Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/IEEGCXxK9NZZAyvgooGe_0krRwA.roa
File: IEEGCXxK9NZZAyvgooGe_0krRwA.roa (raw, json)
Hash identifier: ufaDl8VQDgum3aim68/T7UN4n3wx+m74Tx5ctK6jZmk=
Subject key identifier: 20:41:06:09:7C:4A:F4:D6:59:03:2B:E0:A2:81:9E:FF:49:2B:47:00
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 01A043A51DCB398B8F39D2070C5FD47455B4
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/IEEGCXxK9NZZAyvgooGe_0krRwA.roa
Signing time: Thu 27 Aug 2026 14:34:49 +0000
ROA not before: Thu 27 Aug 2026 14:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213312
IP address blocks: 104.204.244.0/22 maxlen: 22
104.204.245.0/24 maxlen: 24
2001:678:10bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:a5:1d:cb:39:8b:8f:39:d2:07:0c:5f:d4:74:55:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Aug 27 14:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=204106097c4af4d659032be0a2819eff492b4700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:eb:a8:69:7e:d7:06:38:af:ad:39:26:27:
1e:34:6d:d0:fe:e3:0f:45:2d:e4:27:c5:38:3d:23:
92:d8:19:b1:64:1f:3e:1c:1a:7c:1e:09:fd:d6:5c:
90:87:13:52:a5:00:3e:98:97:28:6b:be:c5:3c:1e:
58:77:a5:b7:06:fd:6c:81:ed:75:d5:69:be:3f:c9:
ba:b1:99:a9:d1:bd:cf:1c:e6:67:a1:d0:70:06:dd:
42:83:c2:34:83:5e:c6:07:86:d1:af:29:c4:e9:d2:
53:8a:85:55:34:f3:64:0f:7a:c1:4d:19:6c:31:71:
96:37:b5:44:f1:a7:57:88:d9:7c:9f:a2:16:62:d6:
7f:4f:72:f5:51:28:6c:af:7b:82:da:c3:22:e9:2b:
e0:16:2a:5e:6a:0d:9d:95:9b:37:91:97:63:f9:b9:
67:2e:b6:e3:99:43:68:17:c2:47:78:6e:fa:56:9f:
1c:c9:be:42:12:96:37:f6:65:79:ab:34:88:f5:36:
83:c6:71:dc:58:f6:70:56:7d:1b:d2:14:ae:51:51:
2c:39:92:c7:c4:c7:32:e6:23:4b:88:91:26:14:fc:
8f:fb:a6:d6:78:43:5b:8e:fe:f8:82:53:34:5e:97:
60:1e:ea:f5:bc:72:2e:34:ab:47:61:de:b0:26:65:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:41:06:09:7C:4A:F4:D6:59:03:2B:E0:A2:81:9E:FF:49:2B:47:00
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/IEEGCXxK9NZZAyvgooGe_0krRwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.204.244.0/22
IPv6:
2001:678:10bc::/48
Signature Algorithm: sha256WithRSAEncryption
a3:66:c4:88:82:db:c7:f5:46:ea:bb:25:69:f3:6d:4f:e4:e4:
6a:5e:db:b0:a4:e1:e7:73:c4:61:ec:0c:ed:3d:68:13:0c:11:
5f:cd:4c:67:35:71:92:62:f7:39:8f:98:e4:2a:53:0e:48:80:
cd:bc:44:b5:4b:bd:a5:47:b0:8a:b8:26:26:a2:ab:ab:da:f7:
32:1d:d2:7f:70:0c:2e:f7:64:8a:82:53:41:ee:88:21:df:db:
e9:91:7a:5b:9e:86:8f:fe:b2:8c:f4:4b:b1:8f:d3:f0:6f:30:
c7:fb:7a:db:93:45:b8:b2:a7:d3:4b:7e:50:1b:7a:4f:0d:24:
e0:75:46:86:cc:56:9b:3c:93:d4:02:ac:4c:7c:a0:2b:ff:58:
11:f0:5b:17:20:72:eb:6b:fd:e4:d4:96:19:83:91:8e:87:4a:
c6:24:8c:e8:c5:22:32:71:74:80:69:a3:7f:c5:99:31:8b:2a:
99:30:19:56:5f:9c:13:6f:6a:c9:22:4a:6e:0e:59:7f:82:60:
3b:a6:bc:6b:b7:a9:45:24:a2:38:0c:69:1d:f2:42:0f:a6:9c:
f2:29:aa:31:2b:49:bc:b0:03:7e:50:e9:9f:4d:fd:94:72:03:
f4:1f:1b:be:13:69:2e:0e:35:69:00:dd:f3:c6:29:18:53:ac:
f4:39:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:57 2026 by rpki-client