Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/icPfEymP4sS-B5f6ECwDv6uqJfE.roa
File: icPfEymP4sS-B5f6ECwDv6uqJfE.roa (raw, json)
Hash identifier: dEtKNt+6pxMCaYnPSrEzFG7rO6REUpLEotnEHbtCIIY=
Subject key identifier: 89:C3:DF:13:29:8F:E2:C4:BE:07:97:FA:10:2C:03:BF:AB:AA:25:F1
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 019F2368674042BAF40FE895543878D97783
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/icPfEymP4sS-B5f6ECwDv6uqJfE.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203953
IP address blocks: 2.110.64.0/18 maxlen: 18
2.110.128.0/17 maxlen: 17
89.150.128.0/18 maxlen: 18
90.184.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:40:42:ba:f4:0f:e8:95:54:38:78:d9:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89c3df13298fe2c4be0797fa102c03bfabaa25f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:46:a7:04:43:aa:47:81:7c:c6:e3:21:5d:
0f:55:71:d7:0c:b1:ae:34:8e:55:69:da:ff:ac:4e:
86:77:63:a9:1e:be:b6:0a:e3:08:6f:55:75:4f:3e:
86:96:60:a0:d3:56:6e:42:ee:b2:13:7a:93:b1:4b:
ae:70:0a:7b:76:69:82:27:78:ad:6d:91:56:58:b3:
33:14:76:5b:f8:25:26:67:46:dc:ad:c7:2a:09:17:
36:50:52:1d:f3:09:65:99:e5:b4:a6:60:e4:7d:b7:
48:34:76:0d:0f:4a:2c:59:fc:2b:1b:12:92:a3:8a:
7a:b2:e3:ad:2c:ed:d0:fc:3d:03:13:e4:f3:4c:9b:
c9:2b:45:ca:55:c2:4d:53:19:a7:6e:69:20:0c:8e:
3d:c6:ec:e4:eb:eb:a5:e7:7f:c6:08:6c:33:2e:fb:
9a:17:51:b6:72:56:2c:ca:e3:39:5f:41:7d:c2:a8:
88:f2:c2:dd:69:9e:60:94:ea:aa:21:b7:97:cc:14:
05:b6:2e:40:f7:c8:bf:a7:cf:b0:73:48:fc:04:fa:
27:de:b5:8a:ae:0e:c7:f6:fe:11:33:02:0a:16:f9:
f0:99:60:73:ac:46:e5:46:9d:6f:c7:82:48:ed:6e:
6e:a8:b5:6c:26:94:75:78:1a:f6:05:7c:81:e1:45:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:DF:13:29:8F:E2:C4:BE:07:97:FA:10:2C:03:BF:AB:AA:25:F1
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/icPfEymP4sS-B5f6ECwDv6uqJfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.110.64.0-2.110.255.255
89.150.128.0/18
90.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5b:6a:10:81:e2:a2:7e:05:16:d9:a2:e7:0c:ee:dc:63:8f:f0:
ba:1f:33:5a:44:59:bb:bb:3a:52:fe:88:f2:a9:3c:83:7a:f1:
55:cf:40:22:be:6d:69:0a:ef:15:d9:b9:94:45:81:ec:22:da:
68:ba:55:e7:c0:d4:c9:7f:71:47:c9:7b:b7:11:50:92:6a:0d:
62:bb:1c:39:00:d4:c3:e9:67:c3:14:77:51:b1:de:1e:e3:a2:
01:99:1c:77:67:89:78:16:ab:d7:0e:26:55:99:ee:b6:1e:5d:
b9:d5:7e:9c:f7:7a:58:a7:7c:2a:b6:83:66:59:3f:75:33:8b:
d1:1e:6d:80:bd:5e:b8:d4:77:83:b7:a1:d9:16:17:75:ca:5a:
0f:ba:47:ff:35:90:6c:78:cd:0a:b7:00:9c:4d:e9:c4:3c:04:
7d:c3:b1:71:9f:9d:ae:33:03:4b:9f:95:5f:8f:bb:93:00:34:
19:8b:8e:04:97:7d:af:36:ef:00:20:62:11:79:f7:34:85:35:
92:04:41:06:65:2f:3a:d3:ba:48:8e:33:bc:a8:42:a3:74:e9:
92:7b:6d:71:17:37:4e:96:94:a8:16:02:5d:10:fe:fb:5c:5a:
72:ad:c4:57:96:32:e5:56:c8:ef:eb:45:57:d4:02:31:b7:80:
2c:e3:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:05 2026 by rpki-client