Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa
File: IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa (raw, json)
Hash identifier: LJmLkrAVOpzOpZpY71yZciCd1TYlZWcX63CtNAvFvDI=
Subject key identifier: 22:85:48:C7:62:37:C7:E3:E1:10:36:8D:88:0D:D0:B2:68:18:45:F5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019CF72D5873CE00DD10961CDA0CBF324CC6
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa
Signing time: Mon 16 Mar 2026 15:04:29 +0000
ROA not before: Mon 16 Mar 2026 15:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200396
IP address blocks: 185.29.253.0/24 maxlen: 24
185.29.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:2d:58:73:ce:00:dd:10:96:1c:da:0c:bf:32:4c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Mar 16 15:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=228548c76237c7e3e110368d880dd0b2681845f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a0:32:4a:d3:c4:9e:61:e6:32:b4:78:36:42:
fd:df:1f:fd:1a:53:10:51:f6:e0:f3:ae:74:49:18:
47:3a:78:1c:4b:97:82:73:05:7a:9b:23:93:ae:5f:
ba:ab:fe:14:d1:2e:20:1e:0f:1c:ca:97:2a:54:71:
f0:32:9c:49:9b:42:b0:cc:24:e0:a9:72:7d:cb:5f:
13:95:39:88:9c:0c:43:65:7a:8b:c3:24:b7:aa:36:
eb:be:90:55:d9:3f:2d:ef:3e:a5:5a:b5:45:95:32:
7d:8d:92:ec:f9:07:54:6e:38:b5:e0:f4:49:a2:9b:
a0:83:ad:29:64:96:3c:f3:ca:de:8d:31:0c:04:74:
55:2c:d0:bb:27:07:01:cb:d1:f5:a9:27:54:df:11:
cd:8c:d0:41:f8:f4:78:57:aa:6a:dc:58:5d:e2:de:
7b:9a:40:44:f6:cd:bb:6a:cf:67:95:20:b6:55:70:
2d:4f:fe:3e:a2:27:a2:73:76:12:9e:22:5c:e0:04:
54:e1:20:23:c9:62:59:20:2d:06:7e:aa:70:03:51:
6f:ee:31:b0:a5:ac:e2:e2:48:79:fd:e4:3b:12:04:
b3:f2:5b:05:96:35:ab:59:5d:48:43:e8:4e:31:81:
7a:b1:5a:34:f3:dd:37:21:cf:b5:4d:ab:6b:1c:3e:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:48:C7:62:37:C7:E3:E1:10:36:8D:88:0D:D0:B2:68:18:45:F5
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.253.0/24
185.29.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:67:34:92:ea:0a:84:cf:34:b5:9c:44:fb:a2:9f:fb:bd:4f:
d4:95:b7:fc:23:80:9d:a7:74:f7:bc:4b:92:01:c4:88:2b:c9:
d8:06:9d:75:2a:2c:56:f3:82:1a:16:a4:41:e1:b8:3e:be:31:
a6:c6:d6:b7:17:cf:ef:cb:43:0c:17:79:fa:0f:d6:46:3c:32:
a2:3e:88:0f:ee:84:5f:02:82:e9:a7:25:57:c0:1b:63:b4:c5:
68:6c:25:ef:4b:a9:72:ce:dc:9c:d7:97:df:b3:06:cc:1a:2a:
74:aa:ba:77:35:93:dc:6b:04:7d:00:71:80:58:2c:28:64:22:
eb:ec:a9:6f:d2:c2:42:83:34:bd:2e:41:09:16:7a:2c:27:12:
ed:d7:38:70:df:cd:e6:60:a6:19:10:ba:bb:91:20:2e:1e:55:
08:9b:07:c3:53:08:c5:4f:91:a1:a3:ea:eb:c5:dc:96:c5:3d:
da:9c:a9:3a:4d:21:35:b4:c5:fa:37:f2:f0:71:81:93:c7:42:
56:f0:6b:c3:5e:e3:79:a7:01:5b:75:7e:55:9f:71:a1:a9:c8:
fe:3c:de:af:45:be:d0:56:69:ff:49:d1:8d:12:92:f5:b2:c1:
9e:98:d3:85:a0:fd:57:87:5f:e0:72:27:32:2e:55:cf:c6:b3:
26:58:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:26 2026 by rpki-client