Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/iVJ08SxG4feimgPWve7FHmKvN14.roa
File: iVJ08SxG4feimgPWve7FHmKvN14.roa (raw, json)
Hash identifier: zFhC/XqvQ6mooyGtsx8PFTYFm28tXJQuLsuuvmNHdsY=
Subject key identifier: 89:52:74:F1:2C:46:E1:F7:A2:9A:03:D6:BD:EE:C5:1E:62:AF:37:5E
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 019D2A236C353B0453AA2D05CED129AC9F5A
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/iVJ08SxG4feimgPWve7FHmKvN14.roa
Signing time: Thu 26 Mar 2026 12:34:17 +0000
ROA not before: Thu 26 Mar 2026 12:34:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275714
IP address blocks: 45.139.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:23:6c:35:3b:04:53:aa:2d:05:ce:d1:29:ac:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Mar 26 12:34:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=895274f12c46e1f7a29a03d6bdeec51e62af375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:45:30:d0:d7:9e:01:14:2d:d5:10:42:0a:de:
7e:81:61:85:53:d5:2f:13:dd:2e:7d:8e:f1:81:7d:
08:d8:73:bf:03:fa:7e:91:da:7e:e1:a6:45:5c:f8:
b6:54:6b:78:c6:de:31:42:11:13:d5:a6:c1:7f:39:
4e:2d:22:1a:89:47:b7:72:93:1c:67:a8:62:ec:a3:
91:c2:eb:80:a0:1a:89:20:54:cd:e1:c3:7f:b7:8b:
e7:93:99:76:f7:b1:56:b0:ae:54:f8:83:a0:4a:f1:
ed:6b:06:41:a2:92:c1:93:8d:3e:48:63:25:9d:4f:
d7:13:67:ab:b0:1b:07:fd:72:0f:d5:03:5d:3e:ed:
bc:6e:30:d2:b4:62:b8:06:7d:c4:52:f2:89:45:be:
12:6f:45:4b:58:ba:cc:43:43:71:45:d5:4a:4a:88:
29:cc:ea:2e:a1:be:63:44:5f:e6:51:0a:f7:0c:b9:
d4:1f:4c:17:9e:7b:5d:75:a9:f7:4a:11:6a:61:9e:
e9:12:d4:27:51:c7:ce:80:68:a9:0e:0d:52:fc:71:
e8:d2:a7:fc:4a:5c:51:85:51:4d:d2:b0:22:d8:87:
0e:1b:2f:c5:be:84:5e:44:9d:6a:9b:f3:ba:e9:92:
40:ef:03:45:c2:e7:18:4b:d3:47:14:d1:ad:a9:56:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:74:F1:2C:46:E1:F7:A2:9A:03:D6:BD:EE:C5:1E:62:AF:37:5E
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/iVJ08SxG4feimgPWve7FHmKvN14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.208.0/23
Signature Algorithm: sha256WithRSAEncryption
32:10:20:cc:f2:6a:53:93:e8:71:ee:4d:9b:1f:c9:fc:e5:13:
1d:a2:4f:2b:21:18:9e:2d:12:2a:8d:72:26:03:4c:53:0d:6e:
a7:bd:fc:01:aa:3c:f3:42:67:39:00:3f:67:0c:da:9c:94:ac:
10:fe:b1:b5:52:47:d6:ad:4f:9a:a1:69:04:e1:b8:d5:5c:ec:
83:67:b4:dc:e4:5d:6b:1c:ed:fc:0e:62:a1:a2:d8:91:9d:83:
2e:36:05:0e:0f:49:bd:3b:22:ee:d6:56:91:55:33:88:f2:30:
f1:01:bd:37:e8:84:49:9b:60:6b:12:2c:9c:a2:0c:f9:03:93:
9f:76:7c:c5:d9:f4:db:d6:fb:48:3a:db:1e:23:05:9c:22:0a:
83:0c:90:88:39:57:b3:56:c7:56:e4:cb:9e:50:64:1d:87:1c:
3c:5c:4f:1d:00:11:67:e3:c2:be:9c:31:75:0e:b1:35:8b:77:
42:ae:61:58:8b:76:3d:bc:6f:a7:fc:fb:51:5c:40:12:06:09:
fa:d3:14:7e:dd:f6:55:bc:c6:8d:5a:3e:b6:df:e2:5c:40:c8:
a1:a0:af:9b:3f:4b:b6:f5:f9:ad:77:3a:d3:a9:7a:05:c7:4a:
24:e0:5a:d7:53:45:b4:c2:d6:f7:ad:8e:11:c2:ae:97:1d:3f:
2e:bb:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:28 2026 by rpki-client