Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/iZEmjwEPRyx8QyyQn4gnbiaigT4.roa
File: iZEmjwEPRyx8QyyQn4gnbiaigT4.roa (raw, json)
Hash identifier: I3dS4NuQKJEmxy0uXjJxX1xrNFM+VLP6Pll5fzdeVhg=
Subject key identifier: 89:91:26:8F:01:0F:47:2C:7C:43:2C:90:9F:88:27:6E:26:A2:81:3E
Certificate issuer: /CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Certificate serial: 019F23682F3DB19319F8D9AFCB4874F18E49
Authority key identifier: 4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/iZEmjwEPRyx8QyyQn4gnbiaigT4.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 91.229.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2f:3d:b1:93:19:f8:d9:af:cb:48:74:f1:8e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8991268f010f472c7c432c909f88276e26a2813e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:34:61:88:2b:17:b8:04:9e:3b:42:46:ec:
de:79:80:b9:d6:62:cc:a8:a5:66:0c:69:db:39:d6:
a7:3c:e5:01:4a:d2:a2:b0:1a:63:2f:46:b5:65:19:
2b:92:53:b2:12:01:37:87:d9:d8:df:b5:3c:70:13:
93:4b:61:a3:10:b3:83:21:79:f6:71:1e:9e:59:b0:
c3:80:2b:81:a1:5b:e1:1f:ba:bd:84:a1:0f:26:ca:
b0:77:db:62:56:1f:0a:b0:8e:dd:7d:8c:e9:e0:11:
24:c4:e7:74:08:c9:9c:b2:c1:49:14:0b:6a:41:9a:
a5:1e:95:cb:b9:6b:10:74:0b:b8:83:36:43:44:4b:
9d:87:51:25:9d:0f:1a:90:94:95:28:40:3d:3c:02:
56:3f:37:82:c8:82:48:69:0b:f7:66:03:00:8f:e5:
80:bf:c2:12:d7:81:cb:ef:60:74:a3:ea:73:20:81:
16:77:5b:21:84:a8:44:34:88:46:1f:e0:74:01:50:
ec:09:7e:d6:bf:c4:e2:fa:73:a2:70:da:bc:71:b9:
88:d9:8d:42:df:d9:ec:5d:fd:c8:bd:da:6b:f5:42:
e8:e1:44:31:6d:5d:cb:04:02:8b:77:32:30:df:52:
8a:7c:2d:8a:f0:bd:8d:c4:65:59:28:40:af:35:f4:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:26:8F:01:0F:47:2C:7C:43:2C:90:9F:88:27:6E:26:A2:81:3E
X509v3 Authority Key Identifier:
keyid:4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/iZEmjwEPRyx8QyyQn4gnbiaigT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:58:9f:e0:6b:5a:02:23:96:a8:87:72:f8:72:45:fb:2e:18:
98:9d:dc:e7:95:2c:27:68:20:14:9a:8e:e8:0d:4c:e8:d8:fe:
4d:8b:32:7e:1c:75:05:20:94:96:2b:8a:e9:13:09:6f:0a:b0:
dd:16:70:64:62:02:58:a3:c9:e4:c2:d8:1b:59:cb:2c:f6:38:
03:8c:26:3d:67:9a:87:2e:a1:ca:c6:a6:fd:3b:37:75:38:01:
b7:97:d4:b8:f1:1b:61:27:32:a6:41:d4:4d:36:3c:77:10:91:
54:ae:a2:97:4b:5b:ac:26:e8:b3:f5:98:17:4d:ab:ae:1f:9f:
0c:82:83:17:5c:e1:52:df:5e:20:64:19:54:a0:e5:1e:16:30:
86:c3:e4:e3:18:f2:69:39:14:96:1b:b3:c8:f1:2d:26:6b:f7:
e4:f7:b5:93:97:19:a5:07:e5:31:72:2f:31:6e:01:51:84:ac:
4b:7c:db:ed:9f:d8:6d:c5:23:4b:60:a5:79:75:13:71:32:61:
63:c5:ef:98:d1:79:51:84:d8:49:82:a9:19:7b:96:79:16:c5:
2f:c7:0f:0d:37:15:7c:f7:44:ad:b8:89:a4:c6:84:8d:33:7f:
48:9f:96:7a:7e:9e:c2:f7:73:03:f1:d9:62:38:ef:03:cb:8d:
0d:fb:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:56:45 2026 by rpki-client