Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IuMewLHkCAoW0BeRzw3FI24k7O4.roa
File: IuMewLHkCAoW0BeRzw3FI24k7O4.roa (raw, json)
Hash identifier: 8hn7hBE58wr+nI0T5PkdlXZhc7NIuGqxBfYfEce6+TQ=
Subject key identifier: 22:E3:1E:C0:B1:E4:08:0A:16:D0:17:91:CF:0D:C5:23:6E:24:EC:EE
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A00A93BA413E9EC736C7576D33B7DEFA74
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IuMewLHkCAoW0BeRzw3FI24k7O4.roa
Signing time: Sun 16 Aug 2026 12:37:28 +0000
ROA not before: Sun 16 Aug 2026 12:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4771
IP address blocks: 2.17.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:93:ba:41:3e:9e:c7:36:c7:57:6d:33:b7:de:fa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Aug 16 12:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22e31ec0b1e4080a16d01791cf0dc5236e24ecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:47:82:22:2a:88:ff:51:40:c1:f5:a7:03:
fd:35:96:4d:eb:2a:23:09:34:9c:57:37:7c:71:14:
21:cb:24:48:53:69:87:66:b9:9a:fd:6b:eb:70:f8:
61:96:4b:e7:bc:e2:50:41:d6:b1:41:b3:78:7e:6e:
2d:7b:f7:82:85:85:8f:50:87:c2:34:0c:66:b9:24:
6f:cc:46:08:61:17:41:38:2b:5a:e0:a5:77:ee:c2:
3c:b1:35:7f:fa:0a:b2:7d:cf:bc:7b:6b:5e:ee:be:
eb:53:ae:19:bf:9c:50:29:b0:f8:03:1c:7b:42:b5:
3c:dc:1d:9d:7c:e3:89:a7:71:06:5a:b7:d1:32:a2:
79:12:1e:19:da:bf:de:e0:9b:69:4c:34:ba:e2:93:
d5:f1:65:8a:de:3b:7a:77:e3:40:36:2d:ce:8d:25:
71:e7:fd:6f:e2:f8:c9:ca:9a:3f:c6:c1:fb:c0:a5:
a1:9f:b5:ab:3b:99:21:2d:2a:20:0b:25:f2:9f:76:
8a:0f:13:ae:1a:fa:c8:fc:1f:f7:5b:39:b6:2f:7e:
55:9f:34:19:09:4d:f9:92:a6:3d:1a:d6:a6:c8:cf:
f2:ab:97:52:2c:55:5e:b5:9f:bb:ea:7a:b9:3d:20:
25:b6:65:c0:7f:8f:c3:14:4f:53:e0:ad:e8:92:2f:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E3:1E:C0:B1:E4:08:0A:16:D0:17:91:CF:0D:C5:23:6E:24:EC:EE
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IuMewLHkCAoW0BeRzw3FI24k7O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.220.0/22
Signature Algorithm: sha256WithRSAEncryption
47:30:29:f2:3f:30:28:27:c4:5b:75:69:4f:23:bd:54:6b:b7:
d3:f1:3e:85:84:86:61:00:3e:a6:a3:27:9e:64:44:0d:94:59:
6e:cd:95:35:9d:49:f6:03:a9:6c:71:06:6c:0d:d4:d5:5d:78:
d5:97:32:2c:33:52:5f:f6:27:57:4f:ee:c4:db:71:7d:7f:e6:
69:76:1d:44:d8:bf:1c:d4:8b:0c:27:20:05:ca:cf:7b:ff:e7:
6f:37:ea:9b:51:58:dd:aa:db:92:b1:cc:ef:af:1d:f9:d1:4a:
6d:63:37:1c:e3:57:5f:11:59:5d:eb:24:49:0f:8e:9a:3c:9f:
d0:fe:a9:aa:99:64:49:6d:30:d0:8e:81:1c:06:ce:2d:57:44:
2d:de:c6:cd:37:b1:93:1c:91:fb:64:4f:76:61:21:6d:ac:4f:
e1:00:73:c0:8b:b4:56:ea:e2:1e:0e:aa:eb:bd:87:da:61:0e:
0c:b5:25:ad:1e:c9:ce:d9:95:b4:4a:d2:da:2d:9a:a0:d9:e2:
b1:26:7a:b6:af:86:2a:a3:f2:fd:c2:75:39:64:c2:a5:43:b3:
1c:43:3b:38:00:f7:24:2d:38:ad:8a:5a:d8:93:cb:7c:bc:12:
8c:cd:95:39:a6:49:f1:6b:22:7d:a1:f1:1c:42:6d:78:d0:ae:
e7:c6:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:56:34 2026 by rpki-client