Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/iGOrZqgT3ZT6FbrnZeUIwrOIU5g.roa
File: iGOrZqgT3ZT6FbrnZeUIwrOIU5g.roa (raw, json)
Hash identifier: abZk+RJw5k3+7Q2d1M245B/OEYDe/YAvK/UDDKcNyBg=
Subject key identifier: 88:63:AB:66:A8:13:DD:94:FA:15:BA:E7:65:E5:08:C2:B3:88:53:98
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019E16BFEBD775CAA6B849A027FCE1591D82
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/iGOrZqgT3ZT6FbrnZeUIwrOIU5g.roa
Signing time: Mon 11 May 2026 11:15:36 +0000
ROA not before: Mon 11 May 2026 11:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 84.232.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:bf:eb:d7:75:ca:a6:b8:49:a0:27:fc:e1:59:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 11 11:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8863ab66a813dd94fa15bae765e508c2b3885398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:31:4c:53:6f:b0:9e:56:fb:8b:b6:5b:1f:
2a:8b:6f:59:de:24:02:53:33:8a:9d:aa:28:65:6a:
a7:b5:f5:eb:8c:c5:84:06:84:63:1f:2d:6c:9b:02:
52:00:f3:1a:1e:4f:4e:59:29:6c:ae:e4:d7:06:7e:
e1:27:a7:93:a5:68:19:f0:7b:07:23:48:64:0d:07:
41:df:f8:90:24:e0:9b:d6:0a:9b:b2:c6:a2:7e:ef:
7c:45:9d:33:28:e9:01:f3:33:60:84:a2:1b:87:56:
0b:a9:38:7a:22:e9:72:2b:e2:5a:8b:ea:19:46:b6:
2a:a7:eb:6b:c1:14:71:a2:13:80:12:24:56:e2:11:
72:35:7f:89:a0:33:fa:00:64:a9:35:0e:a4:90:6c:
94:b1:5a:4f:b4:10:c7:df:c2:97:9c:4d:cd:a0:98:
92:92:37:84:8a:ed:64:d4:5b:d8:cd:fa:42:a2:f6:
b0:46:36:a7:6e:33:ac:73:77:a6:c3:54:1a:a5:5b:
c7:16:2a:e5:24:9d:3d:75:a4:0a:b1:7d:b5:f5:8b:
f4:91:96:8f:38:ca:eb:09:60:24:d7:9f:55:46:ec:
8f:f7:a5:7f:eb:17:fe:f2:c1:27:6f:c0:4e:07:7b:
38:fb:68:51:a0:41:6b:44:f5:e8:3f:1f:ca:a4:a8:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:AB:66:A8:13:DD:94:FA:15:BA:E7:65:E5:08:C2:B3:88:53:98
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/iGOrZqgT3ZT6FbrnZeUIwrOIU5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f0:c9:37:14:8e:e6:48:08:f2:90:5d:e9:d2:1b:cc:b6:0a:
55:59:32:ff:3b:70:15:f1:77:7c:f2:68:2b:98:de:f2:5e:1a:
11:d3:41:27:67:9b:f4:2a:c9:b0:18:7f:c6:14:d0:66:e7:2a:
94:0f:5b:79:67:3e:54:16:6e:28:02:6b:be:2e:01:22:06:ac:
8e:84:44:a6:01:5f:1d:9e:83:91:13:44:30:93:85:28:f6:1d:
92:d8:a4:e1:a7:89:39:1e:18:19:e8:93:e4:6d:ba:9c:66:2c:
30:00:c3:51:69:ea:d7:00:5b:5d:20:fd:e3:09:f4:75:79:58:
20:b7:59:4a:b6:ba:44:88:a4:44:72:53:3c:7d:21:e4:50:af:
30:6f:08:7c:69:7f:34:93:b9:af:02:b2:61:fe:3e:af:dc:bc:
46:4f:46:c9:dc:d7:96:d0:04:28:64:09:71:eb:09:46:83:21:
9c:ec:03:a7:0e:1f:96:69:50:cb:3d:ad:89:74:18:d0:fb:1d:
09:58:84:9b:f7:60:85:0c:d4:87:c5:6a:77:e0:4c:16:60:28:
fa:f3:12:d6:68:91:17:fe:00:7e:2d:48:ec:22:2c:85:2e:a4:
5b:9f:e2:7a:91:a6:6c:63:da:65:d9:43:e5:90:29:8d:55:57:
ad:58:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:38 2026 by rpki-client