Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/iM1oUl29TZo8TBmUQuzNvFuJWQs.roa
File: iM1oUl29TZo8TBmUQuzNvFuJWQs.roa (raw, json)
Hash identifier: jxbp4u9Zss89VbcKpO1URl2CR7HBCn20++6ggU5n1h8=
Subject key identifier: 88:CD:68:52:5D:BD:4D:9A:3C:4C:19:94:42:EC:CD:BC:5B:89:59:0B
Certificate issuer: /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial: 019F5F2D7AB5725AB91CA2C94906BD28BD1B
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/iM1oUl29TZo8TBmUQuzNvFuJWQs.roa
Signing time: Tue 14 Jul 2026 05:50:43 +0000
ROA not before: Tue 14 Jul 2026 05:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64013
IP address blocks: 185.213.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:2d:7a:b5:72:5a:b9:1c:a2:c9:49:06:bd:28:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Validity
Not Before: Jul 14 05:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88cd68525dbd4d9a3c4c199442eccdbc5b89590b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:99:aa:1d:78:6e:cd:f7:e4:d5:69:5b:ca:
9e:2b:d1:9e:67:f9:5f:f7:e2:eb:82:26:64:8e:45:
7d:c7:fb:23:2c:3b:7f:d7:d9:42:52:6e:86:7d:2a:
00:b5:ff:60:9c:50:af:16:bd:e6:de:25:a4:f7:5a:
59:dd:e2:35:cc:74:b3:73:ee:cc:51:69:b9:45:05:
82:a5:75:f9:eb:74:36:47:ea:35:6a:3e:25:ab:c3:
aa:71:54:f9:5b:ac:24:9f:63:e2:c1:6c:64:31:17:
b9:a8:30:08:d5:b0:e6:72:51:c2:06:b5:47:6b:38:
f3:a9:0f:4b:cb:44:47:15:53:74:83:31:2d:38:d3:
86:6e:58:5f:20:d9:c6:b4:ba:72:46:86:89:37:05:
d3:6d:4d:7d:2d:a0:fd:97:17:c6:ca:e7:f3:fb:c5:
8d:f7:91:84:46:8f:d7:25:b3:e6:4f:9b:c0:47:c3:
c3:cf:1c:74:a4:d1:ea:7c:49:b3:bd:2e:56:1a:13:
70:a0:73:fe:e3:3f:85:23:3a:d4:02:fc:32:cf:df:
a5:d1:e8:49:8e:25:07:8b:74:a1:c9:ed:b4:a2:5f:
d9:d6:76:3d:f5:94:c6:57:b8:20:da:e5:c0:17:16:
63:d7:a8:99:fd:b0:24:12:4f:6b:66:02:97:94:9c:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CD:68:52:5D:BD:4D:9A:3C:4C:19:94:42:EC:CD:BC:5B:89:59:0B
X509v3 Authority Key Identifier:
keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/iM1oUl29TZo8TBmUQuzNvFuJWQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:06:1e:c6:5b:53:6a:de:d8:c3:f4:18:3d:d4:6e:4d:1d:3f:
42:86:f3:6c:a1:4a:2e:8b:81:55:d6:aa:64:1b:68:d9:3b:03:
70:6f:a4:fc:62:ec:50:61:55:d8:53:fd:a7:d3:d9:dc:31:c0:
3e:4c:e2:6f:17:a2:3f:b1:ef:e7:3b:8a:3b:b9:36:95:7f:db:
3d:f0:ea:41:da:a0:76:ef:b2:aa:09:a3:0c:5c:b9:4c:ed:ec:
59:c1:5a:b0:39:26:71:18:08:6e:dd:51:b7:cb:a6:31:8c:39:
a9:4c:a2:d5:a1:55:df:cd:e6:80:c8:65:35:1e:7d:3e:81:4f:
f0:eb:87:97:7e:99:d5:ac:b9:ac:fc:7c:04:21:22:aa:71:8d:
57:8a:4f:ae:ce:f3:c9:43:b0:0f:7e:90:bd:59:4c:07:cd:c9:
14:b8:ae:2b:2d:61:b9:a4:44:81:c9:6c:fe:37:40:c8:9c:08:
31:9f:55:3f:41:5c:95:f9:82:9e:ea:f2:c0:6a:59:61:4f:58:
af:69:ff:3a:09:93:a9:ad:1b:cd:cb:ac:17:58:e2:f2:d1:9a:
52:59:04:20:8a:d2:2f:09:6e:6b:de:a1:85:71:41:72:0b:44:
67:a1:b6:62:d5:19:5b:16:07:53:f8:ad:25:08:02:7d:a2:7b:
b0:ff:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:28 2026 by rpki-client