Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/1Ig-mrb2OdmpHJoyTriuFLCAFOM.roa
File: 1Ig-mrb2OdmpHJoyTriuFLCAFOM.roa (raw, json)
Hash identifier: KdPgqm5poN0MvVvBBtL672/b7UpHgyK24wQKJ709yoc=
Subject key identifier: D4:88:3E:9A:B6:F6:39:D9:A9:1C:9A:32:4E:B8:AE:14:B0:80:14:E3
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01A0FC5D0895D64DE119104BD3C36EA4BFE3
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/1Ig-mrb2OdmpHJoyTriuFLCAFOM.roa
Signing time: Fri 02 Oct 2026 11:25:50 +0000
ROA not before: Fri 02 Oct 2026 11:25:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58154
IP address blocks: 87.199.104.0/22 maxlen: 24
185.80.31.0/24 maxlen: 24
2a0e:6340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:5d:08:95:d6:4d:e1:19:10:4b:d3:c3:6e:a4:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Oct 2 11:25:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4883e9ab6f639d9a91c9a324eb8ae14b08014e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:07:a3:4e:96:9d:96:2f:4d:b4:fa:52:33:
1f:7a:55:56:8f:54:6b:e6:8b:9d:9c:b0:02:58:01:
40:1c:fa:cc:63:70:ce:2c:69:ca:6f:be:e1:44:74:
d7:97:dd:04:0a:fb:e4:bd:ec:5a:20:f9:5f:46:ba:
ff:9f:4e:e2:f5:f7:a4:e2:0e:dd:a2:ba:24:c8:24:
6f:be:f1:cb:34:a5:ea:5f:6e:d1:f3:a2:e9:d0:18:
61:c5:03:6b:63:9a:36:73:3b:87:6c:c2:7a:09:2e:
d5:59:d2:a0:24:0a:48:4f:3b:d7:2d:84:f9:a0:a7:
4a:26:a7:0b:89:31:7b:38:12:64:26:6b:7c:b3:fe:
c6:14:42:e0:86:68:29:59:01:4e:01:e9:94:0b:ae:
55:08:84:79:1b:43:78:54:e3:18:a5:a6:92:d9:5e:
45:86:bc:c9:0f:20:18:05:ad:31:29:68:6b:28:7e:
d7:db:1b:b6:c7:74:03:a2:9a:b3:63:1d:e3:d8:d7:
b9:82:02:aa:bf:2d:42:38:c4:8f:a8:0e:4b:4d:2a:
da:9c:b9:4e:d2:76:48:8f:59:c0:0a:d1:2a:90:9e:
dd:48:41:db:2e:8f:24:85:80:7e:95:d7:d4:af:65:
73:23:93:47:95:32:66:e3:f3:e1:05:ee:42:6c:6c:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:3E:9A:B6:F6:39:D9:A9:1C:9A:32:4E:B8:AE:14:B0:80:14:E3
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/1Ig-mrb2OdmpHJoyTriuFLCAFOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.104.0/22
185.80.31.0/24
IPv6:
2a0e:6340::/29
Signature Algorithm: sha256WithRSAEncryption
80:85:f2:cc:66:04:cc:4d:b4:21:c7:d9:c2:6f:a1:2f:19:27:
c9:00:cc:4c:2f:7d:88:5c:6f:4c:19:17:d3:11:72:8e:2b:30:
67:b2:30:75:37:fb:73:9b:73:d1:10:05:27:63:b3:7a:6a:94:
7d:90:44:d8:f2:4e:5c:db:c0:d0:51:a6:11:3c:6d:d5:8d:2b:
10:6f:b9:ab:6e:ff:71:c4:16:19:43:e7:05:11:97:63:d4:b8:
39:33:01:dd:41:a1:98:0d:fd:13:fd:67:cc:94:44:de:37:19:
1e:37:d2:d2:5a:43:db:31:eb:7c:31:eb:a9:a4:5c:42:10:13:
60:d6:70:b8:08:d9:5f:95:e8:20:48:ac:22:63:10:4d:ec:d3:
c1:9d:9f:bc:77:b1:67:59:ed:11:d8:d4:1f:25:cb:db:80:da:
d4:33:1b:84:1c:54:74:e1:79:f5:9e:45:4b:da:80:44:49:e9:
43:c2:18:30:03:f7:6b:b6:9c:36:58:90:6c:e9:29:96:10:98:
6b:78:28:08:aa:6c:33:d6:6a:ae:85:ba:30:f7:f3:5f:64:55:
bc:ee:62:70:03:52:fa:87:06:e1:bd:0b:0e:76:8e:0f:02:1c:
da:d4:f4:15:b4:08:b6:16:a8:e1:98:48:d9:63:1d:ca:a9:29:
00:33:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:54 2026 by rpki-client