Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/icYBduufuy19hq5ACVdonHluItk.roa
File: icYBduufuy19hq5ACVdonHluItk.roa (raw, json)
Hash identifier: M9Ci7GaljuxCkXOyIZ9G3qbGMEB2yNLHWI79AAGwCtk=
Subject key identifier: 89:C6:01:76:EB:9F:BB:2D:7D:86:AE:40:09:57:68:9C:79:6E:22:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0ECEFD8475C0DC61FA2B205CE3BB4FF40
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/icYBduufuy19hq5ACVdonHluItk.roa
Signing time: Tue 29 Sep 2026 11:32:16 +0000
ROA not before: Tue 29 Sep 2026 11:32:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44828
IP address blocks: 31.13.224.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.121.133.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:ef:d8:47:5c:0d:c6:1f:a2:b2:05:ce:3b:b4:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 11:32:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89c60176eb9fbb2d7d86ae400957689c796e22d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:bd:2e:cb:40:93:a5:02:84:1e:b7:e3:89:
b5:d5:94:d4:e2:98:68:b8:2e:f2:8f:82:ae:8e:c9:
42:9f:77:69:74:50:f9:d5:33:b6:f0:07:fe:1c:84:
40:32:da:21:c1:21:7a:14:ad:27:6f:90:66:ea:0b:
8d:4c:07:42:ef:62:38:ae:93:e7:e8:0f:a5:fc:ef:
ac:7a:2a:65:4a:78:9e:af:d8:65:82:97:69:8b:b5:
a3:1e:29:64:a2:54:e0:16:fd:87:03:ec:f9:4c:8d:
b8:43:9c:7d:bf:51:42:5c:9f:b6:1f:cb:cd:b4:f8:
3d:6a:be:e5:e3:93:18:80:48:ff:84:44:25:96:65:
69:cc:78:15:a1:eb:9d:65:a1:0f:ec:9c:72:92:e0:
fb:d3:0c:d5:70:a7:9b:c3:0f:16:9c:7f:49:41:3b:
27:3b:f2:59:56:5d:06:06:5a:e6:52:02:34:3e:a0:
92:4b:a7:65:28:90:2e:47:0b:26:a7:b1:65:c1:7c:
fe:7c:14:0f:98:4d:8f:a1:4c:fc:11:24:a0:4d:ac:
06:91:19:89:a2:46:e4:ed:38:fe:e6:25:c8:60:4c:
60:80:30:69:37:a0:85:92:ea:4f:ad:d7:84:b8:87:
0a:e5:3a:1d:f9:72:a9:82:aa:50:f0:1b:0f:e9:8e:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:01:76:EB:9F:BB:2D:7D:86:AE:40:09:57:68:9C:79:6E:22:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/icYBduufuy19hq5ACVdonHluItk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
45.139.123.0/24
87.120.33.0/24
87.121.133.0/24
87.121.220.0/24
94.154.161.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4d:e3:2b:e3:1c:59:af:dd:5c:8d:c8:53:7b:6a:bf:98:41:
e1:71:71:d3:c4:f4:27:69:0a:2c:3d:a9:c6:ad:5a:d1:08:c1:
d1:ff:55:c3:98:8f:2c:e0:e8:c7:11:f8:e0:4f:d7:12:11:ab:
e9:01:36:ea:04:66:1e:38:e2:06:1a:36:67:36:74:65:72:ab:
40:a9:52:2e:e9:ff:dc:2b:4f:1c:25:be:f3:eb:f2:57:85:55:
df:72:a4:36:81:b7:8e:97:3a:78:df:7f:77:79:a7:80:19:a8:
6f:2d:a4:fc:1f:cd:cd:e6:cc:cc:1d:42:65:7e:60:70:ab:bf:
23:d8:2a:bc:09:c5:73:62:23:44:6c:b6:d9:8e:a2:c0:29:21:
d5:7b:9e:2c:ac:75:e6:a2:42:e3:a4:6f:86:6f:e9:88:aa:86:
b0:0f:4e:dc:80:2b:cd:8e:ba:fe:0b:70:7f:59:79:dc:ff:36:
1d:63:f5:ae:f0:4b:f6:71:70:45:5d:36:44:d6:f9:b9:d7:14:
2d:1c:09:92:e3:e4:0e:a2:c9:a2:73:3c:c1:e3:00:a3:40:4c:
99:b4:ca:c2:0f:5a:b4:09:23:36:b6:fb:47:82:0d:79:59:a8:
58:a4:dd:c3:51:13:00:a3:b6:55:73:59:e9:b6:83:4e:b0:dc:
c7:18:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 22:21:20 2026 by rpki-client