Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Iigc-kdM4AjiEm7SOYIbOu7KOGY.roa
File: Iigc-kdM4AjiEm7SOYIbOu7KOGY.roa (raw, json)
Hash identifier: 3uk6WcSRnVs8qNOTA0fsdK4oW8Cw5KhlUWKk7MoODJI=
Subject key identifier: 22:28:1C:FA:47:4C:E0:08:E2:12:6E:D2:39:82:1B:3A:EE:CA:38:66
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EF3568C969EF260F20F6159063989BA39
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Iigc-kdM4AjiEm7SOYIbOu7KOGY.roa
Signing time: Tue 23 Jun 2026 07:16:35 +0000
ROA not before: Tue 23 Jun 2026 07:16:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:bb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:56:8c:96:9e:f2:60:f2:0f:61:59:06:39:89:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 23 07:16:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22281cfa474ce008e2126ed239821b3aeeca3866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:8a:36:6f:1b:7f:a3:a8:5f:03:f3:11:b1:
10:57:ee:b5:21:47:b9:4e:cf:4f:c0:23:39:a8:9b:
80:9d:05:7b:2a:a6:38:de:b3:b0:79:24:10:f5:82:
fa:60:3a:62:5b:48:00:86:94:89:27:eb:ab:20:9d:
d5:af:3f:c6:7b:22:cc:5e:3c:89:1d:9f:02:d6:a3:
8b:49:d7:37:35:c0:17:95:95:f0:e2:5a:69:5e:e3:
86:c7:5c:ec:2d:de:ac:c4:5f:7a:5d:bc:f3:a1:9d:
54:3e:f1:7b:7a:06:5b:83:79:fe:03:8c:96:c0:03:
cb:53:52:f3:fc:d9:bd:64:31:64:de:3a:f9:d6:ef:
93:94:58:95:79:84:51:f3:b1:1b:0d:64:ad:60:1b:
1f:6a:ec:5b:f1:dc:b8:95:b9:41:bf:7f:69:53:70:
78:b6:8a:d3:0d:f9:20:f6:c9:6a:33:bb:6d:3a:b0:
cc:2d:4f:a7:fb:ed:75:be:ee:55:9a:1b:29:36:2c:
06:04:8f:67:a9:d5:0c:ee:55:c3:3a:5f:c0:c0:82:
91:5d:09:2c:80:de:7d:9a:0d:63:af:a8:bf:21:04:
fc:ac:7d:4a:ba:c7:32:7d:11:0e:1b:0a:2e:88:92:
83:52:e7:01:96:1d:a9:ac:2f:94:8b:e9:05:a3:fa:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:1C:FA:47:4C:E0:08:E2:12:6E:D2:39:82:1B:3A:EE:CA:38:66
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Iigc-kdM4AjiEm7SOYIbOu7KOGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:ea:ca:19:44:75:c3:f5:99:2a:60:fe:b8:5c:36:77:b1:01:
3a:25:6a:20:81:da:90:f1:fe:98:b6:41:26:56:de:cc:bb:45:
19:0a:a4:11:43:b2:db:0f:56:e4:65:68:0d:a6:45:cd:30:b5:
a5:b6:2d:88:b7:ff:1d:83:b9:9b:7c:ee:0d:da:ff:fa:c9:b9:
19:3f:75:3a:a2:b4:af:f9:b8:d9:af:50:8e:97:62:a2:cd:7f:
cd:29:7e:51:79:bb:ad:c3:4e:ca:23:4b:fd:69:ef:fc:87:21:
71:ca:0b:88:81:a6:8f:06:48:da:f7:8b:dd:bc:56:61:d2:4e:
ec:8f:df:4a:c5:39:18:55:55:0e:84:f4:84:81:d7:7d:e9:92:
b6:cc:de:5f:3c:96:82:9e:7a:5e:ca:8d:4a:4e:51:e5:e9:26:
04:89:74:9a:b1:48:1e:44:52:13:8a:53:a3:e0:94:45:85:45:
5a:6d:57:c1:f0:b1:f6:eb:6f:0a:99:6b:73:e5:23:9d:07:c2:
45:76:e1:0b:95:ac:20:3f:35:8a:12:24:19:a9:3d:de:8c:64:
18:8a:46:b4:7b:e3:94:de:f6:be:46:53:5e:fa:58:52:26:2f:
19:43:bd:67:02:b6:95:12:8a:9f:6c:ab:73:d8:56:94:5d:6f:
b5:8e:69:c1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7zVoyWnvJg8g9hWQY5ibo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjIzMDcxNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjI4MWNmYTQ3NGNlMDA4ZTIxMjZlZDIzOTgyMWIzYWVlY2EzODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzySKNm8bf6OoXwPzEbEQV+61IUe5
Ts9PwCM5qJuAnQV7KqY43rOweSQQ9YL6YDpiW0gAhpSJJ+urIJ3Vrz/GeyLMXjyJ
HZ8C1qOLSdc3NcAXlZXw4lppXuOGx1zsLd6sxF96XbzzoZ1UPvF7egZbg3n+A4yW
wAPLU1Lz/Nm9ZDFk3jr51u+TlFiVeYRR87EbDWStYBsfauxb8dy4lblBv39pU3B4
torTDfkg9slqM7ttOrDMLU+n++11vu5VmhspNiwGBI9nqdUM7lXDOl/AwIKRXQks
gN59mg1jr6i/IQT8rH1KuscyfREOGwouiJKDUucBlh2prC+Ui+kFo/p27wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCIoHPpHTOAI4hJu0jmCGzruyjhmMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvSWlnYy1rZE00QWppRW03U09ZSWJPdTdLT0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhO7QDAN
BgkqhkiG9w0BAQsFAAOCAQEAT+rKGUR1w/WZKmD+uFw2d7EBOiVqIIHakPH+mLZB
JlbezLtFGQqkEUOy2w9W5GVoDaZFzTC1pbYtiLf/HYO5m3zuDdr/+sm5GT91OqK0
r/m42a9Qjpdios1/zSl+UXm7rcNOyiNL/Wnv/IchccoLiIGmjwZI2veL3bxWYdJO
7I/fSsU5GFVVDoT0hIHXfemStszeXzyWgp56XsqNSk5R5ekmBIl0mrFIHkRSE4pT
o+CURYVFWm1XwfCx9utvCplrc+UjnQfCRXbhC5WsID81ihIkGak93oxkGIpGtHvj
lN72vkZTXvpYUiYvGUO9ZwK2lRKKn2yrc9hWlF1vtY5pwQ==
-----END CERTIFICATE-----
Generated at Fri Jun 26 04:24:16 2026 by rpki-client