Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iYm8JADUQBw0qSls-kFt3Rskuwg.roa
File: iYm8JADUQBw0qSls-kFt3Rskuwg.roa (raw, json)
Hash identifier: 2Hc/tihcUamhpMK3QeggNpp4FDVnLbMWx/roQaThTQ4=
Subject key identifier: 89:89:BC:24:00:D4:40:1C:34:A9:29:6C:FA:41:6D:DD:1B:24:BB:08
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A019869F85FE402ABEB76AF2C1495CA758
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iYm8JADUQBw0qSls-kFt3Rskuwg.roa
Signing time: Wed 19 Aug 2026 10:17:28 +0000
ROA not before: Wed 19 Aug 2026 10:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218923
IP address blocks: 45.9.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:86:9f:85:fe:40:2a:be:b7:6a:f2:c1:49:5c:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 19 10:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8989bc2400d4401c34a9296cfa416ddd1b24bb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:f2:da:dd:cf:52:89:47:92:ba:e9:89:2c:
02:f8:50:91:1b:14:c6:f5:22:66:87:99:a6:b5:e0:
84:d1:5c:e1:89:a5:e6:15:ca:7c:a0:e1:71:76:0e:
0e:2a:3a:78:09:68:c8:3e:ca:56:4c:bb:20:57:b3:
64:9b:16:79:86:f8:0b:b2:6c:3a:9c:29:8d:ea:f3:
df:01:24:8f:1e:8f:0b:9d:6c:42:77:b4:79:4a:ab:
1f:a9:b2:f7:0c:31:f9:4b:38:53:30:46:b4:1a:e1:
28:51:b6:f4:e4:cd:d8:21:55:b2:7e:9d:f8:fa:16:
cf:9f:84:de:06:0f:9b:a8:9d:0d:ed:7f:07:1a:ef:
c4:be:90:39:7c:cc:7f:69:5a:4a:5e:b7:21:e3:58:
1e:ae:73:c7:8e:48:53:27:ed:66:a6:d0:89:cd:c4:
7d:c5:de:72:33:f2:01:35:d2:f0:7a:70:f2:c3:f0:
de:1d:13:8a:c2:29:51:e1:1b:f1:13:0a:6b:57:3d:
9f:f4:73:7f:f5:9d:4d:70:b0:c1:4f:64:fa:ae:9a:
03:47:f7:5d:30:a9:81:6d:d3:3e:e1:36:0c:b6:20:
22:36:eb:36:82:ed:3a:a7:e8:75:8e:c7:88:48:35:
be:2f:90:cc:83:64:bb:1a:c2:1b:d3:b3:3b:c6:d6:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:89:BC:24:00:D4:40:1C:34:A9:29:6C:FA:41:6D:DD:1B:24:BB:08
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iYm8JADUQBw0qSls-kFt3Rskuwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:21:0c:f4:6d:4a:67:81:c1:e1:3c:96:d2:c6:08:90:c9:09:
79:28:39:ad:6e:f2:0d:93:16:df:53:b8:17:62:dd:75:a8:6f:
82:7b:d6:56:9b:7a:0c:3c:54:bf:37:a1:56:a7:ab:99:1a:ae:
6f:00:f5:a5:e7:00:c6:1a:34:cf:9d:28:ba:53:d4:b6:6b:84:
dd:b6:05:28:73:fb:f4:d7:49:91:76:f7:7d:54:fb:1c:7c:19:
43:33:ba:43:96:96:da:64:6d:e0:49:be:ee:1b:23:93:44:5c:
7f:e9:44:10:be:82:64:a0:4f:0c:a9:0e:0f:df:e6:bf:58:71:
e4:f9:b9:44:ec:e5:e6:77:11:49:06:02:2a:5f:5a:cb:13:8a:
70:3d:5b:a2:30:c4:cd:15:90:d9:fc:6a:d2:f5:09:5b:15:16:
2b:46:cb:ff:4e:73:93:70:4b:88:bd:a7:e8:cf:90:34:83:64:
9e:ae:8b:02:c6:17:82:b2:ee:d6:95:78:a6:22:40:b5:80:23:
82:3c:29:e8:13:7e:96:8c:f5:c3:20:ce:0b:e4:75:53:9c:19:
dc:8e:41:47:c2:67:69:6b:9f:a1:b8:62:0e:8e:ef:43:54:7c:
58:dd:ec:b2:20:1f:94:8b:6d:43:9f:c5:85:a5:e5:a8:da:bf:
f9:e4:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:35:06 2026 by rpki-client