Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/IAG4r3e3EUliMuTGyJfaIFSEI8s.roa
File: IAG4r3e3EUliMuTGyJfaIFSEI8s.roa (raw, json)
Hash identifier: Fh5XRjY2DdGAxstRqU9C5bKdQGW3Y9txa0E7ESKQrfs=
Subject key identifier: 20:01:B8:AF:77:B7:11:49:62:32:E4:C6:C8:97:DA:20:54:84:23:CB
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 01A187797A6AFC2036F8301F6DECD0F4DE6B
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/IAG4r3e3EUliMuTGyJfaIFSEI8s.roa
Signing time: Thu 29 Oct 2026 11:44:07 +0000
ROA not before: Thu 29 Oct 2026 11:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35758
IP address blocks: 159.200.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:79:7a:6a:fc:20:36:f8:30:1f:6d:ec:d0:f4:de:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Oct 29 11:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2001b8af77b711496232e4c6c897da20548423cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:f7:a4:5b:c3:e2:37:58:a1:e0:8e:8c:47:
76:34:ac:13:f7:2c:57:28:af:04:88:30:da:55:fd:
77:81:38:64:6f:ac:7a:65:75:2e:b2:d5:ac:ee:b7:
39:1c:07:da:6d:4d:0f:34:ed:56:8e:d9:65:7f:d5:
19:57:a9:5e:a1:d2:64:97:a3:60:63:e7:b5:72:50:
4b:da:a7:02:88:62:cc:31:57:4d:51:18:95:db:3b:
64:83:c1:b2:6c:c8:a5:f1:b5:10:86:eb:76:aa:0b:
f8:8e:52:bf:2b:84:ed:67:4b:ce:c6:62:2c:0c:59:
a2:d2:36:65:94:28:0b:23:28:76:c7:49:bf:b7:21:
ff:02:0d:b6:95:31:9b:67:12:69:58:70:e1:a7:07:
8b:4f:34:01:bb:50:f1:69:ba:31:2a:3d:df:4b:1e:
26:93:0c:95:03:b3:1c:14:25:9b:a1:d9:42:7e:8d:
5c:3c:eb:b0:dc:a3:6a:cf:6a:fb:63:f6:ad:f6:98:
50:99:ea:40:13:46:61:ca:15:54:8b:3f:7c:04:31:
0e:8c:3f:e4:70:76:38:78:fd:f6:5c:e8:94:5c:69:
3b:8f:47:f1:8d:d6:64:f9:35:9d:22:87:1e:e5:45:
89:61:8c:a7:69:c9:a6:80:04:88:37:10:ec:be:a4:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:B8:AF:77:B7:11:49:62:32:E4:C6:C8:97:DA:20:54:84:23:CB
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/IAG4r3e3EUliMuTGyJfaIFSEI8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:45:72:d0:c8:4b:d0:25:4d:15:d7:6d:ef:6a:a4:f6:8e:d8:
a4:79:d1:f0:a2:0f:01:75:d2:dc:2e:a3:d8:40:60:ee:4b:03:
59:70:bc:e2:39:6c:5c:e2:61:d7:71:94:9c:c6:dd:d1:ad:82:
13:af:a0:65:d7:2a:15:f7:5a:43:0d:31:64:c2:e8:a9:ce:b5:
a5:1c:09:c8:8e:81:c8:ff:b2:71:20:46:cf:f4:97:dc:b5:08:
be:12:fe:0f:83:24:15:71:21:cc:8a:a8:1f:84:7b:3f:96:c5:
cb:b4:bd:42:0f:d7:78:61:a0:59:0d:8e:7b:26:69:41:f5:4f:
60:f3:b5:03:89:12:58:d5:0d:01:5a:56:a5:1c:38:fe:63:c8:
3b:a4:1e:73:06:dd:2b:c6:ac:62:ce:d1:6a:9b:8f:91:ce:a1:
3b:6d:69:65:c6:3a:9b:6a:cc:30:93:45:7c:4a:18:5b:a1:28:
b8:55:6c:d0:3d:87:3d:f5:77:11:58:4d:bd:6b:43:c9:cb:83:
a4:d3:0d:ae:82:eb:5d:8b:d4:10:19:28:c3:a9:49:a6:72:91:
d2:99:01:23:90:26:a0:07:1a:e0:49:04:7e:54:5d:30:cb:7f:
f9:29:44:ea:8a:5f:3c:d0:84:d6:da:a3:ee:cc:49:1d:29:78:
4a:31:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:11 2026 by rpki-client