Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/igT8r97WV-3UNf1fba-MFt6vOdU.roa
File: igT8r97WV-3UNf1fba-MFt6vOdU.roa (raw, json)
Hash identifier: EbT+sEdtu5O1OCr4tXm7a0c8FNl3lVWvt297f2z5r0E=
Subject key identifier: 8A:04:FC:AF:DE:D6:57:ED:D4:35:FD:5F:6D:AF:8C:16:DE:AF:39:D5
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019F126154FC506A9AD19FC4812A769C04AF
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/igT8r97WV-3UNf1fba-MFt6vOdU.roa
Signing time: Mon 29 Jun 2026 07:56:36 +0000
ROA not before: Mon 29 Jun 2026 07:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 189.13.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:61:54:fc:50:6a:9a:d1:9f:c4:81:2a:76:9c:04:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jun 29 07:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a04fcafded657edd435fd5f6daf8c16deaf39d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:2e:12:36:51:58:9c:eb:29:ff:e5:ae:f2:
c6:96:fd:61:a8:46:e4:6a:6f:2b:08:dc:17:43:0c:
bb:d1:1f:f7:6d:1d:aa:f8:f3:9f:a0:8e:91:71:1c:
02:97:fa:67:65:e8:46:40:a0:37:ec:e9:2a:fc:89:
03:ef:7f:fa:91:39:12:00:3a:8d:dc:b1:8a:66:ab:
52:09:1e:91:66:9d:9e:4c:ab:7c:49:4b:98:92:ee:
a6:07:92:e0:ce:33:30:b2:52:e5:0b:e9:bc:b4:10:
57:80:e6:0d:5e:23:d7:d9:e9:31:fd:4f:9a:e8:0f:
83:99:d3:88:9a:67:65:fa:f1:b2:e5:29:5e:1f:4c:
c6:bf:17:08:a5:55:00:45:f8:d8:40:1a:27:72:a0:
40:20:f6:74:da:13:44:50:30:5e:5c:53:ba:a4:23:
0e:12:be:d1:48:0a:22:e1:4f:3e:ba:96:63:67:b0:
38:da:fd:62:3b:8d:81:7b:a4:00:05:b8:28:12:93:
be:d9:48:0b:56:b7:b3:5e:4a:f5:53:e7:59:54:dc:
5f:6d:5c:f1:78:ca:2d:ec:2b:0e:0d:2e:65:7b:6c:
72:93:30:eb:e3:32:0a:1e:e1:43:5b:d7:df:49:76:
f7:b1:4c:f4:78:00:c7:a3:e1:7a:ea:ac:f3:77:37:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:04:FC:AF:DE:D6:57:ED:D4:35:FD:5F:6D:AF:8C:16:DE:AF:39:D5
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/igT8r97WV-3UNf1fba-MFt6vOdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.101.0/24
Signature Algorithm: sha256WithRSAEncryption
61:35:7e:d1:ca:de:c5:c2:d4:6a:7a:c6:58:2e:cc:cd:85:5b:
96:fe:c8:e4:df:1c:e9:f9:8c:29:fb:4b:76:d3:93:9e:72:9b:
4a:5f:38:71:de:c5:1d:c0:a6:8d:5a:fe:ae:14:9b:95:10:2d:
ab:95:2d:7e:d3:7e:29:86:ff:3c:02:d9:85:58:07:96:2e:c3:
82:94:b4:47:92:2c:cc:01:1a:30:58:bf:0e:0d:8a:02:e6:11:
df:4f:e3:7b:65:65:6f:41:83:94:56:39:95:9d:af:88:33:fd:
87:28:68:75:97:25:ab:94:6e:c0:a5:55:c6:af:d5:00:3c:be:
73:cc:da:9f:89:47:ee:52:cf:3b:86:b4:d4:79:74:b9:f8:af:
87:3c:8b:4c:6d:1b:70:de:f3:e9:a9:07:d6:b6:96:49:b4:6c:
6f:ce:dd:b6:3a:6e:d1:9f:04:4a:7d:d0:f7:38:3e:b1:04:bc:
dc:bd:dc:1c:a0:19:44:65:04:4c:5b:3a:2b:91:f3:c8:b3:04:
33:a2:2d:dd:44:1b:00:08:36:cd:ac:e1:e7:f4:02:c5:c0:f8:
fc:e5:a0:c9:a8:cd:64:83:2f:86:53:d5:dc:4e:32:61:97:17:
45:b7:3f:37:97:e5:45:ec:81:6a:85:7d:64:4b:d6:d4:1e:ab:
26:ab:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:37:01 2026 by rpki-client