Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/iJx_C_WMT8KQ4owla7AtWiffaR8.roa
File: iJx_C_WMT8KQ4owla7AtWiffaR8.roa (raw, json)
Hash identifier: cmPWxGf6uIHZJKi9/0I8Bo49XzFIKfEoLuyc9bnyvQ4=
Subject key identifier: 88:9C:7F:0B:F5:8C:4F:C2:90:E2:8C:25:6B:B0:2D:5A:27:DF:69:1F
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019CFA1ED20A66441BA71BE8F6510CC539BB
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/iJx_C_WMT8KQ4owla7AtWiffaR8.roa
Signing time: Tue 17 Mar 2026 04:47:29 +0000
ROA not before: Tue 17 Mar 2026 04:47:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200220
IP address blocks: 63.251.122.0/24 maxlen: 24
162.248.162.0/24 maxlen: 24
194.154.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:1e:d2:0a:66:44:1b:a7:1b:e8:f6:51:0c:c5:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Mar 17 04:47:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889c7f0bf58c4fc290e28c256bb02d5a27df691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:7b:48:aa:36:a1:ee:f5:36:34:25:bc:4a:
a0:cd:e4:fc:ff:a0:cd:bb:70:61:c3:ca:ff:e3:80:
89:0d:e7:62:c8:e9:a0:1d:07:a6:e5:5f:51:ef:65:
d2:09:e8:17:58:f5:1f:53:9c:ad:98:9c:49:6f:72:
30:54:a9:d6:04:6b:01:17:ae:68:6b:b0:0f:fc:5a:
9c:cf:56:62:7d:c8:e1:51:40:27:6d:50:c2:1e:62:
5f:20:06:38:52:f2:60:b4:91:65:d6:0f:19:f4:35:
32:40:5e:6f:aa:97:b5:03:a6:1a:f1:49:54:2f:9b:
72:fd:96:66:5b:4f:f4:bb:a4:74:72:2f:06:e5:96:
26:3d:96:e6:c6:1f:fa:a2:a6:c9:a0:bc:1f:80:9d:
ad:11:63:46:62:53:6e:29:c3:74:27:dc:d0:60:9c:
18:cb:36:88:a8:ff:ee:96:a7:6d:13:41:00:7e:21:
b8:0f:ea:3f:1e:56:c6:46:ac:8c:2d:0b:17:1e:b1:
7e:fb:7b:35:63:b1:ca:96:a4:50:57:f5:22:6f:e0:
f3:eb:f5:fd:b4:4b:51:a7:b4:e8:ba:3b:4f:ee:00:
94:28:22:40:53:58:cb:c2:1f:28:0d:1c:c6:0b:58:
6a:75:46:32:72:72:72:8b:9a:85:80:51:e9:fe:88:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:7F:0B:F5:8C:4F:C2:90:E2:8C:25:6B:B0:2D:5A:27:DF:69:1F
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/iJx_C_WMT8KQ4owla7AtWiffaR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.251.122.0/24
162.248.162.0/24
194.154.28.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7f:d6:b9:52:96:a5:57:2b:9f:b1:23:de:20:60:5e:5b:ea:
c9:8b:df:09:22:8f:31:4c:92:5d:69:74:f2:ec:27:d1:30:bb:
00:26:67:f7:6c:bf:c6:ba:77:63:7d:52:4d:ce:d1:84:11:90:
7a:e3:81:78:02:78:52:ec:54:ba:41:6d:4e:1c:8e:75:48:29:
52:6f:fc:73:d2:79:b9:15:35:94:5c:d9:b8:0f:af:db:9a:00:
49:55:07:b0:75:84:63:0f:5d:a4:f7:e3:c2:33:9b:0e:90:77:
26:fa:42:7a:c1:22:87:a4:14:18:ed:2d:56:04:ee:4a:d8:df:
1c:43:72:99:7c:05:09:a2:5e:35:aa:db:47:48:62:08:71:ec:
e9:08:c2:b5:a1:63:b4:a3:4b:7d:a7:02:d8:08:08:97:8d:35:
6f:d7:62:1d:43:2b:70:46:0d:a7:5e:b1:8a:5a:34:48:da:71:
66:b7:a0:b7:c3:50:8b:65:00:e6:04:26:40:06:3d:63:28:f9:
61:ee:4b:c2:09:c0:81:53:b9:71:e4:e1:3f:46:1f:f4:89:d5:
44:e3:00:25:f5:89:cc:9c:5e:2e:a3:96:fd:e8:95:a0:88:83:
d8:4c:5e:80:f2:a0:2c:2a:a4:c3:b0:28:a8:8e:59:9d:87:16:
3e:0d:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:17:57 2026 by rpki-client