Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa
File: imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa (raw, json)
Hash identifier: khbN/ig9hlglazApKQX+gYGTDa2dWuU+YgpXL3Ov0Cg=
Subject key identifier: 8A:62:F4:06:FF:68:36:8E:F6:1D:F6:8F:EA:18:BB:C3:14:3A:80:FE
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019ED4AA1405DE9FA5FFEECAEF92EBC71E86
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa
Signing time: Wed 17 Jun 2026 08:19:36 +0000
ROA not before: Wed 17 Jun 2026 08:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207260
IP address blocks: 147.234.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:aa:14:05:de:9f:a5:ff:ee:ca:ef:92:eb:c7:1e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jun 17 08:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a62f406ff68368ef61df68fea18bbc3143a80fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:5f:e6:7b:47:6f:23:a8:d1:2e:7c:ac:80:
c6:e4:33:68:93:64:10:b8:45:0e:8d:86:f9:c4:9d:
b7:22:c5:58:f1:64:ae:d2:19:e7:23:60:f3:a5:4a:
f4:f9:de:70:b8:73:d8:2d:31:04:83:7d:14:16:77:
f9:12:93:c1:11:a5:45:fa:2d:34:31:b7:76:ad:d6:
a6:86:a3:77:d6:43:c6:da:38:c9:d1:bd:cc:42:95:
89:78:9d:0e:b6:24:f6:1d:b1:fb:73:37:43:62:99:
27:e1:d1:7b:12:f1:0e:3c:c4:b6:26:e4:3a:83:fc:
06:5e:99:e9:15:fd:55:55:66:85:3f:88:12:9b:f0:
57:58:7b:bd:c4:e9:b2:cd:89:35:68:9d:19:eb:63:
96:d1:2f:a1:ac:2b:cc:37:56:ac:fe:5a:f6:8b:63:
ae:8b:65:2e:45:ac:fd:2a:d0:a0:f2:77:ee:1d:68:
5a:d9:99:13:b6:61:88:5b:b6:3e:6a:2f:04:af:02:
ad:79:3a:e7:b1:c5:e0:f5:37:b2:75:3c:2b:5f:cd:
1f:9a:a0:b6:e7:54:39:1a:73:6f:31:24:29:1b:20:
0b:01:19:d9:57:ec:03:b1:b2:3a:db:eb:85:80:a9:
b7:65:aa:b3:44:60:01:a7:a7:32:b0:ce:2d:42:82:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:F4:06:FF:68:36:8E:F6:1D:F6:8F:EA:18:BB:C3:14:3A:80:FE
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ab:47:18:f5:b7:20:17:26:52:90:34:a9:5b:f6:eb:5d:80:
1b:28:93:76:26:e9:e6:b0:55:d0:bb:04:bf:7d:1b:f8:4d:ed:
bd:5d:14:90:8f:74:f0:4e:1f:d7:e7:7b:5a:97:8b:30:3b:40:
9d:31:1a:52:98:a9:64:57:63:72:3e:b9:86:7a:92:b8:b5:63:
dc:2d:ea:7e:70:00:a3:63:09:f1:ba:24:88:fa:94:17:8f:f9:
de:59:ac:2b:31:2d:cf:4a:fd:4f:a4:90:f8:0f:aa:e1:b1:ad:
7d:76:77:b0:bf:eb:2b:87:7b:cf:7c:b2:8f:38:b3:1c:b0:12:
2d:be:4b:5a:ca:26:c8:d2:8c:f5:72:30:89:63:97:db:88:c4:
d5:4e:d5:bd:79:e6:66:84:86:61:6e:ba:38:8e:88:49:7f:16:
8f:98:21:1a:56:73:0f:b8:02:7c:12:a4:4e:d0:0c:ea:60:f2:
46:c7:b4:35:79:d7:d2:04:5c:2d:70:54:36:41:87:25:b0:c0:
16:44:6f:29:88:86:ee:25:8f:78:fb:0b:a7:9f:c9:80:93:bb:
cf:d9:c2:40:c1:f8:19:f2:28:8b:de:f7:cf:12:f4:54:0d:1b:
35:f2:5d:de:2c:2a:3c:89:4a:ab:16:bc:e9:3d:5a:8a:ae:ed:
51:9d:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:34 2026 by rpki-client