Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/IwmQjZUfdYPhFC1XFVEaDl2crNc.roa
File: IwmQjZUfdYPhFC1XFVEaDl2crNc.roa (raw, json)
Hash identifier: GjZxnW1gzHRN+UqmaVQ0ZwFiCbXVNJT18u7noxRI/WE=
Subject key identifier: 23:09:90:8D:95:1F:75:83:E1:14:2D:57:15:51:1A:0E:5D:9C:AC:D7
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019DF7B63E61EBE62AC0C616EA46C2BDDD6B
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/IwmQjZUfdYPhFC1XFVEaDl2crNc.roa
Signing time: Tue 05 May 2026 10:36:49 +0000
ROA not before: Tue 05 May 2026 10:36:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 91.213.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:b6:3e:61:eb:e6:2a:c0:c6:16:ea:46:c2:bd:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: May 5 10:36:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2309908d951f7583e1142d5715511a0e5d9cacd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:18:0e:0c:cd:0d:9e:2f:61:02:f6:c1:02:
c7:f8:06:d2:d8:98:46:55:0b:b9:a2:66:83:15:82:
12:cb:ea:d9:a4:69:10:b5:54:e8:a9:03:b5:cc:d2:
2a:d4:24:ae:6a:fd:01:7d:eb:3d:90:d5:32:32:3d:
61:6d:5b:f8:99:ab:05:23:d6:5e:ab:b4:a1:c4:61:
e8:b0:aa:54:68:43:ea:e1:ed:ed:ed:97:11:1e:81:
a7:0d:a7:2b:74:ae:76:52:1f:35:de:b5:be:ad:49:
32:1e:40:60:93:b3:3d:58:7b:4f:c6:9e:e1:41:a6:
ea:1e:0f:59:07:40:8e:15:78:28:3e:13:d0:3a:81:
07:24:45:8e:c1:5e:90:c8:1e:9c:27:b8:53:e5:a4:
71:d8:cc:4a:ab:32:13:92:97:6c:ae:f1:f7:de:52:
04:d3:df:b8:87:c7:38:41:87:93:7a:30:cd:10:6f:
a2:f7:84:12:a0:39:91:96:c1:01:69:33:1d:89:d8:
b8:60:9a:bb:35:4e:ef:d7:c8:6e:48:6a:15:23:99:
71:db:7b:51:db:c3:ef:86:cb:51:45:f1:f2:10:81:
33:c3:04:15:3e:ae:e3:7e:e3:19:c0:2e:6d:ea:55:
09:9a:d2:11:b5:cf:46:23:c5:6a:0f:c7:99:13:1a:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:09:90:8D:95:1F:75:83:E1:14:2D:57:15:51:1A:0E:5D:9C:AC:D7
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/IwmQjZUfdYPhFC1XFVEaDl2crNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.221.0/24
Signature Algorithm: sha256WithRSAEncryption
06:19:20:4f:b2:85:d3:5e:fb:bd:6a:48:43:a7:c7:eb:35:75:
7c:af:0c:42:b3:9c:3a:b9:92:e4:8d:3c:8b:17:ea:53:b9:0d:
ba:32:89:78:2a:a1:0c:73:2c:5f:7e:16:7e:f2:5a:9e:01:f0:
03:46:ec:ab:f8:01:60:f4:41:c3:d1:7b:c4:f3:7e:ad:e8:3c:
84:de:7c:3d:c4:47:28:35:9d:9d:0a:8f:c2:d2:8f:5f:a8:19:
06:69:2d:85:08:90:3c:5d:2b:d1:0a:18:48:ce:26:85:55:cc:
a1:1f:c3:04:31:77:89:05:23:46:81:e7:0e:85:3d:d1:50:14:
fc:0e:49:64:fe:5b:54:7d:7a:65:66:17:c9:f4:d1:b6:53:1f:
eb:03:35:86:d3:c7:3d:91:53:96:c4:2a:4d:62:f0:90:22:cc:
c9:cf:5d:fd:da:b8:86:e3:f9:a5:3e:88:e1:87:1d:71:3a:1c:
35:29:be:f7:48:64:2f:2b:68:0a:a2:1b:23:31:d8:33:4f:8e:
fd:b9:67:2c:34:c1:86:6f:d2:47:9c:4e:e9:9f:4e:16:d6:c7:
7d:cb:d7:f3:9e:0f:20:82:1e:f5:5d:81:16:98:5a:4b:f9:ad:
c0:3a:2c:8b:77:6e:0c:22:85:40:17:52:03:4a:25:d1:29:48:
fb:e6:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:55 2026 by rpki-client