:48:1a:ee:65:f8:90:1c:84:5c:b7:76:50:
b0:d9:74:7d:db:47:61:85:ff:9a:97:89:97:49:a0:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:A2:9D:9B:79:C8:9A:06:A2:98:ED:DE:DD:3C:E4:72:1A:FD:0D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1yiinZt5yJoGopjt3t085HIa_Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.125.0/24
192.71.228.0/24
194.14.45.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6b:69:85:37:68:80:f0:e1:f6:dd:1a:2b:82:4d:d1:8e:13:
1e:c2:9a:96:fb:1c:84:90:9a:c4:db:0b:34:6f:bd:03:47:45:
ba:0e:d3:13:5e:1f:40:e6:8a:28:8f:b5:e0:2d:6e:0e:8d:ca:
61:b1:f8:d5:1c:50:31:5b:7b:13:41:b9:8c:05:1f:61:80:be:
3d:ff:3c:48:21:28:8e:92:b4:0e:0a:ae:d5:c2:41:90:9a:bd:
b3:ed:30:a6:57:5f:ae:b1:28:85:11:47:86:88:7d:a9:a8:02:
81:c5:7d:48:bc:17:52:67:de:08:00:ea:15:68:18:bf:e7:c7:
28:ff:52:0c:c1:7e:22:d8:d4:03:95:d7:a9:10:e8:92:03:39:
a3:a2:24:8a:97:6f:00:13:e3:95:bf:1e:b6:55:7d:18:c5:ad:
24:6a:35:b6:1d:25:ca:fb:60:75:88:3a:d9:e2:5b:16:7a:60:
f7:72:08:37:08:94:b8:d1:3b:41:50:f6:23:2e:37:bf:80:81:
49:da:4e:36:99:16:97:0a:3a:e5:01:e3:09:be:46:2d:c5:e0:
35:69:8f:98:2f:26:63:fd:cd:b7:da:c9:8d:b5:70:60:3d:38:
3b:41:3a:e5:31:a9:f2:d4:5e:a0:40:90:c0:a1:ba:d1:08:a0:
27:5d:3b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:21:13 2026 by rpki-client