Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7pwosY-JpSxZJNG9_IZ-1bOApdg.roa
File: 7pwosY-JpSxZJNG9_IZ-1bOApdg.roa (raw, json)
Hash identifier: iQ6JpBx8IUd5kDTnnsNvsyst1DBn0TCH1LdQFSsXQW0=
Subject key identifier: EE:9C:28:B1:8F:89:A5:2C:59:24:D1:BD:FC:86:7E:D5:B3:80:A5:D8
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A0C384FB36388E6A1726C80C174CE23E13
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7pwosY-JpSxZJNG9_IZ-1bOApdg.roa
Signing time: Mon 21 Sep 2026 10:31:07 +0000
ROA not before: Mon 21 Sep 2026 10:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 88.135.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:84:fb:36:38:8e:6a:17:26:c8:0c:17:4c:e2:3e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Sep 21 10:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee9c28b18f89a52c5924d1bdfc867ed5b380a5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:32:38:42:bd:61:81:e5:7f:05:a1:a4:ca:
e5:42:c5:50:80:72:2f:5e:52:f1:ca:e4:d6:29:dc:
98:fe:eb:09:1c:cb:da:32:e6:6b:79:c2:56:7e:24:
c6:34:66:df:04:c8:ab:60:98:28:b5:75:62:5f:49:
08:7f:cb:55:77:28:30:24:51:2d:12:08:07:83:3d:
e3:4b:c5:b2:6f:fe:ea:c1:ba:c9:dd:84:41:49:a7:
b7:e4:4e:74:c0:eb:a9:7b:38:eb:b6:a8:00:c4:37:
71:ce:0b:92:a7:cf:1a:8e:46:52:3b:e7:5b:72:cc:
94:df:a7:f8:b9:e3:5e:b5:9c:15:44:c7:85:85:97:
c1:c2:e1:29:84:d8:1e:2c:2e:3a:98:c1:30:66:a1:
f6:fa:36:cb:3f:7b:62:87:8c:d8:f5:52:e4:10:3b:
ee:a3:27:4b:2e:11:61:41:6d:85:23:a3:20:cb:30:
fd:74:f6:71:cc:01:2f:56:0d:16:5c:7b:65:b7:5c:
f0:f1:72:34:9d:c3:e6:bb:c9:27:0d:10:e0:8e:46:
09:6b:d9:c0:b7:d9:b7:33:24:d2:b6:34:7e:a4:28:
1f:4a:c9:64:c0:2f:dd:b4:c6:c1:11:17:ca:79:71:
33:d9:bf:94:5a:df:70:d1:b6:82:3a:14:1e:17:e7:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:28:B1:8F:89:A5:2C:59:24:D1:BD:FC:86:7E:D5:B3:80:A5:D8
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7pwosY-JpSxZJNG9_IZ-1bOApdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.152.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b5:7c:de:7e:be:4e:4f:e9:27:74:4e:00:4c:07:01:db:de:
5f:a8:5d:46:37:e0:06:d7:d1:c7:10:e2:01:30:5b:76:9d:5d:
2d:83:cb:0b:78:e9:88:f4:e2:6d:77:f2:8b:33:95:d1:8f:8d:
1b:a5:b7:49:f7:28:b6:79:9e:bd:ea:ee:cf:36:c3:2c:62:80:
e4:16:33:11:6f:af:0d:9b:83:af:36:71:70:1b:6d:00:a1:de:
f4:3b:5b:d4:20:7e:7c:41:97:e9:99:7e:7e:7d:8a:31:f1:0d:
97:6e:f2:09:20:75:34:24:9c:93:50:81:1c:46:a2:a7:51:39:
f4:7d:a6:56:9b:d6:e3:66:ce:e5:ee:0d:ea:69:1c:f2:d5:89:
e7:bf:0d:6d:26:31:1b:0b:8e:8f:af:c5:2f:c9:ad:e5:8a:83:
dc:ff:31:a5:d7:51:09:53:bb:eb:41:18:99:80:25:65:bd:de:
65:b6:6b:07:77:ab:07:62:6d:01:9c:b8:9b:d5:41:e0:ed:37:
3e:34:32:68:8f:6c:2b:b7:5b:90:cb:03:76:49:8b:95:94:d4:
90:50:1d:96:5c:ad:ca:75:cc:ec:71:dd:e7:03:5d:33:a1:cc:
a1:d7:2f:76:09:cf:97:45:4e:35:a7:9e:b0:25:92:9b:91:49:
6d:6d:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:56:14 2026 by rpki-client