Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/I-7y2G9SJiGAYR7rS4XS3zuG3C0.roa
File: I-7y2G9SJiGAYR7rS4XS3zuG3C0.roa (raw, json)
Hash identifier: td0sy5fyOLmPC61IlJQZYYSjkIZH8MZ2gtrzouxgHOE=
Subject key identifier: 23:EE:F2:D8:6F:52:26:21:80:61:1E:EB:4B:85:D2:DF:3B:86:DC:2D
Certificate issuer: /CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Certificate serial: 019F236869E7B5295C653C69D00753B57DAF
Authority key identifier: 89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/I-7y2G9SJiGAYR7rS4XS3zuG3C0.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 83.118.224.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:69:e7:b5:29:5c:65:3c:69:d0:07:53:b5:7d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23eef2d86f52262180611eeb4b85d2df3b86dc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:64:65:5f:af:13:d7:ef:07:d3:43:f1:3a:
26:17:c4:e7:ab:b6:da:c1:4b:99:65:86:7a:4a:6a:
7a:5a:2b:40:cb:b9:d2:64:82:22:09:3f:82:fb:5f:
b9:b4:f3:1c:4e:bf:67:d2:b1:ef:cf:01:7f:ae:b3:
79:01:35:5c:49:82:51:8b:39:f8:da:70:9f:e8:d8:
3a:52:40:96:12:28:cc:dc:1f:1d:c9:5d:9d:45:d6:
6e:9d:48:62:e8:3b:0b:97:29:05:93:5b:1f:56:8a:
cf:9c:20:93:c2:09:a1:13:b2:44:a3:5d:b5:e5:3f:
d0:7a:48:fb:cc:40:54:2e:9d:83:31:ee:fe:56:be:
35:e2:24:6e:5c:dd:89:48:6d:a3:57:21:f8:64:a9:
f9:d1:e0:0b:48:4c:c8:49:f8:c1:be:ef:30:f8:6e:
1b:31:8b:62:fb:60:5f:d0:3d:b9:be:f4:93:fe:34:
5a:01:d9:08:69:2b:f2:31:e9:28:d7:dc:3a:ce:f9:
a5:c6:4d:28:20:d7:e3:09:05:02:8c:c1:03:44:76:
7b:be:23:d1:bd:52:94:14:e6:5b:17:20:83:f1:d9:
0d:53:a2:87:01:9e:46:f2:c5:47:fe:c6:27:2e:a4:
fb:b7:61:43:24:19:15:43:40:f1:10:3f:59:8f:bb:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EE:F2:D8:6F:52:26:21:80:61:1E:EB:4B:85:D2:DF:3B:86:DC:2D
X509v3 Authority Key Identifier:
keyid:89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/I-7y2G9SJiGAYR7rS4XS3zuG3C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:b4:13:e0:12:2b:de:73:02:fc:03:fa:62:7e:c8:97:40:98:
dc:17:a2:36:cb:00:84:bb:8f:2c:e3:c3:65:9e:70:e2:39:74:
53:f6:c3:cc:11:d5:c1:e7:33:d7:17:6e:60:45:d2:ec:89:42:
7d:4a:90:15:a9:4e:63:4b:9b:b1:9a:39:f8:ee:08:a8:87:18:
e7:50:e1:1a:d6:98:3d:30:3c:00:a1:28:c4:cb:21:25:b6:5a:
41:5c:53:3f:65:b7:b2:34:b0:b2:4a:fa:69:f8:a5:be:ea:48:
64:89:91:f4:58:89:e8:57:e7:b9:4f:b3:9e:58:cd:b9:57:3c:
2b:41:f7:1e:a1:aa:c1:3b:35:39:fc:13:5f:58:06:cb:a2:7c:
69:36:88:92:ec:8e:34:0e:aa:d4:e4:2b:e5:f0:2f:4c:97:ba:
99:8e:e4:34:a9:e0:ab:99:1c:bb:29:59:bb:ab:cd:16:12:89:
99:57:8d:77:23:81:49:e1:fb:11:d3:7c:24:4f:92:14:00:84:
c9:ee:ed:6f:a6:92:85:aa:b9:d4:ac:03:2b:58:0b:96:fe:75:
4e:e5:13:70:ab:7f:18:6a:48:9a:8e:b8:fc:8f:95:8f:26:86:
9a:67:41:da:e3:a8:d7:0d:a5:37:92:4d:b0:ea:e0:79:b3:3a:
f6:91:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:24 2026 by rpki-client