Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/sijAZFXqLEAsSi2rQmlGly-OpqE.roa
File: sijAZFXqLEAsSi2rQmlGly-OpqE.roa (raw, json)
Hash identifier: nt4ShhsIrV0zPjcFLpG+lSg9q9cr8DdHdWhyP7LPzjo=
Subject key identifier: B2:28:C0:64:55:EA:2C:40:2C:4A:2D:AB:42:69:46:97:2F:8E:A6:A1
Certificate issuer: /CN=263c9c5ee318264730976fafc7291533ebdab0ae
Certificate serial: 019F23682BAE7A898E89B23F47E5515A2C2D
Authority key identifier: 26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/sijAZFXqLEAsSi2rQmlGly-OpqE.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60720
IP address blocks: 81.25.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2b:ae:7a:89:8e:89:b2:3f:47:e5:51:5a:2c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c9c5ee318264730976fafc7291533ebdab0ae
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b228c06455ea2c402c4a2dab426946972f8ea6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:60:7d:37:49:11:c3:a7:4a:6d:ef:a8:8e:
91:76:48:5c:52:0e:4d:bb:77:57:b4:c3:09:4a:fb:
cc:06:98:45:72:e6:b6:6a:64:3f:40:10:05:a7:0f:
e6:26:3b:80:c6:c3:04:8e:58:eb:25:a1:1c:e1:4b:
c1:56:8d:d5:77:3e:fb:cb:9b:7c:d2:4b:43:fe:bd:
79:f1:29:3d:95:6f:5c:b5:36:09:54:a4:e6:e4:03:
20:f0:37:ac:44:68:b7:93:2f:6e:cd:d2:ee:90:6a:
16:b7:a3:32:8a:80:4b:b3:47:54:f0:8d:41:95:ff:
05:85:a1:f9:1c:8e:93:74:90:3c:44:b9:45:d6:9e:
0e:50:8a:29:1d:4d:fe:89:29:f1:02:d8:29:4e:2a:
f5:d7:c6:11:3b:8d:8c:2c:23:80:75:34:93:b9:8c:
9d:9e:8e:6c:42:a0:fc:ed:46:2b:1e:bc:7a:f2:93:
8e:82:c0:88:bf:07:2b:e8:0e:8e:f7:c1:4d:1d:a3:
d8:7c:57:eb:b2:c8:8d:ea:02:9e:73:8d:3c:80:32:
1d:64:c3:eb:99:21:cf:67:44:aa:ce:fb:3a:88:cb:
90:b7:ee:34:02:1b:27:d4:08:97:98:71:17:72:3a:
09:2a:00:ac:69:41:1f:ac:dc:b5:76:3b:e4:05:c9:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:C0:64:55:EA:2C:40:2C:4A:2D:AB:42:69:46:97:2F:8E:A6:A1
X509v3 Authority Key Identifier:
keyid:26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/sijAZFXqLEAsSi2rQmlGly-OpqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.64.0/22
Signature Algorithm: sha256WithRSAEncryption
85:cf:75:f8:35:9f:02:51:47:60:77:b2:f0:9e:01:81:6e:29:
de:55:46:46:78:24:a1:f7:7b:4b:28:7a:a2:3f:ab:21:fe:2f:
94:4f:b2:6d:18:fc:d1:9d:23:b8:7a:d5:23:bd:ae:bf:5b:6c:
56:26:0c:19:12:3d:5d:d3:ef:22:87:df:27:a6:d1:f4:75:0e:
b7:2e:e4:a5:3e:43:fc:6a:b2:d3:e3:e4:25:f1:46:d8:ea:9d:
5c:d2:04:05:9b:ad:a8:8c:da:7d:a5:29:7b:c1:f9:21:54:e0:
ca:14:72:29:ab:19:b7:b8:a8:24:11:13:bc:08:66:e8:5e:54:
0e:50:f8:3e:6e:a7:43:1e:15:eb:3a:41:0a:db:f6:ca:f1:6e:
48:57:af:a0:01:9f:65:de:6f:14:3a:1b:b3:9b:52:44:ed:75:
d7:b5:43:e7:88:6d:6f:24:24:72:4c:27:d2:1b:bc:d6:92:95:
06:6f:91:fa:6f:80:c0:dc:f7:d8:ad:70:34:97:e2:6e:1c:a8:
93:4e:bf:29:65:0f:07:d3:30:d2:7c:ed:6d:5a:4c:9f:a5:54:
c6:1a:9d:ee:73:e7:0f:c8:9c:38:f1:6e:11:b0:4e:46:b8:cf:
7e:de:5f:a5:8a:b1:f0:75:f4:c4:11:8c:95:91:8f:90:3b:49:
9d:4f:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:15 2026 by rpki-client