Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/iGp-2t_WOYHUhrrtM6FtPfYQyvM.roa
File: iGp-2t_WOYHUhrrtM6FtPfYQyvM.roa (raw, json)
Hash identifier: LUxZPdkZLecIJ1dBfH+q9fgbeGCa+UBEBw5lwGVYqJE=
Subject key identifier: 88:6A:7E:DA:DF:D6:39:81:D4:86:BA:ED:33:A1:6D:3D:F6:10:CA:F3
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A1C01FACF900C838DCEA7CFF9E16FE2880
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/iGp-2t_WOYHUhrrtM6FtPfYQyvM.roa
Signing time: Mon 09 Nov 2026 11:44:23 +0000
ROA not before: Mon 09 Nov 2026 11:44:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 2a11:91c0::/30 maxlen: 30
2a11:91c4::/30 maxlen: 30
2a11:fc80::/30 maxlen: 30
2a11:fc84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:1f:ac:f9:00:c8:38:dc:ea:7c:ff:9e:16:fe:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 9 11:44:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=886a7edadfd63981d486baed33a16d3df610caf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:a2:76:50:ca:e7:8c:30:0b:a4:bf:3e:70:
e1:e2:48:c5:45:f0:e2:dd:8e:04:90:d9:73:41:ea:
2d:32:70:06:b6:a3:86:0e:e5:37:5c:f4:14:ba:35:
39:93:14:97:93:ec:f4:21:0a:1d:2c:92:11:cf:1b:
74:bb:0d:ce:b7:aa:01:90:65:6b:b0:1c:d0:ac:b3:
e0:96:7e:9e:95:aa:3d:8f:f4:51:f7:7f:2f:85:d6:
cf:79:06:15:84:73:2c:7b:0b:c8:85:b7:0d:5e:f7:
da:bf:5a:26:c8:65:45:43:61:15:93:90:63:28:28:
e1:98:28:da:4e:7e:84:00:cb:e1:0b:49:c0:d3:bc:
f4:6b:47:36:07:bf:c8:8d:3b:d4:2b:60:56:76:29:
f0:b2:02:03:22:4f:9f:3c:6b:65:30:cf:27:30:38:
be:72:c2:1b:1a:8e:30:3b:e5:e4:42:74:86:77:cb:
4f:a2:21:a8:9c:f1:8e:77:50:73:d7:b5:95:bf:eb:
2d:a4:27:cd:74:85:15:8d:73:4d:08:96:45:82:98:
97:32:ec:41:6d:42:37:88:55:d0:7a:58:93:74:25:
2e:4a:e6:f2:1a:9c:92:fd:c2:63:41:9d:09:f5:16:
2f:e4:22:34:2f:9b:38:38:10:e9:33:e9:92:85:f1:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:7E:DA:DF:D6:39:81:D4:86:BA:ED:33:A1:6D:3D:F6:10:CA:F3
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/iGp-2t_WOYHUhrrtM6FtPfYQyvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:91c0::/29
2a11:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
bb:f7:96:ea:f6:ad:b3:c1:1a:1b:b5:e9:4b:18:41:68:5a:53:
e8:6a:b3:29:b7:ca:b7:45:c2:83:0c:69:77:85:a3:95:bf:5f:
b5:a1:6f:d0:28:93:39:ab:0d:0f:7f:c0:3d:8c:89:73:40:cf:
2d:2e:48:b0:dd:3b:70:8e:94:c8:88:9c:99:1c:94:96:6a:7e:
75:d2:a2:93:ec:06:91:86:e4:e2:d4:e8:ab:5d:a7:fc:88:e3:
08:e1:6a:62:8c:20:f0:9f:af:b4:04:77:50:49:d6:a5:f0:aa:
df:11:dc:b1:38:8c:9b:ae:95:c5:77:6d:de:dc:c2:af:65:0e:
24:4a:55:ea:d8:63:77:81:9e:39:fb:42:0a:05:25:92:52:f0:
d5:98:77:17:22:51:2d:30:b7:29:86:62:7a:70:73:1c:b8:c4:
4c:56:f2:14:67:2d:54:9a:6b:aa:97:a4:68:62:a4:b9:b4:05:
30:9e:c2:5e:3a:51:bf:70:2d:7f:9f:2e:8b:3f:b8:57:f7:2e:
8c:dc:70:97:5a:62:f9:dd:78:5d:4a:c4:a4:e8:f1:01:5d:03:
88:9c:fc:c3:00:b2:4d:59:79:d7:cc:40:64:f5:0c:97:80:94:
20:8b:38:e7:a7:e8:8b:b4:a9:47:3d:41:16:ba:2c:4f:89:8c:
84:4f:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:10 2026 by rpki-client