Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/iyPQKgLyGilLpFWV7IBMagLpcOI.roa
File: iyPQKgLyGilLpFWV7IBMagLpcOI.roa (raw, json)
Hash identifier: o9NsBGK/Ws8OUjo4pToCK9xDuX+6oJPsECuc5R4NoCY=
Subject key identifier: 8B:23:D0:2A:02:F2:1A:29:4B:A4:55:95:EC:80:4C:6A:02:E9:70:E2
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F61157742162D024B3B6FBFCE1C198771
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/iyPQKgLyGilLpFWV7IBMagLpcOI.roa
Signing time: Tue 14 Jul 2026 14:43:44 +0000
ROA not before: Tue 14 Jul 2026 14:43:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 83.98.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:15:77:42:16:2d:02:4b:3b:6f:bf:ce:1c:19:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 14 14:43:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b23d02a02f21a294ba45595ec804c6a02e970e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:b6:70:8b:3a:ab:8c:68:45:15:53:4e:57:
65:ab:cc:e4:91:39:1f:25:66:1a:b6:9f:5f:82:0e:
07:17:87:f3:0f:32:b3:96:ee:79:2f:4e:57:cf:0e:
f4:6b:74:68:8e:45:10:c5:7f:cd:91:c1:b9:32:c3:
37:aa:83:66:c8:f4:fe:80:5e:63:d1:d2:12:07:51:
5f:d3:c3:45:17:7e:0e:70:9c:4f:a8:d7:1c:ee:48:
e6:35:9c:1e:c4:03:f2:87:95:5b:6c:9f:17:c0:e2:
49:40:8c:c6:ab:70:0b:15:43:54:fb:e3:a3:6e:ab:
5c:a9:f9:96:d8:8f:ac:1b:e9:c3:3f:5d:1f:88:2f:
e3:a2:12:59:e6:d7:fb:0e:b7:e1:62:a1:76:02:eb:
8d:0f:9c:2f:72:9c:24:1d:a7:3a:85:51:ba:4b:4a:
56:6d:33:0b:8a:a2:ad:49:b9:42:7b:5d:02:19:fb:
e6:06:c4:a3:d4:3f:a3:04:84:25:9c:5c:20:20:c7:
cc:51:35:cd:bb:9b:e6:65:e1:6b:b0:d5:a4:30:8a:
cd:4d:e6:83:b8:92:9a:58:fc:55:90:06:35:48:cc:
3b:8e:9c:af:e2:21:a1:66:e1:fe:97:35:58:96:9a:
d1:0d:9e:b9:e9:d9:d6:3e:29:18:fa:3a:89:87:f7:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:D0:2A:02:F2:1A:29:4B:A4:55:95:EC:80:4C:6A:02:E9:70:E2
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/iyPQKgLyGilLpFWV7IBMagLpcOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d0:6a:ca:5f:c4:6f:c0:9c:67:58:13:5c:5e:53:70:22:76:
1b:50:15:3e:ab:45:d4:68:47:ca:5e:f2:90:d0:ba:c9:55:56:
64:1d:6e:c3:fc:66:c7:79:c1:93:ca:d7:3d:98:eb:23:ec:3b:
ff:e2:43:c4:28:77:70:0e:1f:3d:d5:69:78:db:7b:13:42:53:
d0:cc:c6:2c:1e:36:6f:49:ec:32:6c:5a:45:f2:ff:34:a9:9a:
90:5b:1d:94:c8:ef:97:09:7c:72:11:c7:dc:a4:8d:60:a9:e7:
8c:0f:92:af:74:ed:27:d4:a4:2f:4c:58:10:06:98:1c:1a:c9:
27:17:08:9b:ee:16:ed:3e:80:cb:ef:06:2f:54:17:c2:8e:f3:
a4:94:16:0c:3a:96:40:c4:1d:0c:75:2b:a5:87:74:53:a2:03:
64:fe:7d:cb:25:a1:da:98:d6:a4:58:64:64:dd:81:3a:f8:94:
ed:cf:c5:df:2b:d6:bd:d5:b7:1e:36:a0:22:8a:44:07:93:ed:
ce:c5:f5:c5:41:02:1b:eb:5e:27:db:12:ff:74:93:72:b1:1f:
2d:c9:c0:f8:84:d4:f3:3a:9c:e4:ff:08:9e:f5:88:47:75:a2:
bd:4e:b8:62:be:7c:48:aa:8f:15:0c:a4:38:27:a3:2c:95:cd:
fc:de:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:07:19 2026 by rpki-client