Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/IoC_FQgRgKQim-gigVTjRJxZYIA.roa
File: IoC_FQgRgKQim-gigVTjRJxZYIA.roa (raw, json)
Hash identifier: GcUshkFr4iOVO76ybPSzo5t9NXEc3v776m/kaLIpcpA=
Subject key identifier: 22:80:BF:15:08:11:80:A4:22:9B:E8:22:81:54:E3:44:9C:59:60:80
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A154D2BA6F8965294DD8FEDC7C8A98EB6F
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/IoC_FQgRgKQim-gigVTjRJxZYIA.roa
Signing time: Mon 19 Oct 2026 15:40:58 +0000
ROA not before: Mon 19 Oct 2026 15:40:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216367
IP address blocks: 2a09:3f00:3d00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:d2:ba:6f:89:65:29:4d:d8:fe:dc:7c:8a:98:eb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Oct 19 15:40:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2280bf15081180a4229be8228154e3449c596080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:29:fb:11:80:f3:39:b0:e6:97:45:ca:01:
f0:54:4f:83:6f:8d:ca:da:bc:66:5e:1b:b4:48:4c:
ed:70:f9:ca:a4:b0:1d:a2:03:30:9b:89:b9:d5:3d:
ed:a0:cc:b9:3c:de:6d:be:c8:e7:da:bb:f4:82:7e:
21:9f:e0:2c:9d:56:db:d7:4f:ef:c9:fa:74:56:e7:
46:74:04:8e:2d:02:ab:31:04:7b:ed:a3:98:a8:e3:
d6:5f:68:10:92:5d:10:56:70:19:a0:a5:37:80:21:
0d:ee:9b:a9:86:4b:24:01:a1:ad:55:4f:d8:19:69:
6b:e9:87:9f:6d:0e:b1:64:0c:d6:8f:55:c9:dd:f4:
5c:ab:c4:74:ad:ea:3f:70:bd:d6:11:65:cb:0e:67:
b5:68:a1:99:6a:96:18:85:f8:c8:d5:a1:42:13:fa:
91:f7:14:a1:c5:eb:f2:4a:0e:9d:b1:b8:00:24:f5:
a6:ad:82:c9:3f:78:56:96:30:f8:07:59:30:29:07:
f8:51:52:0c:f9:51:2d:08:f3:6d:c5:15:0c:20:f3:
8b:79:55:df:cc:18:88:1a:8e:f2:12:f9:2a:09:5b:
29:76:9a:02:9a:4b:64:cc:a5:70:4c:81:1f:75:eb:
e9:f1:97:31:9b:9c:87:89:66:e1:88:41:10:19:b7:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:BF:15:08:11:80:A4:22:9B:E8:22:81:54:E3:44:9C:59:60:80
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/IoC_FQgRgKQim-gigVTjRJxZYIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3d00::/40
Signature Algorithm: sha256WithRSAEncryption
89:d9:27:98:e7:ec:32:a6:96:27:f0:94:91:76:69:c0:62:43:
18:e5:fb:bb:a2:0a:13:bd:37:78:98:68:b0:35:da:91:eb:ab:
c4:db:e5:99:a3:fd:72:8f:11:ae:16:c6:b2:00:e1:32:c7:0d:
78:09:da:50:82:01:71:81:83:ce:b0:a9:84:13:7d:6f:9c:15:
9e:8e:bc:6a:55:9a:c7:83:9a:08:36:97:2e:9b:53:1a:55:08:
5e:de:9f:77:72:20:c1:db:d4:fc:71:52:c8:12:de:63:ce:16:
9a:b8:83:11:6e:0d:f2:a1:4f:29:8d:27:b3:76:6d:91:b6:57:
4c:e7:36:2e:fb:de:bb:1e:85:37:e1:e6:d1:fb:71:a0:12:b3:
fa:68:d0:ab:af:b4:d1:27:94:27:32:89:69:5d:fd:21:93:26:
e4:c0:37:43:e8:fc:24:fa:57:43:31:b7:ad:e8:96:2d:fb:50:
6d:7f:13:1b:e7:63:5b:33:43:94:df:2f:f4:26:20:d2:28:e8:
f3:9c:43:c7:c6:64:29:da:ea:df:38:4d:70:c4:27:d7:c9:0c:
7a:c5:0d:33:ed:aa:0c:ec:ae:6d:ca:92:05:b5:b1:be:8c:33:
df:28:e3:e2:34:8f:5a:19:94:53:d0:79:20:33:48:5e:72:e4:
74:5f:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:49:03 2026 by rpki-client