Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/IbI54r9UQEycQUhSG_R7IhAl23w.roa
File: IbI54r9UQEycQUhSG_R7IhAl23w.roa (raw, json)
Hash identifier: Xsth8W4XkRG829Saw23qV/fuk3mylDa5vQqSxMBq6Os=
Subject key identifier: 21:B2:39:E2:BF:54:40:4C:9C:41:48:52:1B:F4:7B:22:10:25:DB:7C
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019C8F7D6AD890076B4AA7626DC95456E325
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/IbI54r9UQEycQUhSG_R7IhAl23w.roa
Signing time: Tue 24 Feb 2026 11:51:27 +0000
ROA not before: Tue 24 Feb 2026 11:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44288
IP address blocks: 79.98.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:7d:6a:d8:90:07:6b:4a:a7:62:6d:c9:54:56:e3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Feb 24 11:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21b239e2bf54404c9c4148521bf47b221025db7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:e5:0d:a8:44:0e:f6:76:89:05:fc:da:cb:
ef:43:1c:20:fb:f2:d1:dc:56:f6:3b:6c:02:45:2e:
92:a3:82:50:3e:59:eb:96:7f:8c:d8:9b:84:3f:9d:
60:c3:b4:f3:99:a6:0b:65:d2:54:1d:48:34:2a:8d:
d0:91:e7:c7:89:4e:c5:8c:1a:ab:34:e7:bb:60:c4:
9a:be:d0:11:77:1c:da:0c:fe:10:34:a9:48:3b:84:
78:6d:cb:ec:73:44:8d:03:44:ae:2b:d4:6a:04:f9:
48:81:58:81:2d:3f:5c:03:82:38:5d:36:f5:c8:0c:
4e:7a:0b:bc:54:fc:7b:b7:90:1d:0e:4b:f1:9c:26:
25:fa:3f:1b:bb:ec:e8:a4:4e:b9:4c:ce:9e:83:31:
c2:7e:c2:01:a9:ee:dd:5e:fe:d1:59:a7:4f:2d:2c:
1e:b7:15:78:b7:14:7a:e7:45:4b:41:43:cb:b7:bf:
2a:db:ab:46:7e:d9:c1:c5:b4:c8:28:07:74:c6:8a:
95:a5:d6:6d:78:e0:84:4b:a0:0a:47:f8:5b:17:02:
bb:df:17:d5:94:e5:b2:b8:90:86:4c:62:c5:a6:7f:
e5:80:7b:98:16:a5:ba:59:6d:f8:07:d5:97:9e:9a:
e3:90:b7:25:b8:df:92:2f:fb:81:08:57:54:cb:96:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:39:E2:BF:54:40:4C:9C:41:48:52:1B:F4:7B:22:10:25:DB:7C
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/IbI54r9UQEycQUhSG_R7IhAl23w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.55.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4b:8a:2a:83:4e:bc:4a:ed:92:69:67:a3:57:59:ad:4d:6a:
5b:ff:f4:46:0a:3e:35:bc:5e:a3:b7:39:e6:08:41:8b:42:4f:
14:a6:a5:5e:e8:cc:7f:c2:45:a4:53:7a:72:64:fb:b4:94:ec:
ce:54:8b:a3:95:50:c7:29:87:c2:07:f1:cd:4e:74:a7:9d:5b:
3c:64:b8:02:5a:f7:08:60:a0:8b:47:e4:59:47:50:25:ad:23:
a5:fd:1f:3a:0b:ca:ad:8a:1c:e9:fe:c0:51:10:df:12:cc:f1:
f0:73:d0:59:72:9f:5e:f2:da:1a:f3:dd:69:15:8b:c4:9f:69:
0f:70:2c:90:92:3f:0e:c8:3f:c3:90:0e:ad:a8:87:30:81:91:
50:9a:82:b0:b6:2d:e8:e4:4c:c8:8a:b0:2d:07:6a:dc:e4:fb:
2a:07:0e:ba:82:20:7e:57:6d:16:5b:10:e7:a0:65:e0:9f:8a:
a6:8f:8b:28:ae:45:20:e1:21:ba:78:92:43:f1:05:54:4b:81:
44:97:a8:b8:29:be:b2:0d:23:e4:b9:61:08:3e:ba:5a:37:a7:
a7:38:d6:95:e3:dc:62:2c:b9:fa:4f:06:8d:56:82:60:a8:90:
10:7c:fe:14:99:d2:07:a1:cd:96:a7:7d:77:ac:22:15:6b:66:
2a:98:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:42 2026 by rpki-client