Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/iKpoSsIRnwX_GXJUU0iRdZh3ANw.roa
File: iKpoSsIRnwX_GXJUU0iRdZh3ANw.roa (raw, json)
Hash identifier: QSs2F3Hkjeu7N7gsHBhIIexx+hOXUzyvEs2ACQczbb4=
Subject key identifier: 88:AA:68:4A:C2:11:9F:05:FF:19:72:54:53:48:91:75:98:77:00:DC
Certificate issuer: /CN=6125db688d406cc7bd6fbc1d549d463868383cb4
Certificate serial: 019F23687A95CFD246C99F0C3E9383D61487
Authority key identifier: 61:25:DB:68:8D:40:6C:C7:BD:6F:BC:1D:54:9D:46:38:68:38:3C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/iKpoSsIRnwX_GXJUU0iRdZh3ANw.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39256
IP address blocks: 46.254.80.0/21 maxlen: 21
92.43.0.0/21 maxlen: 21
185.17.88.0/22 maxlen: 22
188.93.24.0/21 maxlen: 21
2a03:7dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:95:cf:d2:46:c9:9f:0c:3e:93:83:d6:14:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6125db688d406cc7bd6fbc1d549d463868383cb4
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88aa684ac2119f05ff19725453489175987700dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:84:cb:f0:67:d4:fe:82:b5:10:e1:83:3b:
e5:d2:b1:31:a3:ed:29:64:88:9f:d5:b7:97:f7:89:
2e:65:da:1c:4c:36:f0:a9:58:c8:04:5b:62:1c:f3:
63:8a:79:40:2c:00:30:0e:a2:53:8f:69:b9:e6:87:
18:e5:7e:f3:36:36:0c:53:47:0f:ab:86:6e:52:b7:
f0:e1:3d:9e:77:41:9e:6e:6a:95:85:e9:0c:dd:22:
45:62:1d:c5:57:c0:cb:81:c6:85:ee:ed:06:3b:2c:
64:d8:fe:cf:bd:fb:eb:17:b6:f3:73:c0:31:28:3e:
87:c9:a7:4b:98:21:f2:98:66:f2:09:37:f2:4d:df:
a6:6c:73:85:0f:22:2a:d2:b2:e7:39:e5:78:fa:41:
1e:49:f6:a0:e0:17:c1:d1:e1:5e:77:22:a4:6c:36:
de:c9:8f:b0:24:6f:06:17:e2:59:bc:94:59:ca:94:
46:a2:a7:9c:39:06:c4:2d:29:47:42:8f:94:cf:d8:
0a:23:89:17:85:1c:7a:00:7a:21:39:9f:33:ee:1d:
2e:e4:14:a9:bd:bc:4b:09:d6:8f:b4:98:df:5d:71:
e9:7f:26:85:0a:9d:8d:6b:7d:cd:a9:56:76:26:3d:
19:ba:44:58:84:03:1f:0f:ff:8f:a4:59:d1:c3:8a:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AA:68:4A:C2:11:9F:05:FF:19:72:54:53:48:91:75:98:77:00:DC
X509v3 Authority Key Identifier:
keyid:61:25:DB:68:8D:40:6C:C7:BD:6F:BC:1D:54:9D:46:38:68:38:3C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/iKpoSsIRnwX_GXJUU0iRdZh3ANw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.80.0/21
92.43.0.0/21
185.17.88.0/22
188.93.24.0/21
IPv6:
2a03:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:a6:5e:25:6c:50:62:3d:50:23:de:ca:3a:b1:bc:d9:19:88:
46:d0:e3:ff:89:f9:11:56:43:71:1d:cc:63:94:68:46:b2:9c:
90:22:97:75:b7:7a:1a:b9:72:ed:ba:81:5b:45:60:56:ae:f9:
54:63:3b:e3:60:c3:c9:68:0a:88:63:8e:9c:64:c6:43:00:1d:
75:d8:0d:b2:04:42:60:2b:0a:c3:c0:60:85:8a:ea:b9:f9:e4:
0e:d7:6b:09:f2:d7:bd:ef:1e:78:dd:fc:4c:89:7b:ec:37:0b:
0a:ca:33:d7:ba:85:8c:d3:05:13:3b:71:e5:d5:7d:05:f8:a4:
5c:20:ed:ff:46:21:e2:e7:0e:e6:4f:c6:bd:e8:24:45:09:4f:
c0:b1:16:05:61:19:ab:0c:76:88:f4:0d:70:0d:56:a4:90:fa:
04:09:cc:6b:5f:f1:79:1d:ee:9d:81:21:e6:c9:80:e8:0a:ef:
5f:b3:dd:34:4f:a0:ff:10:1f:42:ad:81:44:8f:40:85:d3:73:
38:b5:e4:70:32:ce:ec:f3:51:61:a8:b7:bc:5c:6e:5c:4b:4f:
4e:d7:82:4e:e1:31:d0:30:87:0d:d6:2f:26:9e:ae:ff:48:f9:
6c:ce:b1:31:7f:a7:ed:f0:78:74:fa:93:1f:9e:47:73:69:8e:
e2:d4:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:46:39 2026 by rpki-client