Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa
File: iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa (raw, json)
Hash identifier: aaSOVrkxAJe8O2mFpYgKoWep+9G/A7GJM36+XM4ZkBc=
Subject key identifier: 89:53:8B:7A:A7:2D:80:36:B0:F4:5A:FB:B4:4C:C2:AD:51:69:4C:A7
Certificate issuer: /CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Certificate serial: 019D29788A43ABBA12FEED81104119EDC922
Authority key identifier: 99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa
Signing time: Thu 26 Mar 2026 09:27:38 +0000
ROA not before: Thu 26 Mar 2026 09:27:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60443
IP address blocks: 185.87.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:78:8a:43:ab:ba:12:fe:ed:81:10:41:19:ed:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Validity
Not Before: Mar 26 09:27:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89538b7aa72d8036b0f45afbb44cc2ad51694ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:de:06:cc:47:08:9e:2d:9f:45:2c:f3:fa:
c8:6c:f7:32:23:82:d1:3b:61:fb:b5:02:f9:c2:e2:
f9:bb:4d:58:74:cb:1f:c6:6a:fb:7d:7b:d2:9c:28:
22:f3:81:ca:92:66:49:5a:17:52:53:bd:b9:93:b2:
56:31:f1:9b:24:31:6c:1a:61:9c:ea:09:8c:fd:55:
1a:83:1e:a2:7a:a3:3a:4e:ac:6a:34:42:2d:67:f9:
e6:58:f5:7d:48:4d:48:92:65:69:53:33:68:80:27:
7c:d6:d3:e0:43:4b:cd:fc:3c:25:08:0b:84:9b:e5:
08:f0:82:48:03:3a:4b:5f:dd:6c:fd:5f:bf:c1:bb:
86:e0:d0:ca:4b:a1:11:9e:70:09:36:d1:56:89:49:
15:75:8c:4c:40:8c:cf:25:9d:0b:2c:9f:03:cd:d3:
8b:bf:d7:df:4c:2e:98:15:10:af:2d:33:cd:2e:06:
50:08:8d:8b:ac:44:22:85:1a:9b:e8:63:d1:71:a1:
d0:b8:d2:5d:e2:ab:ee:ab:bb:19:04:ce:96:7d:a5:
ea:44:ad:ca:77:13:73:41:a9:a6:7b:79:35:fe:fa:
06:7a:73:5c:2f:7c:9a:7c:9b:c0:fa:e8:45:d0:e3:
bc:60:ea:bd:a4:3e:e0:f4:09:ab:ab:81:cf:c2:b9:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:8B:7A:A7:2D:80:36:B0:F4:5A:FB:B4:4C:C2:AD:51:69:4C:A7
X509v3 Authority Key Identifier:
keyid:99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.68.0/22
Signature Algorithm: sha256WithRSAEncryption
89:4c:7f:e8:ed:45:8d:14:b4:4c:8a:bc:26:a0:c3:94:e8:2b:
b3:9c:5d:80:fb:77:88:a2:4d:ab:da:97:5c:71:ba:1d:18:f2:
0a:5f:6e:2d:5f:e0:48:0e:48:70:56:19:cd:b2:a2:0f:1a:88:
58:2c:d7:37:e7:ed:60:5d:2b:2a:09:b3:03:d8:23:dd:13:08:
ef:88:25:c2:0f:48:a0:73:0b:0f:3f:9b:4d:37:31:6a:1c:9c:
eb:3b:a8:04:40:f8:ef:08:d9:4e:82:13:5e:ff:70:db:91:a0:
44:88:f3:4e:f5:a0:c8:d8:5f:6a:cd:ee:fb:69:b6:30:45:60:
4a:c0:e7:84:36:c9:ef:c9:aa:fd:51:fb:32:73:a5:ca:0b:08:
e1:da:45:72:27:af:6f:ae:ee:7e:9b:07:cd:ed:e0:d2:db:16:
cb:b7:f4:fc:10:17:40:42:88:50:95:96:5e:96:ae:77:a5:64:
b3:f7:5b:c2:97:2a:e2:8e:5e:29:09:88:07:7d:d3:19:40:2c:
1d:2a:1e:42:10:9d:c7:b2:19:a0:75:8d:2b:32:9c:6d:63:02:
2a:31:ce:fa:1e:58:1e:8e:f8:08:7b:98:35:ce:e6:e7:3a:ab:
d9:d2:a8:53:b0:6a:7b:fc:08:89:c0:67:c2:34:15:98:04:30:
d1:80:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:54 2026 by rpki-client