Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/ALKiFATXKbxsvKbFnpW2L2093PM.roa
File: ALKiFATXKbxsvKbFnpW2L2093PM.roa (raw, json)
Hash identifier: J2LR4FzNbBQS74F5/rUgnYfv0RWSjKYtO+fyGsXykTM=
Subject key identifier: 00:B2:A2:14:04:D7:29:BC:6C:BC:A6:C5:9E:95:B6:2F:6D:3D:DC:F3
Certificate issuer: /CN=88605bb5a213f06afb8244fb2f953badcdfe177d
Certificate serial: 01A1CED4F7FDAD8F4B8EFB543A077CE8DD98
Authority key identifier: 88:60:5B:B5:A2:13:F0:6A:FB:82:44:FB:2F:95:3B:AD:CD:FE:17:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/ALKiFATXKbxsvKbFnpW2L2093PM.roa
Signing time: Thu 12 Nov 2026 08:17:05 +0000
ROA not before: Thu 12 Nov 2026 08:17:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211588
IP address blocks: 185.229.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:d4:f7:fd:ad:8f:4b:8e:fb:54:3a:07:7c:e8:dd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88605bb5a213f06afb8244fb2f953badcdfe177d
Validity
Not Before: Nov 12 08:17:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00b2a21404d729bc6cbca6c59e95b62f6d3ddcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:59:1a:12:a9:fa:a5:66:f5:34:73:e9:2a:
fd:d2:61:b8:fb:fc:3e:c3:09:7e:52:92:b6:06:5f:
c4:17:1a:dd:9a:fa:c0:ea:db:47:ab:de:de:05:9b:
ee:5d:91:04:a7:01:f2:46:55:75:8a:2a:94:3c:31:
80:56:72:51:1f:3c:cc:17:85:db:18:ee:38:a5:55:
9f:7c:8f:5c:35:2f:45:11:81:bd:a0:a3:92:8c:cd:
38:d1:0f:46:71:bd:7f:ae:f0:37:f9:35:43:79:0a:
85:14:ec:ac:4f:db:39:fc:12:9d:7b:ba:70:f3:e7:
61:7e:a0:12:56:63:fa:c3:62:db:83:1e:ad:0f:de:
ce:3f:9f:c3:b0:a6:87:36:d6:51:6e:94:a1:ad:50:
25:b7:e9:fd:89:54:ec:a4:ec:2c:d6:40:b3:d4:13:
4e:36:60:74:a8:aa:23:4a:a3:07:8e:3b:50:2f:2e:
71:f2:f4:e1:ba:5c:1e:2a:fd:aa:78:61:56:8f:7e:
8a:ee:4b:50:5f:ac:53:4b:d8:1a:92:9f:46:b3:05:
3e:47:af:65:0b:3c:bd:9f:64:9a:79:e3:74:78:76:
16:42:8d:44:e1:6a:81:9d:c7:cf:7b:e6:92:3b:a9:
15:2a:8e:55:3d:52:4a:39:59:b0:9b:cf:4c:d1:1e:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:A2:14:04:D7:29:BC:6C:BC:A6:C5:9E:95:B6:2F:6D:3D:DC:F3
X509v3 Authority Key Identifier:
keyid:88:60:5B:B5:A2:13:F0:6A:FB:82:44:FB:2F:95:3B:AD:CD:FE:17:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGBbtaIT8Gr7gkT7L5U7rc3-F30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/ALKiFATXKbxsvKbFnpW2L2093PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fc9b8-7f64-411f-9004-9a5d45fbcf1d/1/iGBbtaIT8Gr7gkT7L5U7rc3-F30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.33.0/24
Signature Algorithm: sha256WithRSAEncryption
10:72:7e:9b:3d:83:ef:68:06:d0:1c:51:ff:2e:10:ba:24:81:
31:23:72:c6:2e:34:90:0c:4f:dd:47:76:46:45:48:8a:44:51:
32:70:e1:68:d5:f7:b3:e6:51:fc:ea:07:95:da:ce:c4:13:64:
5f:6c:e2:0c:bd:ea:13:f7:e7:75:d4:d7:14:43:e0:c7:4b:5f:
3b:48:59:45:fd:78:63:17:c8:e1:5f:50:53:5f:3b:d4:59:ab:
0c:54:f5:eb:c2:dd:32:cb:db:9c:0b:5a:aa:8b:09:22:06:2f:
6f:17:d2:37:84:ca:81:f1:fe:57:32:82:cf:3e:fa:cb:55:79:
31:c7:a9:07:79:90:88:63:28:9e:fa:56:44:2c:64:a4:6e:6e:
b7:2b:11:e2:f9:c6:9b:53:02:b6:78:d3:ec:74:c8:11:01:f7:
d4:87:28:33:1c:1d:e0:92:da:56:5c:c0:43:13:3a:30:a4:1e:
4b:71:43:6c:21:27:1e:44:60:42:2a:cc:14:a0:04:59:ba:ae:
02:da:5d:ef:12:bc:60:9a:59:a4:ec:22:86:fb:cf:90:f4:93:
e4:08:cc:82:6f:ad:db:ef:26:f4:5f:67:08:40:55:fc:68:fb:
fb:ae:29:0e:f0:58:cf:df:74:21:1c:dd:95:de:a5:1a:02:a1:
35:95:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:40:18 2026 by rpki-client