Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/IYfkj5_uUMib9OxJX7ghaTX2Wn0.roa
File: IYfkj5_uUMib9OxJX7ghaTX2Wn0.roa (raw, json)
Hash identifier: OO25rjwfSavJiJbGapEYm9624aA5wv7SmTNCcKdZxlc=
Subject key identifier: 21:87:E4:8F:9F:EE:50:C8:9B:F4:EC:49:5F:B8:21:69:35:F6:5A:7D
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 01A0451F3A69AE0F6F6D31D6C1BB0DC438D1
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/IYfkj5_uUMib9OxJX7ghaTX2Wn0.roa
Signing time: Thu 27 Aug 2026 21:27:49 +0000
ROA not before: Thu 27 Aug 2026 21:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203217
IP address blocks: 185.194.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:1f:3a:69:ae:0f:6f:6d:31:d6:c1:bb:0d:c4:38:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Aug 27 21:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2187e48f9fee50c89bf4ec495fb8216935f65a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:a2:a4:63:b0:9c:5e:28:de:f3:a8:ea:3a:
ed:5d:63:b7:a9:04:b9:ba:c9:b3:0a:ef:3f:f0:50:
c9:70:8d:8b:0d:17:77:c2:42:cc:a5:6d:cd:a4:88:
35:b7:bf:ff:bb:47:77:05:d0:fd:2d:96:77:d9:06:
11:3e:19:bd:9d:b4:f7:ce:af:4d:16:f4:7c:28:1d:
e9:f0:0e:ff:c2:80:cf:fa:2a:8d:4e:1f:64:5c:b1:
fb:03:1d:1d:d9:43:a3:d8:ad:16:cb:b7:a1:f9:70:
ba:4a:ea:9d:bf:c4:5b:c0:27:e0:38:2d:96:2b:d5:
c0:8e:9e:7d:b8:57:23:e2:8f:78:33:dc:79:a5:fd:
e9:12:4c:4a:ac:3c:31:39:0f:24:04:7d:67:c4:9e:
7e:f0:a0:db:52:ad:87:9d:fe:28:e2:4b:b3:d8:cb:
7d:e0:c5:ea:10:07:16:86:94:f1:e6:78:47:75:a0:
ca:eb:bc:13:cc:08:68:fd:b6:cb:69:fb:d7:0c:7c:
bf:52:74:6f:28:ed:1e:77:e7:34:c3:9c:5b:7f:10:
b0:32:bf:49:0b:4c:3e:83:ab:df:d2:32:bf:66:3e:
ce:0a:89:81:b4:ba:9f:10:58:39:a7:aa:11:88:52:
43:14:5e:40:3c:3f:73:c3:9b:e8:19:15:22:6b:2c:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:E4:8F:9F:EE:50:C8:9B:F4:EC:49:5F:B8:21:69:35:F6:5A:7D
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/IYfkj5_uUMib9OxJX7ghaTX2Wn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:bb:98:5d:73:23:55:95:b9:4a:29:76:7d:78:e0:8f:b4:76:
09:e8:c9:62:04:b5:06:5c:bb:f0:5a:ca:96:e6:7c:0d:3b:1c:
9c:c6:46:a2:7e:db:fc:cd:68:b0:4b:82:90:19:20:05:83:f6:
ca:2f:0f:f9:d7:0b:2e:5d:0d:00:db:95:7d:fb:4b:be:ff:e7:
09:bb:b4:b2:5d:c5:9b:f5:d8:30:68:c2:98:11:7b:d0:91:75:
9b:05:f4:67:d7:b0:87:0d:a4:b2:82:fc:ca:1e:fa:e8:b6:2b:
fd:07:b4:b9:39:d5:e7:50:51:05:f7:0e:77:c5:84:41:a5:d1:
28:26:4b:67:4e:02:00:c1:86:bb:64:35:05:86:02:82:81:ee:
4d:ff:2d:c7:2b:4d:7c:d1:18:65:87:8a:78:d9:21:ed:6a:0e:
2b:b6:26:74:8a:58:1c:4b:c9:fe:cd:88:d0:e3:29:30:5e:67:
33:d0:4f:64:df:2f:d8:2d:e7:fc:37:3d:e6:6d:93:1e:f7:41:
36:90:8c:58:db:70:e8:14:68:85:08:d4:00:30:32:27:bf:64:
90:42:ed:d7:d6:49:ad:c0:3c:9a:5e:c0:05:73:b7:85:ba:af:
28:0b:7f:f3:b2:62:3a:1e:3c:23:dc:a9:78:84:fe:39:30:cf:
04:50:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:25:00 2026 by rpki-client