Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ix0neOrDCeLQQ_nSnZnwiMTuqlg.roa
File: Ix0neOrDCeLQQ_nSnZnwiMTuqlg.roa (raw, json)
Hash identifier: D/4R4S595yBmVfl4io8ZeZ4WRhdajYRj3va//xLpUT4=
Subject key identifier: 23:1D:27:78:EA:C3:09:E2:D0:43:F9:D2:9D:99:F0:88:C4:EE:AA:58
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019DFD4217B2ED32E9AE67C06C5620FA345F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ix0neOrDCeLQQ_nSnZnwiMTuqlg.roa
Signing time: Wed 06 May 2026 12:27:40 +0000
ROA not before: Wed 06 May 2026 12:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34385
IP address blocks: 193.183.119.0/24 maxlen: 24
194.14.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:42:17:b2:ed:32:e9:ae:67:c0:6c:56:20:fa:34:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 6 12:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=231d2778eac309e2d043f9d29d99f088c4eeaa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:42:76:83:0d:7c:bd:76:6c:cb:a8:29:c7:
64:11:aa:9d:76:a5:57:0c:73:b1:96:08:51:76:4e:
95:82:97:58:a9:45:08:d9:ff:13:38:e9:4b:5a:12:
e0:69:e6:37:24:4a:92:3c:ae:75:4b:d9:9e:30:08:
63:e7:79:82:59:6e:8e:4d:be:5a:65:b8:8e:e9:d8:
25:f8:78:34:e8:70:73:4f:d6:8c:bd:0a:2b:4a:c0:
f3:29:84:76:9b:93:6f:68:34:2f:47:bd:09:6f:4a:
a4:70:4a:3a:85:86:90:f5:5c:e5:00:62:ba:0b:96:
a0:99:f4:11:da:bb:ba:de:c9:3f:3e:48:47:8f:a3:
34:40:28:d8:3d:0d:3a:3b:77:05:16:82:8a:cc:0e:
36:65:d1:35:56:34:5e:e6:4d:78:d1:6d:55:e9:44:
4a:02:cc:d4:0f:8a:62:25:d3:9f:04:74:21:4c:f7:
77:94:8e:16:0c:75:c4:ca:dd:b7:e4:28:63:6a:eb:
a0:6a:da:25:ce:dd:04:12:f2:1f:0e:fc:2a:51:b3:
80:2d:61:e9:bb:06:db:96:36:06:d0:4d:fa:58:f0:
6c:52:0f:ce:d6:84:22:2a:2d:69:01:83:43:3a:9e:
23:64:45:87:ab:32:b6:46:ec:2f:0d:38:99:9a:7b:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:27:78:EA:C3:09:E2:D0:43:F9:D2:9D:99:F0:88:C4:EE:AA:58
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ix0neOrDCeLQQ_nSnZnwiMTuqlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.119.0/24
194.14.11.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:f0:5f:1d:f0:60:24:ad:a4:07:29:98:7a:fb:7b:87:47:
13:64:57:6f:3c:8d:33:32:9c:71:4c:40:b0:c1:c4:40:df:60:
27:ce:04:e7:65:e3:80:1d:1f:b1:dc:4b:1a:e0:ab:ac:72:48:
4e:d3:6a:17:e5:39:09:77:b0:fb:5d:08:97:cc:12:15:28:0b:
d8:c4:58:d1:e4:10:93:3b:93:cf:65:09:6f:1d:e1:28:0c:63:
bd:95:52:c0:c5:b3:b6:02:3b:84:77:bc:b4:c5:44:b3:1e:e0:
0c:ac:22:29:a0:6e:fb:f4:2b:32:d1:cb:02:c1:e3:ad:e0:21:
6e:b5:cd:43:72:3a:83:c5:09:f5:9e:25:12:b4:d4:f9:18:eb:
d1:f8:e1:cb:55:25:c5:0e:6b:ca:81:ea:a6:85:44:b3:0d:00:
e1:62:47:9b:9e:fe:cc:26:e5:1f:48:e6:d3:f6:b8:63:0a:f0:
31:21:ec:51:04:fb:d7:4c:a3:4b:49:9b:09:03:6b:aa:62:02:
ae:0c:29:3e:28:3f:7b:83:af:f3:cf:43:fb:57:a9:4b:a3:57:
d8:c0:cb:75:61:04:57:3a:3d:a1:5d:bc:d0:7b:e7:40:8f:aa:
17:2c:1e:9c:c0:88:5b:1b:a9:80:f3:a6:cd:9a:62:fc:f9:61:
e9:b0:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:30 2026 by rpki-client