Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IaoqwLkPDyG-15RWrKE6Mh-Iiqs.roa
File: IaoqwLkPDyG-15RWrKE6Mh-Iiqs.roa (raw, json)
Hash identifier: Lrip6Pu0nUgvYf2YaZi+DSbfELxc6pTy+QmH7eLdvnw=
Subject key identifier: 21:AA:2A:C0:B9:0F:0F:21:BE:D7:94:56:AC:A1:3A:32:1F:88:8A:AB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E90F7E4D01E52BA04323854567F9ABE8E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IaoqwLkPDyG-15RWrKE6Mh-Iiqs.roa
Signing time: Thu 04 Jun 2026 04:50:25 +0000
ROA not before: Thu 04 Jun 2026 04:50:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 87.121.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:f7:e4:d0:1e:52:ba:04:32:38:54:56:7f:9a:be:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 4 04:50:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21aa2ac0b90f0f21bed79456aca13a321f888aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:36:86:04:27:51:49:d5:fd:43:d1:31:32:60:
82:8d:0e:0f:98:eb:79:8c:fe:8d:84:62:f8:78:94:
d2:39:4b:ce:00:c3:d7:ba:66:01:2a:a5:75:9e:7c:
34:24:b1:53:50:63:a9:f8:00:69:91:17:ca:9f:4f:
63:d4:fd:52:07:d6:84:3b:2e:1d:58:c2:4e:34:a2:
5a:44:1c:a6:f3:c8:bd:14:0e:23:e6:11:b6:7c:32:
81:2e:d8:5c:ce:4d:28:31:67:b2:84:43:4f:48:2f:
20:ff:4e:e8:c5:9b:ca:ae:71:6e:26:91:ed:61:8a:
d5:11:e8:24:a8:84:7c:54:02:f5:84:f5:bd:88:19:
02:e4:0b:6b:4d:fe:03:ce:28:72:c3:05:21:54:29:
66:5e:1a:2e:9f:7b:4c:c6:b9:dd:a2:ef:40:b5:eb:
42:40:05:0c:a1:c6:40:e5:dc:ed:29:e8:ef:be:53:
5a:8b:dc:bd:88:a2:12:7a:fc:b7:18:bf:26:41:de:
a6:53:e2:8f:b2:da:0e:6a:fb:5a:61:2f:17:a8:e7:
cf:fd:29:c2:2c:0e:5d:49:78:e9:1b:04:c8:cd:4e:
6f:ad:b5:3f:71:cc:8e:c3:a1:a9:7d:7e:4d:14:46:
4b:7a:8d:31:78:ca:48:15:6d:bd:d7:60:bb:dc:b1:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:2A:C0:B9:0F:0F:21:BE:D7:94:56:AC:A1:3A:32:1F:88:8A:AB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IaoqwLkPDyG-15RWrKE6Mh-Iiqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:df:54:dc:28:77:87:ff:1b:47:3e:94:ae:b5:93:c8:fb:bc:
0e:97:4b:21:c1:80:4f:d6:cb:37:ca:37:3f:8b:19:ca:34:43:
4e:18:3a:1f:31:fe:ab:d0:d6:7e:7a:37:f9:ea:90:41:b1:a3:
94:98:ad:00:cf:33:10:dd:2a:80:b7:a0:cb:ea:fa:2d:d3:62:
53:2a:ea:ed:ca:e1:9f:bf:91:28:5a:23:43:4e:0f:05:b4:0f:
38:6d:a3:45:cf:02:3a:12:1e:b3:37:ca:86:5a:54:f4:af:9e:
89:a4:ad:70:5d:7a:db:96:2d:19:dc:74:e0:3d:87:6b:90:73:
0a:38:82:33:8d:08:38:96:d8:01:71:20:bd:f9:05:80:29:03:
5f:ca:aa:44:e6:7a:08:ad:73:48:ec:02:13:f3:b4:2e:03:69:
4d:1b:b0:b3:08:7f:c6:ab:55:eb:e4:0d:ae:b5:7d:b5:94:03:
38:51:60:83:5a:c6:fe:4a:05:45:7e:25:ba:10:cd:09:f2:b0:
0f:c8:77:cd:7b:10:d3:b8:1d:c9:cf:8b:11:1f:29:54:7d:18:
a3:10:c1:73:f9:9f:34:d9:35:37:81:74:b9:2d:c1:0b:9b:1b:
1d:55:41:01:b1:57:d5:7f:9e:31:aa:0f:ad:26:6f:15:96:a6:
8b:52:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:46:10 2026 by rpki-client