Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa
File: iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa (raw, json)
Hash identifier: h6FlbN1+Nek1LKhgDeDKXC7AdnM99VdSyR1ScXlrIKc=
Subject key identifier: 88:67:6B:DD:82:E2:2D:54:22:EA:3E:43:43:4D:43:18:AB:2E:E6:CB
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019F5B9FF9CE71766B8E1935986872337A1E
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa
Signing time: Mon 13 Jul 2026 13:17:18 +0000
ROA not before: Mon 13 Jul 2026 13:17:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209263
IP address blocks: 109.68.223.0/24 maxlen: 24
2a02:ef40::/29 maxlen: 29
2a02:ef40:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:9f:f9:ce:71:76:6b:8e:19:35:98:68:72:33:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Jul 13 13:17:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88676bdd82e22d5422ea3e43434d4318ab2ee6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:ea:dd:ec:10:9b:11:73:9a:94:3b:9c:2c:
24:8f:a7:eb:e3:c5:96:22:39:8c:68:ea:3f:23:c8:
fd:fa:19:dc:35:f5:9b:ed:03:56:bb:be:db:39:99:
b5:ef:99:6e:bf:07:f5:04:12:26:de:6a:87:40:01:
d7:6d:97:14:2c:8e:10:d9:c9:f1:05:4c:cb:b5:59:
46:0b:a1:54:93:c7:e4:7d:0a:38:80:84:c6:2a:94:
cd:a9:1c:ef:e9:f2:90:c9:b8:eb:bc:8e:9c:7a:fb:
06:fb:01:6a:2c:ee:c7:60:b4:47:b7:4e:86:e2:e8:
aa:6b:ac:2a:18:d5:76:a8:b4:0b:b4:0a:13:46:ed:
ca:3f:91:6d:c6:50:6f:76:0c:25:e4:25:52:2c:a2:
8c:94:01:0d:69:61:b9:a9:aa:70:4f:9b:2f:29:f0:
52:f0:fd:f3:32:5f:66:99:f6:0d:4f:aa:60:ec:bb:
d9:af:46:24:c6:39:d9:51:56:58:7a:bb:52:e6:f4:
99:1e:ba:3f:6c:a3:14:3d:da:34:bd:3d:02:f4:7b:
e1:17:d5:63:38:d7:72:b6:11:b9:fa:8d:0b:93:f8:
c0:2a:8d:bd:74:1e:5d:53:6b:74:b8:ea:b6:6f:e2:
73:67:8f:9d:90:89:79:f7:b9:8d:90:ff:8f:b5:c1:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:6B:DD:82:E2:2D:54:22:EA:3E:43:43:4D:43:18:AB:2E:E6:CB
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.223.0/24
IPv6:
2a02:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
27:89:10:bd:6c:a2:e3:b6:a2:41:8e:4c:00:4d:c1:6a:5b:d9:
53:78:33:79:45:06:ff:41:8b:ce:0e:61:12:ca:7c:7d:17:8d:
db:f3:c9:21:35:95:e3:8b:92:1a:22:7c:b2:c6:2a:a1:af:89:
4f:d2:94:9c:69:cb:f5:ad:4e:cd:88:81:06:8c:d9:95:4b:34:
cb:c3:1f:11:15:0f:3f:bc:fe:91:4a:7c:53:d4:e4:38:36:da:
7b:ee:20:b8:f5:f4:88:3c:ff:b1:b8:27:c0:d1:0b:d5:c0:9c:
b0:a4:0b:a7:3e:36:ad:ca:ec:2c:d1:1f:71:1f:2e:0e:49:2a:
da:42:94:b2:9c:63:fa:b9:40:b2:07:ed:6f:f7:de:86:2d:3a:
10:fd:db:e7:7c:6b:13:b9:b5:b3:43:be:22:7c:66:2b:e1:2e:
49:e1:17:aa:8c:14:ca:e3:21:3a:04:3b:83:50:5d:d0:9f:75:
49:f9:1e:3b:3d:60:a9:52:b1:12:4d:74:26:82:71:cd:dc:c6:
de:46:d8:ff:db:d5:45:39:75:74:5b:de:81:83:a3:91:81:4f:
c3:09:6b:ec:45:e6:b1:f7:05:3e:3f:1e:07:d9:4b:a4:a1:9b:
aa:ee:8f:e1:ed:d5:a3:14:11:d7:9d:7b:f6:30:e1:49:2b:73:
79:34:5b:73
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ9bn/nOcXZrjhk1mGhyM3oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj
YzcwYTkwHhcNMjYwNzEzMTMxNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODY3NmJkZDgyZTIyZDU0MjJlYTNlNDM0MzRkNDMxOGFiMmVlNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Dq3ewQmxFzmpQ7nCwkj6fr48WW
IjmMaOo/I8j9+hncNfWb7QNWu77bOZm175luvwf1BBIm3mqHQAHXbZcULI4Q2cnx
BUzLtVlGC6FUk8fkfQo4gITGKpTNqRzv6fKQybjrvI6cevsG+wFqLO7HYLRHt06G
4uiqa6wqGNV2qLQLtAoTRu3KP5FtxlBvdgwl5CVSLKKMlAENaWG5qapwT5svKfBS
8P3zMl9mmfYNT6pg7LvZr0YkxjnZUVZYertS5vSZHro/bKMUPdo0vT0C9HvhF9Vj
ONdythG5+o0Lk/jAKo29dB5dU2t0uOq2b+JzZ4+dkIl597mNkP+PtcGPGQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIhna92C4i1UIuo+Q0NNQxirLubLMB8GA1UdIwQY
MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt
ODk3YTRjYzkyOTIyLzEvaUdkcjNZTGlMVlFpNmo1RFEwMURHS3N1NXNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy
LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAbUTfMA0E
AgACMAcDBQMqAu9AMA0GCSqGSIb3DQEBCwUAA4IBAQAniRC9bKLjtqJBjkwATcFq
W9lTeDN5RQb/QYvODmESynx9F43b88khNZXji5IaInyyxiqhr4lP0pScacv1rU7N
iIEGjNmVSzTLwx8RFQ8/vP6RSnxT1OQ4Ntp77iC49fSIPP+xuCfA0QvVwJywpAun
Pjatyuws0R9xHy4OSSraQpSynGP6uUCyB+1v996GLToQ/dvnfGsTubWzQ74ifGYr
4S5J4ReqjBTK4yE6BDuDUF3Qn3VJ+R47PWCpUrESTXQmgnHN3MbeRtj/29VFOXV0
W96Bg6ORgU/DCWvsReax9wU+Px4H2UukoZuq7o/h7dWjFBHXnXv2MOFJK3N5NFtz
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:25 2026 by rpki-client