Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iLw7KZ1NWxdUv45NRUIakb0PRrk.roa
File: iLw7KZ1NWxdUv45NRUIakb0PRrk.roa (raw, json)
Hash identifier: 8A6ne4cWjhwkSSmM8vdI1mqUPsray/okx3PfHMMZWpA=
Subject key identifier: 88:BC:3B:29:9D:4D:5B:17:54:BF:8E:4D:45:42:1A:91:BD:0F:46:B9
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A18C98EEB80337E8A8E0A1ABF94DE1EF5A
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iLw7KZ1NWxdUv45NRUIakb0PRrk.roa
Signing time: Fri 30 Oct 2026 11:36:35 +0000
ROA not before: Fri 30 Oct 2026 11:36:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2a0b:2dc0::/29 maxlen: 29
2a12:1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:98:ee:b8:03:37:e8:a8:e0:a1:ab:f9:4d:e1:ef:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Oct 30 11:36:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88bc3b299d4d5b1754bf8e4d45421a91bd0f46b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:54:fe:5a:4a:26:4a:74:25:e7:7f:84:cc:
ba:a5:40:2c:e8:ee:a9:d6:1e:58:ce:26:b5:d8:3b:
79:b7:4b:37:98:60:e2:2f:4a:f6:c5:2c:07:32:8b:
c7:34:eb:09:34:2c:44:44:d4:c6:08:37:ed:a5:86:
30:c5:a5:34:41:17:01:5a:93:06:7d:16:17:4a:58:
27:65:d6:d3:36:f6:a6:de:64:bf:ed:58:a1:84:e9:
d0:fc:7f:60:ac:08:6d:a9:b2:88:4c:8b:45:54:97:
b0:0d:8b:10:e8:8d:57:8c:b0:e4:d1:a2:4a:e5:ce:
4c:79:68:82:d4:ba:cb:5b:fb:8c:a6:af:26:96:b1:
91:9d:d2:47:0f:39:c3:48:9a:95:70:a2:b1:2c:4b:
6c:b4:12:f3:24:18:01:49:11:2b:ba:a3:fd:e3:44:
4d:18:79:94:d0:c9:ef:40:ca:63:c5:a5:ad:76:c9:
c4:e3:0d:10:b4:32:49:cd:11:73:36:63:ac:8a:80:
26:9b:70:08:08:34:b8:0e:73:9d:24:95:fb:15:34:
9b:a1:fb:1f:10:6f:17:f9:18:04:2e:23:3d:9f:14:
6b:ee:50:06:b6:4d:e1:dc:0c:b4:5a:ef:d5:de:bb:
e4:ea:2b:f9:72:16:ff:63:a5:ee:ec:44:f4:c7:0f:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:3B:29:9D:4D:5B:17:54:BF:8E:4D:45:42:1A:91:BD:0F:46:B9
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iLw7KZ1NWxdUv45NRUIakb0PRrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2dc0::/29
2a12:1c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:a4:53:02:bf:f6:75:4c:cd:25:44:4c:4a:15:36:3f:41:93:
af:bc:fe:89:ab:86:94:24:31:2f:21:2f:22:54:22:a4:2d:09:
5a:26:53:4b:5f:dc:ce:36:51:04:ac:f9:e0:e2:c1:a4:63:13:
ad:03:10:c5:cd:4f:3c:7d:f3:28:8d:eb:6f:9a:67:e3:0f:be:
71:dd:ce:66:96:ce:82:1a:23:8b:cf:df:02:b3:4c:dc:e4:52:
41:d2:a3:bd:dd:b6:9a:d2:e2:d2:44:87:6b:7e:31:50:b3:5d:
ae:fc:34:1d:fa:04:43:6f:e8:58:dc:01:5d:ec:bd:37:78:ce:
9d:90:9f:52:af:8e:04:c8:fa:36:4f:43:b9:69:55:18:dd:b4:
9a:b8:89:0c:ca:e0:e4:b4:13:1c:99:92:e4:ff:51:be:e2:18:
ac:7c:85:fb:10:4a:cb:fa:31:89:4a:4d:57:e3:66:a1:62:79:
0d:3d:73:e3:09:c3:de:fc:9c:9e:d0:ac:18:8a:c4:22:96:23:
f4:b6:bb:66:6a:64:85:fb:2b:20:e0:8d:74:c8:e6:36:8e:d6:
ef:0a:78:12:c9:62:7e:19:74:e5:72:ea:5f:10:7b:88:9d:34:
7f:a4:e2:00:e9:69:c3:eb:31:8f:87:32:51:2e:40:6c:2b:0c:
1d:5f:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:38:24 2026 by rpki-client