Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/immiAZDECHyBAUp-LlcR4D_osic.roa
File: immiAZDECHyBAUp-LlcR4D_osic.roa (raw, json)
Hash identifier: eA5ckTu4VNpJY0N93yEgjpm67yNF59VNfofrCHHLvro=
Subject key identifier: 8A:69:A2:01:90:C4:08:7C:81:01:4A:7E:2E:57:11:E0:3F:E8:B2:27
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0CDA3049D420882697BE89D0AF2C2A716
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/immiAZDECHyBAUp-LlcR4D_osic.roa
Signing time: Wed 23 Sep 2026 09:40:07 +0000
ROA not before: Wed 23 Sep 2026 09:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207932
IP address blocks: 194.14.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:a3:04:9d:42:08:82:69:7b:e8:9d:0a:f2:c2:a7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 23 09:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a69a20190c4087c81014a7e2e5711e03fe8b227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:3e:1a:c5:0f:34:96:c3:da:b6:fb:7e:f4:
42:2c:32:91:33:eb:96:10:50:bf:6f:6d:a9:2c:47:
62:dc:b2:aa:19:3d:a7:f5:2d:d8:02:d7:f2:b3:9b:
64:69:d8:ce:39:6f:ee:52:9d:a8:0f:46:7d:aa:7f:
ec:10:4f:32:d5:75:8a:3d:85:6e:37:58:e1:7e:a8:
3a:fa:49:22:13:3a:b4:32:ef:24:07:56:65:e2:24:
9e:82:33:ed:9b:66:33:9b:da:33:3d:73:70:cf:f6:
0d:de:37:56:44:dc:2e:4f:5c:de:57:ba:38:15:2f:
d8:18:35:13:dd:4a:6e:c6:d2:6c:b2:6e:ee:1c:73:
74:f2:d3:32:17:64:3c:b1:2a:8b:15:b0:56:95:73:
b4:63:8f:08:f2:ce:13:21:1f:51:26:7a:ac:11:5f:
89:95:df:5e:49:46:b7:e7:98:6f:e7:09:8d:db:ea:
e8:d5:27:57:a0:cc:f8:c8:61:f2:db:db:09:2d:22:
51:f3:b8:9c:26:4e:81:23:b2:e5:35:09:ea:9e:3c:
13:ec:d1:fe:e1:76:5f:6c:e2:f1:9f:d2:ca:db:fe:
49:e9:ab:61:22:ce:4a:6a:c9:49:b8:5f:e3:03:ae:
fb:61:2b:c8:9a:eb:2c:7d:70:fc:19:d9:45:74:90:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:69:A2:01:90:C4:08:7C:81:01:4A:7E:2E:57:11:E0:3F:E8:B2:27
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/immiAZDECHyBAUp-LlcR4D_osic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:39:43:0f:d5:01:8a:cd:68:fa:2b:0a:b4:bf:40:80:e8:25:
78:c2:a6:48:af:cf:03:c2:60:8a:85:23:d4:a8:d0:04:86:83:
83:05:5a:8a:bd:87:5a:d7:2b:83:26:72:19:6f:69:f5:35:02:
f1:1b:20:8f:45:e0:d8:f2:91:47:80:11:9a:c8:2c:63:84:22:
d0:94:30:bb:9c:54:53:a3:1c:4b:a0:f4:0a:39:a7:63:a2:a2:
4b:04:72:0e:5a:21:66:60:0a:42:b8:3f:98:07:29:7b:0d:65:
f7:8d:4c:22:36:e0:b6:c3:8e:5f:06:51:6d:6a:0b:7a:17:af:
1b:aa:d1:23:89:7d:11:82:80:1f:6e:b1:1e:4c:28:ae:1a:ab:
50:59:ae:2f:db:e7:17:fb:0a:4e:15:02:08:bf:6e:0e:e3:f8:
b6:1c:a8:c7:f6:82:45:e9:76:f0:62:9b:83:a5:49:c0:93:a2:
15:8d:f7:6c:1e:7c:c3:8b:a1:57:fd:01:59:60:b8:ab:c0:03:
95:7f:2a:8f:0b:74:90:fd:22:9c:bf:d7:2c:4f:de:bb:46:bc:
41:33:96:59:9e:a0:3c:77:03:cc:b4:63:ac:66:24:1a:7c:fc:
52:d7:20:42:76:1b:b6:e1:35:15:e6:35:e9:ea:96:3b:7f:6f:
1e:da:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:47:15 2026 by rpki-client