Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/mIf68_1ah6Ep2uSoyoqrenQSyFw.roa
File: mIf68_1ah6Ep2uSoyoqrenQSyFw.roa (raw, json)
Hash identifier: MYjTP5cIg1pggDvKU1AdgEyEZDmjeJWvuFdi59Buspg=
Subject key identifier: 98:87:FA:F3:FD:5A:87:A1:29:DA:E4:A8:CA:8A:AB:7A:74:12:C8:5C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A066DFD53FE2DC33E3C80FDF4B118B58A6
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/mIf68_1ah6Ep2uSoyoqrenQSyFw.roa
Signing time: Thu 03 Sep 2026 10:45:40 +0000
ROA not before: Thu 03 Sep 2026 10:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:df:d5:3f:e2:dc:33:e3:c8:0f:df:4b:11:8b:58:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Sep 3 10:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9887faf3fd5a87a129dae4a8ca8aab7a7412c85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5b:37:a3:a5:ce:80:a8:bd:35:c6:ce:60:c1:
68:3c:ea:73:55:17:39:f6:4b:1a:a6:5a:b5:bb:86:
39:91:d9:de:85:b2:3a:88:dd:59:80:0f:13:c6:c2:
c3:1e:fd:32:93:76:8f:8d:94:8f:9e:9b:30:fa:3d:
22:0c:1e:fc:c3:0b:00:d4:a7:1d:5e:72:35:05:ad:
f9:ed:56:88:68:46:a0:37:cc:0f:30:fe:fb:99:05:
a3:4a:b5:58:c1:00:54:74:fe:3f:30:ea:b2:21:a7:
91:e9:3e:b5:7e:1a:58:31:0f:82:82:27:ad:41:1e:
05:9e:14:de:9a:b7:75:d0:0e:4b:1c:ba:5c:fc:4c:
f9:88:bd:b1:67:72:74:2e:13:dc:28:06:bd:7a:61:
ee:06:26:bd:e8:9f:e7:17:eb:61:80:83:23:aa:a3:
ee:6e:d1:f7:cb:84:78:4d:84:1f:32:bb:79:9e:d4:
53:36:11:26:f9:36:e4:10:54:b2:53:79:e3:fe:f9:
5d:97:7a:b3:71:04:85:bb:06:ce:0d:54:71:18:b6:
42:77:61:34:7e:de:a9:d7:3a:cf:0d:42:cd:3e:ce:
11:05:da:f8:c6:d4:ed:7b:87:69:54:64:a7:38:4a:
fc:1a:a4:75:e9:ee:48:48:67:a7:de:dd:bf:62:14:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:FA:F3:FD:5A:87:A1:29:DA:E4:A8:CA:8A:AB:7A:74:12:C8:5C
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/mIf68_1ah6Ep2uSoyoqrenQSyFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f2:f1:94:d4:65:38:62:5c:e1:4b:ac:7a:1d:50:65:f4:b4:
1e:0d:b4:ff:bd:5e:95:5c:8b:e3:e3:8c:51:3d:09:5d:6a:87:
4d:50:40:c5:96:c2:cb:dd:62:db:d0:ec:c0:4d:41:00:66:90:
6a:e9:49:c9:ea:ed:d4:6d:4b:9a:e2:cd:43:a8:9f:51:fa:14:
92:f3:ce:5e:e4:87:98:6e:7a:13:73:b8:4c:83:ca:a1:da:bc:
43:d4:8f:e8:7d:9c:b2:2e:e6:a1:45:f9:34:7d:dc:57:b5:de:
e9:56:56:44:75:7e:d9:28:8a:b7:2a:76:a5:a9:a6:8a:f3:55:
59:b7:64:72:da:7d:b3:e2:a1:ce:5b:aa:75:91:ed:c0:40:db:
d7:7f:20:1f:3e:5e:4b:28:db:fe:fa:e7:25:11:ac:57:4d:3b:
c4:b1:ab:6d:0d:a5:c4:3a:b1:47:37:08:e4:1f:90:0d:1d:f1:
49:d7:e8:86:cc:36:23:0d:56:19:0c:d6:29:4d:96:bf:44:0a:
91:18:e8:1b:81:2d:64:5a:a6:25:ad:00:ac:93:46:e9:5b:68:
30:64:dc:e3:55:3a:f6:24:e8:f4:8a:2a:d3:3a:39:e2:3b:5a:
fe:f8:2a:a6:98:8e:83:b6:93:c7:8b:08:5c:e4:fb:60:01:26:
3c:e6:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:07 2026 by rpki-client