Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/Ibbr-NqjH5zT1iy2X07Ezcm81rk.roa
File: Ibbr-NqjH5zT1iy2X07Ezcm81rk.roa (raw, json)
Hash identifier: 9eFCsDkuGfIqNhJvWLEWzC5tEEtK4gEuKMDK5LAI2X4=
Subject key identifier: 21:B6:EB:F8:DA:A3:1F:9C:D3:D6:2C:B6:5F:4E:C4:CD:C9:BC:D6:B9
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A0B11CC463F849E4F270F6BF1D80FB3FEE
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/Ibbr-NqjH5zT1iy2X07Ezcm81rk.roa
Signing time: Thu 17 Sep 2026 20:44:07 +0000
ROA not before: Thu 17 Sep 2026 20:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213799
IP address blocks: 185.7.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:1c:c4:63:f8:49:e4:f2:70:f6:bf:1d:80:fb:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Sep 17 20:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21b6ebf8daa31f9cd3d62cb65f4ec4cdc9bcd6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:42:0f:d6:87:5e:48:17:df:79:5d:2b:7d:
ea:3f:68:32:ba:c5:5e:3d:27:0c:5b:36:58:b0:04:
f8:c1:c2:a2:e8:23:c1:e5:da:53:b9:63:7d:6e:3d:
ad:7b:5d:b5:a4:29:33:0a:c5:2d:89:0d:aa:72:b9:
61:66:37:fb:07:ae:6d:5e:15:59:a8:6d:ad:77:68:
0e:0f:35:e3:da:55:e6:0f:4f:26:22:c1:07:6e:89:
12:1e:3b:6c:39:fa:94:d9:68:e3:b3:aa:30:23:f2:
54:30:14:e6:13:fd:f4:3a:22:8a:60:2c:56:e6:ea:
d7:4b:02:13:f6:ff:54:70:8f:b6:99:61:ce:ce:65:
02:2e:2c:3e:7f:0a:2d:54:d6:0b:08:72:b1:f2:53:
3a:3e:ee:fc:16:6b:3d:60:6c:6c:31:82:36:a1:26:
3c:da:57:cb:bc:23:28:12:e1:05:a7:e5:84:04:df:
3e:26:89:aa:72:2a:a1:87:8b:e9:ae:21:4c:22:de:
e0:e2:a2:21:3e:8c:3b:93:a8:b7:17:d9:59:83:a0:
10:f8:b8:a9:54:06:54:08:fc:c2:6e:ba:e2:cd:7b:
4d:f0:2e:d1:90:4e:9e:e1:54:34:04:d8:50:c5:ac:
f7:5b:e1:05:b5:ca:13:41:37:76:53:b8:ec:60:1b:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:EB:F8:DA:A3:1F:9C:D3:D6:2C:B6:5F:4E:C4:CD:C9:BC:D6:B9
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/Ibbr-NqjH5zT1iy2X07Ezcm81rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b2:e7:34:a2:44:d0:a2:9f:28:a0:1a:a0:e1:74:95:c6:ce:
a6:f2:c7:b3:50:2e:b5:d1:0d:05:0c:0a:77:4e:3f:f3:96:62:
08:0f:90:e4:51:43:12:dc:67:09:ac:d6:28:f1:e2:6a:6c:24:
cc:27:b2:45:3d:dd:6c:6b:7c:d0:f5:f8:7a:40:02:62:17:83:
62:43:ca:33:27:20:0e:a3:8e:49:af:9f:69:9e:a5:fa:9c:f1:
d7:97:47:e7:93:74:bf:3b:1b:e0:ab:c3:76:a7:46:2d:fb:da:
87:b1:6e:12:fb:b0:be:98:d5:ed:67:2b:bd:b8:55:88:c1:7a:
ca:52:e7:15:25:0a:b5:e7:45:6c:57:89:6e:5a:b8:43:95:f0:
2e:ab:91:c4:f0:f0:b2:d2:2f:0f:0c:41:19:08:d4:e5:30:0e:
4b:16:b1:d5:19:10:9a:a8:e6:58:b0:f4:94:cc:46:bd:d0:78:
2b:f3:c0:d8:3d:52:e8:12:49:a9:8c:c7:9a:cb:1f:ae:ee:c3:
83:0c:a2:7d:1d:c4:3e:6d:1e:44:f7:32:df:09:82:b9:16:96:
50:ae:a9:af:70:0c:25:ce:85:ac:45:d2:02:67:1a:9a:75:68:
6e:47:da:53:61:02:2c:b6:08:09:0a:19:72:23:d5:66:52:08:
5e:9d:ce:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCxHMRj+Enk8nD2vx2A+z/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx
ZDMzMjEwHhcNMjYwOTE3MjA0NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWI2ZWJmOGRhYTMxZjljZDNkNjJjYjY1ZjRlYzRjZGM5YmNkNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgdCD9aHXkgX33ldK33qP2gyusVe
PScMWzZYsAT4wcKi6CPB5dpTuWN9bj2te121pCkzCsUtiQ2qcrlhZjf7B65tXhVZ
qG2td2gODzXj2lXmD08mIsEHbokSHjtsOfqU2Wjjs6owI/JUMBTmE/30OiKKYCxW
5urXSwIT9v9UcI+2mWHOzmUCLiw+fwotVNYLCHKx8lM6Pu78Fms9YGxsMYI2oSY8
2lfLvCMoEuEFp+WEBN8+Jomqciqhh4vpriFMIt7g4qIhPow7k6i3F9lZg6AQ+Lip
VAZUCPzCbrrizXtN8C7RkE6e4VQ0BNhQxaz3W+EFtcoTQTd2U7jsYBvVlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCG26/jaox+c09Ystl9OxM3JvNa5MB8GA1UdIwQY
MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt
NDNkZjQ3ZDVhMWU3LzEvSWJici1OcWpINXpUMWl5MlgwN0V6Y204MXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3
LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQfyMA0G
CSqGSIb3DQEBCwUAA4IBAQCnsuc0okTQop8ooBqg4XSVxs6m8sezUC610Q0FDAp3
Tj/zlmIID5DkUUMS3GcJrNYo8eJqbCTMJ7JFPd1sa3zQ9fh6QAJiF4NiQ8ozJyAO
o45Jr59pnqX6nPHXl0fnk3S/Oxvgq8N2p0Yt+9qHsW4S+7C+mNXtZyu9uFWIwXrK
UucVJQq150VsV4luWrhDlfAuq5HE8PCy0i8PDEEZCNTlMA5LFrHVGRCaqOZYsPSU
zEa90Hgr88DYPVLoEkmpjMeayx+u7sODDKJ9HcQ+bR5E9zLfCYK5FpZQrqmvcAwl
zoWsRdICZxqadWhuR9pTYQIstggJChlyI9VmUghenc6y
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:45:47 2026 by rpki-client