Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wr7IzsZwodh-0ow4pvbyY_TVAaw.roa
File: wr7IzsZwodh-0ow4pvbyY_TVAaw.roa (raw, json)
Hash identifier: 2AYaLU2Z8ddKlLbaTBA5LKjO/UBeBNtQNae5JOMTcuM=
Subject key identifier: C2:BE:C8:CE:C6:70:A1:D8:7E:D2:8C:38:A6:F6:F2:63:F4:D5:01:AC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019CE75E1B4E72CC389D63B26EC83671B93E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wr7IzsZwodh-0ow4pvbyY_TVAaw.roa
Signing time: Fri 13 Mar 2026 13:23:50 +0000
ROA not before: Fri 13 Mar 2026 13:23:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20626
IP address blocks: 193.183.240.0/21 maxlen: 21
193.235.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:5e:1b:4e:72:cc:38:9d:63:b2:6e:c8:36:71:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 13 13:23:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2bec8cec670a1d87ed28c38a6f6f263f4d501ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:27:e5:4b:a9:94:e1:fd:17:83:56:2b:98:
5c:01:0a:ad:88:02:1a:f1:15:ad:58:ab:a0:20:10:
36:c3:aa:28:58:ee:61:6b:1c:84:bb:94:43:d5:f0:
97:15:dc:60:2a:a2:1e:46:a4:00:db:19:60:3b:69:
03:f8:37:d2:fe:64:29:57:46:d3:7a:51:b0:6e:dd:
97:0b:23:86:6e:5d:26:e6:78:53:b7:8c:b0:84:07:
d8:11:1c:7f:47:08:7a:fc:98:73:f4:58:1c:6c:0b:
cd:db:8f:d2:aa:62:85:b9:bd:7f:b2:e1:60:60:02:
08:cc:08:70:12:c6:93:f8:9b:80:b3:a7:32:c6:72:
bf:5b:19:c1:ae:c4:36:ee:27:1e:3f:58:9c:a4:a5:
ee:38:d6:44:d3:a5:e9:2f:91:c2:c2:5e:a5:6b:ae:
e9:1f:43:6d:b8:d7:1b:d0:4e:74:57:2a:8e:71:48:
e8:1c:1b:05:d5:5d:d9:56:af:9c:11:8c:9c:48:eb:
95:94:ba:6d:46:21:d3:00:ef:10:39:82:3f:a5:23:
1a:c7:1c:b3:6b:ac:ee:81:b7:4c:56:c4:70:23:16:
e2:c0:36:a3:db:f9:b7:d4:eb:85:b2:df:51:4e:ba:
01:fa:cb:c7:8f:18:3b:53:2e:5e:57:86:56:58:8b:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:C8:CE:C6:70:A1:D8:7E:D2:8C:38:A6:F6:F2:63:F4:D5:01:AC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wr7IzsZwodh-0ow4pvbyY_TVAaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.240.0/21
193.235.236.0/24
Signature Algorithm: sha256WithRSAEncryption
af:89:b6:74:cd:e5:66:94:99:0e:21:3e:56:6e:c5:a7:71:7e:
ff:46:ae:78:87:d8:fe:f7:c0:f4:a3:1d:ba:84:b9:f8:6c:20:
19:8c:2c:37:e5:cb:05:3a:c7:f2:1e:32:3b:ec:f2:08:bc:c9:
33:cf:6b:35:10:dc:b9:21:07:df:bd:08:a1:74:88:47:b1:14:
7a:b7:14:5a:ff:29:87:0b:9e:a0:c6:4c:95:83:43:8e:0d:f2:
1f:ae:10:9a:1b:d6:96:6a:9f:86:3b:ab:d2:c5:6d:52:82:24:
55:21:46:b8:7d:a9:0e:1d:4a:a0:91:d8:31:4b:b8:2b:2e:6c:
bd:02:a3:95:94:7e:86:0e:cf:95:72:72:c4:1b:99:2c:16:e4:
7f:04:f9:76:18:3c:12:d4:ae:75:72:4e:78:49:71:0d:de:27:
78:1f:e3:82:51:dc:73:36:b0:c6:7e:6e:c9:b3:cc:b6:00:03:
7c:39:dc:be:90:65:0d:1a:ab:93:4b:35:5d:95:95:82:5a:5d:
1e:89:17:6e:1c:3f:48:1d:0e:71:34:ed:42:6a:13:06:17:06:
57:b8:3a:0b:8c:b4:db:14:4c:93:9c:f5:af:84:22:8b:da:ae:
65:1e:fd:bf:15:35:f8:c9:79:82:8e:5d:bd:a0:c0:94:61:37:
2d:cd:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:36:23 2026 by rpki-client