Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/IxzYud7Zm9pX7ceSCzWOzMYzmI4.roa
File: IxzYud7Zm9pX7ceSCzWOzMYzmI4.roa (raw, json)
Hash identifier: hYfyKYalEjw04LrWBXTQpy02eEJWvTLpeHnpuj+sc5g=
Subject key identifier: 23:1C:D8:B9:DE:D9:9B:DA:57:ED:C7:92:0B:35:8E:CC:C6:33:98:8E
Certificate issuer: /CN=90ef1b2326ac15edcb7c204fe5a22eec0e32b37f
Certificate serial: 019C907007768DC83667326EF66A3EF0539A
Authority key identifier: 90:EF:1B:23:26:AC:15:ED:CB:7C:20:4F:E5:A2:2E:EC:0E:32:B3:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO8bIyasFe3LfCBP5aIu7A4ys38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/IxzYud7Zm9pX7ceSCzWOzMYzmI4.roa
Signing time: Tue 24 Feb 2026 16:16:26 +0000
ROA not before: Tue 24 Feb 2026 16:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216413
IP address blocks: 93.187.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO8bIyasFe3LfCBP5aIu7A4ys38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:70:07:76:8d:c8:36:67:32:6e:f6:6a:3e:f0:53:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ef1b2326ac15edcb7c204fe5a22eec0e32b37f
Validity
Not Before: Feb 24 16:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=231cd8b9ded99bda57edc7920b358eccc633988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:0c:cd:e6:5d:3b:c7:9e:a4:07:c0:38:1e:
45:66:00:10:4f:cf:50:0b:40:0c:d9:9d:f4:8e:71:
d6:e9:d6:b2:98:b2:07:cf:d3:dd:d8:d6:b4:32:c9:
68:56:f0:0d:5b:a7:4c:eb:1d:02:98:08:72:e4:52:
cf:cc:93:80:0c:b1:7a:b4:ea:35:4b:07:0c:d9:2f:
c7:46:0b:4e:41:1f:71:86:91:dd:6f:96:02:f8:5a:
c5:b1:85:f8:c5:b5:01:be:c7:8a:6e:3a:01:bf:2d:
76:c4:1a:da:1f:1e:d5:66:af:cc:eb:63:61:09:f3:
f4:21:99:b8:d2:d8:d9:df:fd:f3:c4:db:5f:c5:e4:
08:3f:a5:90:5a:62:0c:35:92:41:14:5a:2c:e0:ff:
4e:e4:0d:22:f0:b4:e3:be:c5:f8:45:e6:a9:2f:91:
36:01:7f:f2:b1:ae:d9:6e:f7:d5:71:44:05:bd:fd:
5d:07:32:f9:ca:03:e5:11:eb:32:c2:db:9c:a8:23:
6a:81:8d:a9:46:2a:72:e0:c6:39:cd:0a:e7:a6:2c:
9d:0f:09:de:7e:2e:b6:8c:f3:b0:91:08:e6:59:9d:
33:ec:74:45:32:76:c6:86:fb:1b:02:1e:32:5f:06:
f4:1c:d6:d7:b6:3b:04:9d:30:69:a4:db:57:59:93:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:D8:B9:DE:D9:9B:DA:57:ED:C7:92:0B:35:8E:CC:C6:33:98:8E
X509v3 Authority Key Identifier:
keyid:90:EF:1B:23:26:AC:15:ED:CB:7C:20:4F:E5:A2:2E:EC:0E:32:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO8bIyasFe3LfCBP5aIu7A4ys38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/IxzYud7Zm9pX7ceSCzWOzMYzmI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.67.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2f:a7:ff:f3:d8:c5:c2:01:12:db:69:ec:05:a3:50:3e:4e:
b3:47:01:1c:2e:46:df:c5:e4:9f:cd:dd:dc:0a:14:d1:1f:81:
5d:8e:54:1d:2b:1d:b5:36:12:9e:46:e1:55:32:35:38:e6:8b:
da:d5:a1:3a:52:be:32:b2:41:62:61:33:ad:ff:82:fd:a7:20:
c5:82:b4:2f:e3:48:65:0b:a0:3f:d0:8b:e2:dc:11:17:95:c7:
67:48:85:72:0c:f3:e3:6d:81:51:7d:c3:f4:ea:63:ec:4c:5f:
b0:b2:40:40:29:ab:7b:04:79:08:45:97:8e:ef:7e:e8:50:d3:
13:b1:0d:21:c6:78:cf:18:e0:80:b5:3f:c9:23:18:48:ac:c5:
77:9d:19:c8:85:f3:f8:62:a1:d2:2c:51:79:fe:f4:60:ce:13:
8d:36:b7:23:e8:67:8b:50:04:11:30:f6:8e:23:08:f1:b5:ee:
74:58:be:b9:48:fa:e9:53:85:c6:df:95:60:7d:fd:3c:17:ec:
8d:8f:87:b7:50:ac:5d:76:a1:cb:cb:f0:9c:99:5a:e3:2f:11:
67:a3:08:f6:de:57:66:67:0b:c4:35:a9:f4:75:e4:08:82:a1:
ff:f8:97:3c:d1:13:d2:53:90:ce:13:51:65:54:ac:ba:76:c0:
2b:0d:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:48:52 2026 by rpki-client