Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/IL01vDMB3Kf9_hBJlwIm5Li2mNM.roa
File: IL01vDMB3Kf9_hBJlwIm5Li2mNM.roa (raw, json)
Hash identifier: Y+8L81Vu5KRN/HY3Cg3TLtlVW7bT4N11Zre+CT8WYKA=
Subject key identifier: 20:BD:35:BC:33:01:DC:A7:FD:FE:10:49:97:02:26:E4:B8:B6:98:D3
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019F33D8F30CB9072B3AE6306E45F20CEC1F
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/IL01vDMB3Kf9_hBJlwIm5Li2mNM.roa
Signing time: Sun 05 Jul 2026 19:54:43 +0000
ROA not before: Sun 05 Jul 2026 19:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213905
IP address blocks: 2a01:ecc0:680::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:d8:f3:0c:b9:07:2b:3a:e6:30:6e:45:f2:0c:ec:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Jul 5 19:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20bd35bc3301dca7fdfe1049970226e4b8b698d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:cb:a5:80:94:d6:03:2a:f8:e3:d2:eb:94:
2d:94:a5:26:c3:c9:4f:78:ce:66:c0:62:eb:5e:cb:
ac:70:2e:0c:75:58:f6:4d:e9:09:b4:51:67:c8:0f:
3f:b7:46:39:72:4d:b7:10:99:b0:9f:d5:84:f0:57:
cc:2f:fb:49:6b:cd:1f:5a:23:e0:6a:52:0d:f1:6c:
93:fb:08:22:06:63:78:0d:50:3d:2a:f0:31:c6:eb:
22:97:cb:10:4a:ea:89:2f:2c:25:2c:ac:73:49:ad:
59:9f:3f:7f:d2:96:f6:4d:d8:0b:8a:3b:ad:bb:d2:
3c:98:db:a2:46:fc:2d:62:3e:10:71:78:2e:92:79:
66:b7:55:15:ab:37:f0:64:20:b9:ea:3e:1c:38:32:
94:3f:58:02:ae:b9:c3:ab:55:42:ec:c0:ac:6d:79:
f5:73:3b:a6:7b:24:db:9e:9c:83:a0:6e:dd:e2:2a:
32:88:18:98:52:66:dd:a2:27:4a:4c:c2:41:9a:39:
48:51:ad:5b:ff:86:e9:1f:e2:ac:a8:94:6b:bd:c9:
01:6a:dd:52:81:89:c5:5e:50:bc:34:01:35:75:c3:
ab:78:c6:9e:c9:ba:bf:b2:b4:a4:db:92:eb:d6:6a:
df:1f:c2:b5:18:c4:6b:56:5b:6a:c7:ab:fc:ed:d9:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:35:BC:33:01:DC:A7:FD:FE:10:49:97:02:26:E4:B8:B6:98:D3
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/IL01vDMB3Kf9_hBJlwIm5Li2mNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:680::/42
Signature Algorithm: sha256WithRSAEncryption
2d:2c:5b:64:77:e8:a7:e5:00:d6:d2:16:a3:e4:a8:c1:12:e4:
b6:a7:b4:89:2a:7d:49:12:38:c6:3a:2f:69:fb:8f:a6:5c:f8:
df:18:a0:04:59:72:a8:13:e7:77:85:a5:d7:cf:c2:1f:b0:62:
ae:07:20:00:84:1c:e0:a2:57:94:ca:9a:35:a1:a1:78:e6:ef:
4e:73:43:70:c5:50:05:d6:bf:40:04:d2:a4:b2:81:08:b9:03:
6a:d2:85:36:68:00:9c:b0:0a:01:29:42:20:9b:53:29:7f:01:
56:89:8e:95:84:5a:57:c8:2e:8c:3f:ec:3c:3c:2d:76:a6:e9:
28:ba:f3:84:8e:64:13:21:44:b9:94:e8:33:5d:12:16:71:1e:
63:b2:38:02:fc:8a:31:c3:7e:c2:78:17:06:88:50:98:2c:7c:
20:9e:64:88:6e:5d:3c:07:d1:92:ec:a0:b6:d8:82:51:e4:27:
02:fa:4d:c8:d0:a7:2a:80:42:69:bf:0f:20:aa:bf:24:5b:ff:
d1:70:b3:6f:5b:e1:21:11:6a:f3:40:eb:ea:f6:f7:88:c3:a5:
94:b8:39:53:d3:f7:dc:24:d1:f8:72:1b:88:a0:52:bc:38:bd:
11:a5:87:73:19:2d:7f:8e:11:aa:a6:f6:7e:e7:28:d8:ef:99:
a0:e5:41:5f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8z2PMMuQcrOuYwbkXyDOwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0
ZWU1YmUwHhcNMjYwNzA1MTk1NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGJkMzViYzMzMDFkY2E3ZmRmZTEwNDk5NzAyMjZlNGI4YjY5OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD/LpYCU1gMq+OPS65QtlKUmw8lP
eM5mwGLrXsuscC4MdVj2TekJtFFnyA8/t0Y5ck23EJmwn9WE8FfML/tJa80fWiPg
alIN8WyT+wgiBmN4DVA9KvAxxusil8sQSuqJLywlLKxzSa1Znz9/0pb2TdgLijut
u9I8mNuiRvwtYj4QcXguknlmt1UVqzfwZCC56j4cODKUP1gCrrnDq1VC7MCsbXn1
czumeyTbnpyDoG7d4ioyiBiYUmbdoidKTMJBmjlIUa1b/4bpH+KsqJRrvckBat1S
gYnFXlC8NAE1dcOreMaeybq/srSk25Lr1mrfH8K1GMRrVltqx6v87dmA6wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCC9NbwzAdyn/f4QSZcCJuS4tpjTMB8GA1UdIwQY
MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt
NjM0NTE1NDg5NzlkLzEvSUwwMXZETUIzS2Y5X2hCSmx3SW01TGkybU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk
LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKgHswAaA
MA0GCSqGSIb3DQEBCwUAA4IBAQAtLFtkd+in5QDW0haj5KjBEuS2p7SJKn1JEjjG
Oi9p+4+mXPjfGKAEWXKoE+d3haXXz8IfsGKuByAAhBzgoleUypo1oaF45u9Oc0Nw
xVAF1r9ABNKksoEIuQNq0oU2aACcsAoBKUIgm1MpfwFWiY6VhFpXyC6MP+w8PC12
pukouvOEjmQTIUS5lOgzXRIWcR5jsjgC/Ioxw37CeBcGiFCYLHwgnmSIbl08B9GS
7KC22IJR5CcC+k3I0KcqgEJpvw8gqr8kW//RcLNvW+EhEWrzQOvq9veIw6WUuDlT
0/fcJNH4chuIoFK8OL0RpYdzGS1/jhGqpvZ+5yjY75mg5UFf
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:55 2026 by rpki-client