Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/IGonrweKcV3pBiFmxgMN0Hhq74c.roa
File: IGonrweKcV3pBiFmxgMN0Hhq74c.roa (raw, json)
Hash identifier: YkHvQYVpbz1V6t76f23kYkJHWGSnZkMw7J+Y7FV0iWY=
Subject key identifier: 20:6A:27:AF:07:8A:71:5D:E9:06:21:66:C6:03:0D:D0:78:6A:EF:87
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019DF9D5CF155C6F5012EA274A276622FF6C
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/IGonrweKcV3pBiFmxgMN0Hhq74c.roa
Signing time: Tue 05 May 2026 20:30:32 +0000
ROA not before: Tue 05 May 2026 20:30:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211743
IP address blocks: 45.84.89.0/24 maxlen: 24
206.109.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:d5:cf:15:5c:6f:50:12:ea:27:4a:27:66:22:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: May 5 20:30:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=206a27af078a715de9062166c6030dd0786aef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:70:5a:aa:2f:ae:56:82:f8:8a:bd:2b:06:
0e:8e:ea:e0:9d:20:a5:ab:62:1b:62:06:48:ce:e9:
4d:12:df:e0:69:41:3a:65:9f:60:f9:97:9a:d6:b8:
a1:ef:8f:92:36:e5:40:af:aa:e7:24:f1:a6:91:f6:
21:ac:ca:97:32:fb:73:e6:7f:ee:08:14:7b:83:71:
9b:b7:41:bc:3e:ba:ba:d3:d7:84:f6:94:42:27:0e:
40:84:b3:56:5f:5c:6b:ef:c1:74:66:ce:c2:db:7b:
1e:ae:f7:b4:6d:b7:3b:e0:25:d4:ca:6f:db:e1:d6:
f7:be:91:71:14:e2:94:28:5e:63:37:31:1e:4d:2a:
fc:cf:f9:c8:86:7c:c0:7c:fc:7c:1d:01:4d:aa:05:
82:bf:55:79:c6:5a:c3:24:ab:c1:66:83:7a:b1:04:
9c:42:e7:0a:07:90:cd:cf:8b:40:36:50:ea:62:c8:
ff:54:04:7b:28:3a:70:07:70:bd:79:95:40:f2:39:
5a:3b:b2:42:e4:90:ac:07:9f:ff:55:64:25:9a:dd:
3d:a5:05:5b:dd:9a:f2:74:f4:da:0d:07:1b:61:ae:
7b:fa:96:7b:3f:a4:cf:ef:69:ca:4f:2b:3a:bb:e9:
58:be:2c:f6:a1:98:92:6d:87:bc:ed:ee:13:68:1e:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:27:AF:07:8A:71:5D:E9:06:21:66:C6:03:0D:D0:78:6A:EF:87
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/IGonrweKcV3pBiFmxgMN0Hhq74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
206.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ff:3a:39:05:6b:ed:6e:05:c6:c6:d7:56:7a:f2:4a:ac:45:
4d:fc:f7:93:7a:38:e6:ea:49:c4:0f:af:81:86:b2:b3:2d:ca:
60:aa:3d:f7:15:9f:10:4d:2e:45:4d:65:f0:18:8b:fb:ea:47:
7f:9c:85:7b:68:a1:d4:3f:f6:28:b7:dc:07:65:6d:b3:c5:b3:
53:2e:1b:44:ca:38:e4:21:32:7f:6a:e7:f8:89:e1:47:53:26:
69:69:e2:4b:2e:0e:72:84:92:80:79:9c:2d:54:bb:d7:c9:10:
f0:e1:8e:5f:d5:52:3e:16:46:f9:dc:65:b2:27:c1:78:2d:c5:
ed:46:41:3c:1a:91:43:e2:52:99:5d:1c:a0:32:30:c2:98:81:
9a:cc:f2:5d:12:f3:17:52:3d:e1:89:14:02:8e:a4:6b:14:8c:
54:f8:5d:e7:a2:12:21:e6:4e:3e:f2:b5:c7:49:b0:97:fd:3c:
79:48:ce:b5:c7:7a:d4:da:f2:20:ca:7f:20:b2:f4:ad:5f:9a:
aa:6a:21:b4:80:06:6d:d4:7f:4d:bc:b2:12:36:d5:9c:10:24:
59:c3:2b:24:32:26:d1:49:f0:14:14:dc:a2:75:0c:5e:06:46:
1f:91:b1:1f:09:49:01:12:d1:8b:e7:ea:49:f2:6f:57:13:30:
b4:bc:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:11 2026 by rpki-client