Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/iJxSVbAFop81tRZJNuYo6wfOif0.roa
File: iJxSVbAFop81tRZJNuYo6wfOif0.roa (raw, json)
Hash identifier: SxhE89MXr5geGOtet6ynyWQY6neN9HEjRfevzW29iyM=
Subject key identifier: 88:9C:52:55:B0:05:A2:9F:35:B5:16:49:36:E6:28:EB:07:CE:89:FD
Certificate issuer: /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial: 019D1B7DCE72FF856B666C96B468649D3863
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/iJxSVbAFop81tRZJNuYo6wfOif0.roa
Signing time: Mon 23 Mar 2026 16:18:42 +0000
ROA not before: Mon 23 Mar 2026 16:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9028
IP address blocks: 93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:7d:ce:72:ff:85:6b:66:6c:96:b4:68:64:9d:38:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
Validity
Not Before: Mar 23 16:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889c5255b005a29f35b5164936e628eb07ce89fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:92:f6:48:7d:7e:08:28:23:07:9e:fc:c7:
8d:78:e6:96:fe:89:2a:9c:fa:84:23:c8:21:db:dc:
81:78:ca:d2:24:3a:f7:20:62:10:30:89:ec:a0:91:
9e:e7:b9:67:12:7b:29:b7:d0:c5:c3:e5:dd:f7:dc:
35:90:14:df:9a:60:ee:07:3e:a1:30:67:db:78:c5:
98:2f:0e:e2:dd:42:43:e8:6b:b7:1b:80:41:ae:fc:
fe:83:f5:aa:c9:18:9a:a1:01:d5:b2:1d:95:e1:32:
78:28:63:fd:20:5c:e5:77:2b:e9:ef:b8:e3:fb:66:
bc:54:1c:e4:a0:49:20:9f:79:82:92:a7:19:b6:af:
3a:8c:ed:e6:9e:61:eb:88:60:18:bd:6f:30:65:12:
1b:49:12:7f:f5:c8:44:18:c8:26:c2:57:a3:6a:b7:
22:76:d9:03:25:3d:c2:40:8d:7d:e9:a3:45:d9:a8:
40:2f:be:52:dd:fa:5e:a9:50:24:f8:a9:c0:1b:de:
16:83:f5:78:27:b6:6f:c5:17:e1:08:96:67:56:37:
89:04:f7:48:e5:8c:23:9a:c5:a3:a7:ca:99:24:7c:
8d:9f:54:ff:e8:2e:bd:39:40:eb:ec:a7:00:75:1f:
4b:ac:70:41:40:86:2c:8b:ab:4c:05:33:f3:7a:04:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:52:55:B0:05:A2:9F:35:B5:16:49:36:E6:28:EB:07:CE:89:FD
X509v3 Authority Key Identifier:
keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/iJxSVbAFop81tRZJNuYo6wfOif0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.16.0/24
93.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e7:6c:28:f0:0b:48:e1:9c:cf:de:28:62:fa:b3:fd:09:c0:
4b:71:9b:52:9e:4e:bd:b3:4a:5d:34:49:c2:a1:ad:26:02:d5:
b8:6d:cd:25:6a:6a:80:dd:f2:58:2b:91:59:62:30:9b:f3:55:
95:c7:5c:d3:97:34:14:3e:f5:57:c0:41:ce:e4:66:b1:2d:77:
c0:1c:b1:bd:9f:19:5c:c0:21:5b:a5:d9:9e:cb:13:b6:f5:5c:
11:e8:b2:14:c9:f3:19:8d:a0:1b:18:27:f1:82:d2:97:83:2f:
de:5e:94:fd:40:34:40:0a:91:d6:d5:97:8a:41:87:83:3f:89:
12:e8:be:60:85:2f:6d:a2:f2:d3:56:1c:6f:cd:ae:35:93:a0:
2c:bf:74:56:7e:bd:00:6d:73:94:c6:0d:5d:90:53:ee:1e:0b:
87:89:64:4c:a3:4c:72:e0:f5:86:3c:69:ba:22:c6:e3:f6:f8:
80:e5:ab:7a:b6:28:2c:70:9d:76:90:39:f7:39:9e:02:d5:09:
84:75:22:dc:1f:ac:21:6b:f1:b2:35:d0:98:0a:04:28:f0:66:
7f:68:9b:1f:e1:14:39:bb:ec:89:29:46:a6:4d:50:3f:2a:3e:
f9:b5:7a:05:7d:ee:69:b0:06:eb:a4:c4:ef:75:8c:83:3c:87:
73:20:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:49 2026 by rpki-client