Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/iMtYArju-GxZ28LWjEjqh7WOHLI.roa
File: iMtYArju-GxZ28LWjEjqh7WOHLI.roa (raw, json)
Hash identifier: vR2rSY1SVgLQpRVxybvU9HwLrzOtpwEqUr/SdEDJIsY=
Subject key identifier: 88:CB:58:02:B8:EE:F8:6C:59:DB:C2:D6:8C:48:EA:87:B5:8E:1C:B2
Certificate issuer: /CN=05d8c2509fa703211c0d8b25ebf0a59eccfbf470
Certificate serial: 019F2368AB77D998AC1CFE33E5C0A99FA4A4
Authority key identifier: 05:D8:C2:50:9F:A7:03:21:1C:0D:8B:25:EB:F0:A5:9E:CC:FB:F4:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdjCUJ-nAyEcDYsl6_Clnsz79HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/iMtYArju-GxZ28LWjEjqh7WOHLI.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60415
IP address blocks: 185.31.92.0/22 maxlen: 22
185.31.92.0/24 maxlen: 24
185.31.93.0/24 maxlen: 24
185.31.94.0/24 maxlen: 24
185.31.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdjCUJ-nAyEcDYsl6_Clnsz79HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:77:d9:98:ac:1c:fe:33:e5:c0:a9:9f:a4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d8c2509fa703211c0d8b25ebf0a59eccfbf470
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88cb5802b8eef86c59dbc2d68c48ea87b58e1cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:d4:87:3b:6a:f6:81:26:4e:8f:46:6a:23:
f6:72:fb:34:b2:85:55:15:19:ea:b4:99:bb:bd:3f:
42:4c:c9:7e:2f:35:cf:e6:0d:29:1e:6e:ff:ca:28:
0c:d2:6e:10:12:cf:47:af:b3:ae:7e:1e:f3:a2:46:
63:27:4d:5a:a3:fb:6f:89:b4:4a:fa:34:a8:49:6d:
94:b6:8b:6e:f5:2c:ee:f9:f5:4b:7a:63:7f:9f:22:
f8:75:12:14:06:37:be:e9:a4:af:0b:ef:e2:13:2f:
a7:79:99:0a:8b:b0:06:92:31:f5:ca:c8:bc:e2:71:
0a:50:76:9e:23:08:33:67:34:82:f1:e2:c8:c1:4c:
03:35:45:7e:83:5d:26:8b:90:83:d9:78:50:1b:59:
97:da:23:38:b8:29:e4:24:f2:cd:2a:81:b1:70:93:
63:c0:2e:8e:c2:06:71:39:fd:94:85:48:0a:90:26:
78:a5:6c:b8:fe:24:7c:58:46:a0:a5:93:75:a2:18:
98:08:83:ee:e2:b8:7e:8c:05:1d:76:34:3b:ac:c3:
37:c5:f0:44:2a:ba:e3:1f:6b:9f:be:33:49:ef:5d:
6b:cb:a4:9e:82:3c:3e:e2:b9:c4:ae:0d:a4:9b:8b:
fb:21:b0:2d:70:7f:14:4b:aa:d2:4a:37:5c:48:06:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:58:02:B8:EE:F8:6C:59:DB:C2:D6:8C:48:EA:87:B5:8E:1C:B2
X509v3 Authority Key Identifier:
keyid:05:D8:C2:50:9F:A7:03:21:1C:0D:8B:25:EB:F0:A5:9E:CC:FB:F4:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdjCUJ-nAyEcDYsl6_Clnsz79HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/iMtYArju-GxZ28LWjEjqh7WOHLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.92.0/22
Signature Algorithm: sha256WithRSAEncryption
61:8b:80:04:92:d2:a0:8d:8f:9c:58:79:86:06:7c:0b:f9:3c:
15:6b:5a:37:7e:e6:c5:e4:b0:c1:9f:b8:45:97:bb:df:07:36:
c0:70:3c:13:1c:8c:45:29:97:f1:a9:a2:30:a3:c7:9c:7d:fd:
2f:12:5d:31:c0:6c:13:80:2d:a8:2a:b9:b3:ea:ce:13:7a:d3:
5a:26:31:fa:4c:4d:45:ef:3d:e3:d3:da:e7:c1:30:4c:e2:31:
73:ff:61:3c:d0:17:96:04:75:c4:82:7c:c2:12:93:14:e7:fc:
1b:d8:9e:59:a0:65:9d:de:31:2c:3c:22:a7:d3:4e:b9:ec:58:
6c:80:0d:30:d9:78:89:46:b7:0b:b0:d6:bc:8d:02:36:43:7a:
b0:1d:8d:f0:c3:a9:91:66:5c:26:04:8c:32:99:e3:3d:4f:c1:
58:53:19:d9:8d:d4:f1:86:79:b9:e0:ac:b4:a1:2a:4b:44:a7:
af:ee:0d:bf:27:ae:a2:ef:aa:aa:06:99:98:46:99:01:1f:56:
d2:76:6f:c8:d4:36:21:05:50:02:99:f8:33:6b:0e:70:1a:28:
93:c3:0b:31:83:cc:f1:18:7d:57:04:62:6e:fa:9a:e0:4c:30:
45:0a:50:69:f9:cc:91:c7:77:87:ed:fa:3a:e1:ac:b7:44:f9:
92:ee:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:59 2026 by rpki-client