Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/I1oytQ2dC0mrTslmK3apIAP5fOQ.roa
File: I1oytQ2dC0mrTslmK3apIAP5fOQ.roa (raw, json)
Hash identifier: WdWnYz2nz10WKmvWBQa7iutQJAl62MS58LqLaXRVCgI=
Subject key identifier: 23:5A:32:B5:0D:9D:0B:49:AB:4E:C9:66:2B:76:A9:20:03:F9:7C:E4
Certificate issuer: /CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Certificate serial: 019F2368D4137F3EED249E55BA8EE614ED0E
Authority key identifier: FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/I1oytQ2dC0mrTslmK3apIAP5fOQ.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56505
IP address blocks: 91.223.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:13:7f:3e:ed:24:9e:55:ba:8e:e6:14:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=235a32b50d9d0b49ab4ec9662b76a92003f97ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:9a:fc:31:4e:a4:40:a3:f9:c1:8e:91:f0:
53:7f:68:93:34:02:de:d8:59:7c:ce:62:32:df:20:
93:f5:4d:62:55:22:a9:3e:1e:7b:68:02:ff:79:e7:
f8:d1:72:cf:77:8a:18:05:35:9e:2c:69:fc:5d:28:
a0:65:21:c4:e2:ea:75:06:89:20:69:d4:6b:8d:d5:
a6:37:ec:ba:e7:66:dd:e7:68:4b:ae:ff:14:db:90:
b2:a8:b8:39:86:ba:b4:85:21:c9:17:aa:0e:ac:8d:
6d:6d:de:4b:4a:b4:01:05:0e:8a:d0:ea:7b:4f:0e:
c4:bd:3d:a6:a7:2c:ab:d8:e0:18:4a:c2:a9:09:63:
c5:01:bb:34:a1:f0:1f:35:6b:0a:b1:4f:b7:22:08:
b6:78:0e:f4:9a:ad:6a:b0:54:05:42:25:56:3a:81:
b5:d7:79:60:3d:eb:ab:22:1d:6f:ee:9e:29:44:c9:
e8:7e:e1:fc:9c:59:94:f4:23:a9:bd:97:e2:ee:47:
c7:7a:90:0f:f5:4e:04:f8:86:89:c8:4f:9c:a0:ab:
07:93:8f:79:65:64:58:39:b5:f3:4c:01:16:c0:85:
b2:ce:ba:34:5f:1d:51:31:32:3b:dc:b8:60:4f:12:
4f:9c:a2:d0:6f:1c:55:08:55:d0:fa:8c:06:5e:8e:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:32:B5:0D:9D:0B:49:AB:4E:C9:66:2B:76:A9:20:03:F9:7C:E4
X509v3 Authority Key Identifier:
keyid:FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/I1oytQ2dC0mrTslmK3apIAP5fOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b3:fa:5a:11:49:d8:b8:93:ba:1d:83:a6:9c:85:53:41:06:
db:a6:9c:d8:d7:14:b1:59:c0:11:21:27:e0:6e:d3:e3:77:6c:
e6:7c:8b:df:b4:12:a0:9e:53:fd:5c:a4:bf:24:4d:2e:e1:32:
a5:e9:78:64:14:6b:68:09:c4:0d:e9:e3:1f:be:54:98:6e:9e:
ef:93:85:53:cc:3e:cc:63:53:8d:23:b9:0a:73:44:28:80:a2:
ba:a7:20:60:85:6d:fd:48:8a:87:10:00:9d:7f:a6:31:3c:e2:
90:cf:76:6e:15:e0:67:e4:66:88:59:0a:fb:e2:c5:13:6c:62:
cc:81:8e:08:ad:d4:c5:5a:24:82:78:05:29:c1:b9:db:2b:3a:
ca:75:85:0b:d4:2b:27:d1:49:f2:58:36:b1:ec:ae:4c:61:5f:
61:39:b5:09:39:87:f1:3a:9e:ef:b2:06:34:4f:02:bd:d8:e5:
ae:b9:72:ba:20:73:76:be:54:5c:33:ab:6d:27:30:5a:58:c0:
de:ef:fe:79:17:4d:0c:4f:ee:36:1b:2b:9f:83:d5:ed:0e:95:
c4:91:3a:3b:47:0f:5b:81:0e:cd:42:4c:b6:ad:33:64:48:fd:
80:df:9a:c6:37:f1:ca:68:cd:95:fa:d8:d4:17:bb:2c:39:9b:
75:15:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:42 2026 by rpki-client