Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/IiTxpSmgZctZlLIwc2RZQ31dFWQ.roa
File: IiTxpSmgZctZlLIwc2RZQ31dFWQ.roa (raw, json)
Hash identifier: W89I3B0Mx54Y9ubbD/CySaPLm1IMg6yqDNxgPvSB1PM=
Subject key identifier: 22:24:F1:A5:29:A0:65:CB:59:94:B2:30:73:64:59:43:7D:5D:15:64
Certificate issuer: /CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Certificate serial: 019F2368BD391D31D35D7EEBAA3D7AB95A62
Authority key identifier: 6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/IiTxpSmgZctZlLIwc2RZQ31dFWQ.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206581
IP address blocks: 185.168.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bd:39:1d:31:d3:5d:7e:eb:aa:3d:7a:b9:5a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03833d3becf5f959e12bda7faf8a53eac056fb
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2224f1a529a065cb5994b230736459437d5d1564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:ff:02:70:5a:bb:10:13:d8:a4:e0:13:c7:
34:b3:b7:d2:50:83:71:a6:34:9a:6f:93:72:11:5c:
09:a5:e7:d7:8b:43:7a:d2:6c:d3:44:e3:3b:80:bf:
96:99:eb:ec:a0:c5:84:ec:31:78:fe:1a:91:e6:87:
fb:4e:b1:8f:48:16:eb:ad:a7:5c:73:fc:9d:4f:7c:
71:de:77:e5:c8:01:83:a3:5d:9e:06:15:ed:99:63:
60:af:42:bd:f7:97:ad:32:e0:7a:0f:2a:6f:5c:90:
94:73:50:ff:23:4e:a4:14:91:4f:3e:85:b4:18:45:
97:72:00:7b:38:6c:d5:10:a9:c7:92:50:8d:cc:5a:
aa:cd:67:d7:8e:76:37:a9:92:83:8c:8d:38:c2:81:
f3:7a:f7:ff:ef:3c:13:59:6f:e8:4a:9f:e0:40:cd:
3e:5c:17:49:2f:d0:d6:ee:19:62:bb:06:90:e1:6c:
2f:7c:9f:56:cd:06:56:70:43:83:6b:5b:fb:1e:94:
3d:a0:84:32:a5:14:c7:25:e6:87:15:bc:fd:18:15:
38:b7:e4:68:2c:e4:95:66:6c:ed:af:bd:7f:8e:b3:
62:fa:26:a5:ab:da:32:82:f9:8b:19:a4:97:bf:8d:
00:d1:5d:4b:8d:63:65:d9:27:55:fc:e3:f5:79:9d:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:24:F1:A5:29:A0:65:CB:59:94:B2:30:73:64:59:43:7D:5D:15:64
X509v3 Authority Key Identifier:
keyid:6C:03:83:3D:3B:EC:F5:F9:59:E1:2B:DA:7F:AF:8A:53:EA:C0:56:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAODPTvs9flZ4Svaf6-KU-rAVvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/IiTxpSmgZctZlLIwc2RZQ31dFWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/bAODPTvs9flZ4Svaf6-KU-rAVvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.127.0/24
Signature Algorithm: sha256WithRSAEncryption
67:10:5c:a2:e3:83:18:aa:f8:fe:4b:71:6b:73:a2:ba:64:05:
63:56:79:d4:39:8d:04:12:41:b1:ae:68:42:79:81:bf:8f:7f:
13:52:92:8a:92:37:be:e8:0e:85:ac:46:7b:1a:90:c3:dd:9c:
85:ce:85:78:94:66:a0:85:b2:76:63:d0:17:aa:92:0a:e6:d2:
36:d0:66:bb:fa:5a:55:76:37:15:a3:ba:8f:70:0b:a1:96:af:
f5:b5:a4:06:eb:22:4c:64:d0:f9:b2:76:a7:0c:e1:d5:41:cb:
47:20:fe:5a:59:4f:df:57:48:ca:bd:4b:70:72:06:f5:66:74:
45:c9:e3:46:17:6f:89:f9:34:8e:cc:55:3c:cd:e2:dd:84:2b:
b5:4d:85:d9:5a:b0:3f:7f:5d:e3:8a:67:41:97:dd:d9:f8:ad:
6f:05:48:a2:b2:ec:0a:df:53:d8:88:4b:80:51:e4:1d:e8:16:
18:f9:1f:d7:58:4e:40:fd:42:5c:10:83:fa:4b:af:ff:9d:1b:
d4:ca:ad:cb:e2:ac:1e:ab:44:fb:ed:89:b9:19:39:68:77:d9:
82:0b:d3:68:76:d1:74:63:f7:cb:ca:c2:e3:8a:bc:a3:8d:f5:
44:19:45:94:48:03:9e:65:64:1e:99:64:7a:d6:3c:ff:fb:3d:
c1:b4:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:35 2026 by rpki-client