Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/35aa8f-440d-4b53-8ecd-512b072ab736/1/iJVfjB4ZvPBabiDQlLR03CghMP8.roa
File: iJVfjB4ZvPBabiDQlLR03CghMP8.roa (raw, json)
Hash identifier: 7Wn+thCGwbPrxNZUux3EIvB9jpK7zdKPCyQY3EMkS80=
Subject key identifier: 88:95:5F:8C:1E:19:BC:F0:5A:6E:20:D0:94:B4:74:DC:28:21:30:FF
Certificate issuer: /CN=ddcfdbe79e33094fffadccecbbc2e80b3b322eaa
Certificate serial: 01A1CA2763F12522CC22EF2C74313712D458
Authority key identifier: DD:CF:DB:E7:9E:33:09:4F:FF:AD:CC:EC:BB:C2:E8:0B:3B:32:2E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c_b554zCU__rczsu8LoCzsyLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/35aa8f-440d-4b53-8ecd-512b072ab736/1/iJVfjB4ZvPBabiDQlLR03CghMP8.roa
Signing time: Wed 11 Nov 2026 10:29:01 +0000
ROA not before: Wed 11 Nov 2026 10:29:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5089
IP address blocks: 194.165.28.0/24 maxlen: 24
194.165.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/35aa8f-440d-4b53-8ecd-512b072ab736/1/3c_b554zCU__rczsu8LoCzsyLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/35aa8f-440d-4b53-8ecd-512b072ab736/1/3c_b554zCU__rczsu8LoCzsyLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c_b554zCU__rczsu8LoCzsyLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:27:63:f1:25:22:cc:22:ef:2c:74:31:37:12:d4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcfdbe79e33094fffadccecbbc2e80b3b322eaa
Validity
Not Before: Nov 11 10:29:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88955f8c1e19bcf05a6e20d094b474dc282130ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:2a:fb:62:9d:65:d0:6f:9d:ea:f8:4b:62:
ac:33:28:6e:4c:4c:90:eb:77:d3:ad:e3:e1:75:f1:
bf:d5:e2:e0:1c:f0:07:65:b3:d4:d8:b8:0f:0e:72:
93:d6:13:a9:63:e8:c1:78:6b:23:c6:1e:7a:70:aa:
3a:ef:aa:0a:55:76:0b:c0:75:26:49:a9:47:fc:a6:
f2:26:f8:d6:f2:6c:fb:39:f0:05:e0:72:7a:b8:72:
39:2e:1b:64:1e:a2:e3:07:11:d7:10:eb:68:d9:b7:
3f:af:ba:24:c1:5b:66:bd:d9:a5:ed:70:1c:4f:86:
67:bb:43:22:2b:66:2e:9e:d1:4f:6e:81:25:c5:b6:
bf:31:a2:d3:7a:f5:e9:2e:13:af:66:14:2b:79:33:
b9:cf:34:53:0c:3b:2d:f7:c0:06:2c:b6:c8:b8:f0:
6c:08:c3:67:02:6f:b3:cf:8a:4b:0f:db:c7:f7:fe:
b7:14:31:f0:29:14:6d:1c:65:c3:01:78:ef:b7:bf:
13:9d:aa:79:d7:fa:9f:af:66:c9:66:f0:2f:5a:45:
d7:d0:96:75:1f:f6:1c:3b:8b:36:a4:ff:07:15:b6:
a2:f2:93:25:1c:43:10:dd:4b:df:86:a3:6d:93:fa:
be:fe:b2:e2:fa:6c:ca:b3:53:80:29:02:d9:34:96:
ba:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:5F:8C:1E:19:BC:F0:5A:6E:20:D0:94:B4:74:DC:28:21:30:FF
X509v3 Authority Key Identifier:
keyid:DD:CF:DB:E7:9E:33:09:4F:FF:AD:CC:EC:BB:C2:E8:0B:3B:32:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c_b554zCU__rczsu8LoCzsyLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35aa8f-440d-4b53-8ecd-512b072ab736/1/iJVfjB4ZvPBabiDQlLR03CghMP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35aa8f-440d-4b53-8ecd-512b072ab736/1/3c_b554zCU__rczsu8LoCzsyLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.28.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a0:b5:6f:28:43:8e:60:af:2d:9e:24:b1:df:d6:8b:16:01:
d1:6c:cd:af:50:77:66:88:0f:6c:1e:dc:1a:08:a0:c8:da:6d:
2c:6f:57:e6:83:9f:c2:38:cc:fd:ca:fb:80:c8:78:d4:00:54:
ed:f1:67:c5:91:a2:2a:70:6f:47:c8:a3:ff:37:6f:48:92:3d:
ca:be:6f:55:00:fc:b2:17:cd:a6:6d:8e:40:65:65:4e:3a:29:
38:69:a9:ef:ab:da:1c:bd:fc:19:ce:9c:1d:ea:51:eb:c9:88:
03:f5:d3:e6:a4:ff:cc:65:f6:bc:eb:5b:78:dd:02:db:77:41:
f9:74:31:28:8c:63:14:8c:d4:25:71:92:76:12:79:02:99:dc:
ea:f6:c5:31:95:54:9d:1a:2c:c9:38:bd:bd:5f:bd:69:ce:75:
40:ea:8d:73:a4:5c:86:84:35:f9:2c:69:b7:6b:87:de:0f:02:
a3:81:4c:0a:47:94:16:4b:8e:60:f5:fc:46:6a:18:02:7c:f1:
d5:41:3a:39:76:d5:38:04:89:5f:97:cf:27:48:40:fc:b2:42:
00:d1:ab:ba:88:1c:2d:e2:d6:59:fb:1a:c8:b3:13:ff:cd:df:
1e:77:71:f5:90:78:c7:13:f1:8e:83:8a:47:19:d1:a1:aa:92:
26:89:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:02 2026 by rpki-client