Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/Ivo9foptlHgZGm6u5gb6QwW3XyE.roa
File: Ivo9foptlHgZGm6u5gb6QwW3XyE.roa (raw, json)
Hash identifier: 2DKjAU7c2CAk3rfklrUELipPt0YMxIA0kvbW1SiZbks=
Subject key identifier: 22:FA:3D:7E:8A:6D:94:78:19:1A:6E:AE:E6:06:FA:43:05:B7:5F:21
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 019F23684083301E5E8305FDE583EBE9F3F5
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/Ivo9foptlHgZGm6u5gb6QwW3XyE.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 82.192.96.0/24 maxlen: 24
82.192.97.0/24 maxlen: 24
82.192.100.0/24 maxlen: 24
82.192.101.0/24 maxlen: 24
82.192.102.0/24 maxlen: 24
82.192.103.0/24 maxlen: 24
82.192.108.0/24 maxlen: 24
82.192.109.0/24 maxlen: 24
82.192.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:40:83:30:1e:5e:83:05:fd:e5:83:eb:e9:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fa3d7e8a6d9478191a6eaee606fa4305b75f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:87:42:9a:74:eb:36:e2:11:47:02:00:ba:
31:f1:d5:18:74:14:b4:a8:6d:73:ca:78:99:8f:57:
c0:ab:e4:27:0c:43:7b:8c:d3:48:5d:2d:8a:a4:fc:
ee:5c:f2:f8:51:66:aa:6e:60:10:bf:5e:a1:9b:05:
50:eb:71:ff:d9:c2:af:3e:6e:77:97:fd:48:49:07:
37:41:a4:1c:3c:d5:ae:93:35:00:98:59:ac:f9:ed:
3f:62:d8:af:76:8b:5d:81:f8:65:ec:14:b2:ce:b8:
26:b2:7f:00:0c:d5:71:26:53:86:cb:73:fb:38:d2:
46:23:17:5c:39:46:b1:ee:6c:6b:b3:71:31:4d:97:
e9:c0:ee:f6:40:0b:cd:e4:a5:72:9f:b5:78:da:cb:
b5:4e:fb:b7:ee:50:49:39:df:a6:25:d4:36:8d:17:
58:be:97:e0:57:f8:5e:60:9f:43:63:fc:c1:1c:ca:
06:ed:a2:dd:d8:eb:d9:1f:9d:7b:82:a3:0c:5f:d6:
bb:bc:3f:2a:a0:a8:67:da:9e:20:c9:91:bb:e6:99:
98:2f:2b:03:7f:b7:e9:06:82:fb:18:81:d9:6e:7d:
db:0e:38:3b:ed:09:8c:4f:be:2f:bf:d6:9d:9b:82:
ba:97:e4:ac:5b:4d:b6:8f:fa:37:b7:f0:8b:42:1d:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:3D:7E:8A:6D:94:78:19:1A:6E:AE:E6:06:FA:43:05:B7:5F:21
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/Ivo9foptlHgZGm6u5gb6QwW3XyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0/22
82.192.108.0-82.192.110.255
Signature Algorithm: sha256WithRSAEncryption
40:f0:cf:74:ab:f2:77:fc:db:69:eb:3d:02:2a:08:65:b0:1f:
0d:57:5f:37:2f:6e:e0:f3:d1:a8:97:5c:c5:cf:94:37:fa:80:
74:ca:55:18:13:9d:03:88:77:8d:1a:c6:3f:25:45:ae:0c:dd:
4d:7e:72:bb:8b:0f:44:5b:0d:f7:d8:20:24:3d:b0:75:66:68:
ef:4d:55:79:69:22:61:77:28:3c:f0:fb:88:74:de:00:06:d5:
30:6a:bf:e7:92:0e:fb:51:bb:0f:16:13:80:c1:76:de:31:ef:
e3:96:c4:fc:65:e3:69:b8:9d:a9:6b:dc:db:75:99:2c:2f:8a:
67:f4:f3:ae:b4:c8:b4:32:2f:04:55:62:bf:62:28:f9:eb:3e:
5b:71:1c:52:46:18:68:9c:53:cc:e8:ac:1e:b0:b6:57:18:e1:
43:44:d6:ba:3a:73:a2:49:5d:4a:65:c9:84:77:ea:10:8c:db:
e0:2c:bd:c1:1d:cf:86:14:30:48:e3:bb:00:b3:87:29:3f:99:
56:17:09:05:93:d4:2d:ca:0c:4e:b4:46:3f:43:e2:47:cc:67:
27:f7:a3:4d:35:23:8b:59:47:25:4a:25:4c:23:9c:51:68:24:
9f:cf:94:4c:a9:93:e1:0f:d1:67:ba:f4:dd:ca:c8:05:1e:f2:
c5:fd:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 19:00:56 2026 by rpki-client