Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/iB6KHq0M_Ll9NmkNFX9KsutshGQ.roa
File: iB6KHq0M_Ll9NmkNFX9KsutshGQ.roa (raw, json)
Hash identifier: O1DFifratFlrGzAHHdlug9Pg7yS953P24R7lQn8mKb0=
Subject key identifier: 88:1E:8A:1E:AD:0C:FC:B9:7D:36:69:0D:15:7F:4A:B2:EB:6C:84:64
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01A183F7D57C57A74606505AF02EBA15DC8C
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/iB6KHq0M_Ll9NmkNFX9KsutshGQ.roa
Signing time: Wed 28 Oct 2026 19:23:39 +0000
ROA not before: Wed 28 Oct 2026 19:23:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213896
IP address blocks: 164.152.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:f7:d5:7c:57:a7:46:06:50:5a:f0:2e:ba:15:dc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Oct 28 19:23:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=881e8a1ead0cfcb97d36690d157f4ab2eb6c8464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:d4:91:b5:dc:76:ec:18:87:1b:69:2b:6d:
f9:4e:3e:66:d0:a6:d2:84:d1:0c:af:8b:15:85:c2:
b4:03:66:44:a3:17:7e:48:3a:b5:b6:3c:45:21:bf:
62:11:f9:c4:44:0b:b4:37:5b:f2:d8:3b:6d:3b:aa:
d9:a9:63:fe:08:14:ca:d1:5c:78:76:24:2c:fb:b2:
4f:21:27:93:08:69:31:05:fc:33:1e:e6:a0:1b:f8:
9c:cc:93:62:0b:a5:8d:d0:63:f4:3a:24:48:10:89:
32:9a:6a:b5:4e:53:69:48:8b:ca:82:31:4c:1e:f3:
c9:fc:3b:d9:d3:52:75:81:e8:1b:db:d7:3a:d1:96:
c5:eb:45:83:60:fd:99:55:85:12:2a:7b:ee:07:fd:
4b:57:eb:ea:86:ea:38:20:08:9d:cb:06:75:67:c1:
f7:66:20:cf:e0:6a:00:57:cb:1a:67:a6:23:5d:ba:
fd:10:eb:17:81:b2:91:e0:90:b8:65:4b:35:9e:d4:
07:80:5e:dc:b7:90:77:8e:88:83:ca:21:ff:1a:21:
e8:cc:cb:b0:86:89:b0:38:f7:e2:0d:1d:15:7c:0f:
81:2f:43:a7:52:c8:d2:91:52:84:67:2d:77:e2:4f:
d9:7c:04:a3:8e:79:a0:9a:91:5b:8b:25:c9:0f:ee:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:8A:1E:AD:0C:FC:B9:7D:36:69:0D:15:7F:4A:B2:EB:6C:84:64
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/iB6KHq0M_Ll9NmkNFX9KsutshGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.152.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d0:a9:86:2d:0f:40:cc:cf:7c:40:be:69:50:01:22:2d:6c:
d0:78:d2:9f:94:91:a4:17:ff:8d:2a:ea:b1:f6:04:15:9d:08:
47:4d:cf:bb:4e:6f:e9:11:40:ed:e7:fd:26:a0:38:67:e1:e9:
ff:34:cd:f9:ec:99:ee:ba:4a:7b:59:74:4d:28:27:56:53:17:
97:97:f7:68:1f:e2:37:30:d7:a5:3b:3d:2c:dc:7d:7c:c2:d9:
78:98:d4:66:80:d4:d7:01:8e:01:b9:bc:d8:26:fe:72:b1:e1:
bc:eb:5e:f0:5e:f0:21:54:58:b0:04:6c:f3:14:cf:06:b0:74:
0a:85:5a:3b:ff:ed:1a:36:83:d7:4e:c5:e3:e6:13:00:e6:c0:
2f:75:7d:d9:f8:12:75:7e:52:05:d7:fe:81:6b:60:36:cb:ff:
d2:fb:4b:dc:6b:93:94:62:30:6c:02:12:50:03:ee:23:95:14:
34:2e:b2:45:96:e8:4f:d3:a6:9b:9d:3d:48:69:05:aa:63:3d:
8b:d8:7a:47:ea:3f:61:ed:0f:59:2c:53:03:1c:77:bb:4c:bc:
b1:d1:94:06:87:27:1e:e2:68:36:58:fb:c5:d4:24:ef:7d:5b:
8c:2d:a5:41:bd:f1:2a:99:42:48:f2:c2:85:1c:68:50:f0:1a:
ee:6e:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:40 2026 by rpki-client