Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa
File: ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa (raw, json)
Hash identifier: IT/E+lCIfVXMpHU9raxW9uwfjlZ+Cij+nDKpT3TnewQ=
Subject key identifier: 89:BE:58:CC:BA:18:5C:A6:4A:F9:1D:CE:0B:02:EC:BC:70:61:9D:76
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23687BBFBC8D4F36F15A636B3D89F488
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3329
IP address blocks: 2a01:830::/32 maxlen: 48
2a01:831::/32 maxlen: 32
2a01:8c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7b:bf:bc:8d:4f:36:f1:5a:63:6b:3d:89:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89be58ccba185ca64af91dce0b02ecbc70619d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:16:15:49:74:9a:e6:f7:97:aa:f1:14:00:
90:be:55:3c:f5:e1:b2:4f:b8:de:0d:14:bb:cc:23:
bc:3b:8a:43:4b:a2:a8:bb:f2:1e:79:2c:7c:e0:75:
ca:a2:a1:7d:bb:4c:27:15:19:c6:31:ca:a4:72:36:
ce:c5:c9:00:54:47:3d:a1:e5:ba:48:41:c1:a1:0b:
c6:ea:59:7f:d2:4c:c9:33:25:6f:15:35:04:43:bf:
d7:5b:ce:b2:60:96:fb:fe:f4:99:ef:47:76:91:7b:
fd:25:78:14:bb:9e:96:bf:da:63:f8:be:7c:15:65:
5d:f7:a4:e9:d0:0e:fe:27:94:b0:e3:9c:e3:42:5b:
1d:0b:2a:7d:5e:f0:ae:8b:5c:84:0d:84:f8:96:cc:
aa:99:20:b9:9e:3c:64:7b:f1:92:28:bd:51:23:e9:
4d:a3:bf:30:6e:fd:49:e0:a7:5f:ab:04:2d:86:72:
5c:c0:71:37:81:71:20:47:e3:5c:12:0f:40:32:77:
9b:8b:9c:5a:c7:66:5a:89:71:47:79:49:08:b1:03:
b1:79:e3:51:7b:a9:0b:0b:ab:fd:87:84:40:a3:18:
80:5f:83:6b:a9:06:d6:6f:e0:0b:d8:30:99:83:91:
86:53:38:bc:ed:0c:eb:b7:8f:ea:1a:bd:7c:30:bb:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:58:CC:BA:18:5C:A6:4A:F9:1D:CE:0B:02:EC:BC:70:61:9D:76
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:830::/31
2a01:8c8::/32
Signature Algorithm: sha256WithRSAEncryption
87:43:fd:e2:54:39:6c:df:5d:82:d3:c1:54:24:57:54:24:60:
ef:8d:57:26:ee:67:b6:49:ed:82:3a:7e:c5:08:d3:7d:61:62:
07:31:87:c0:b5:94:0b:a4:54:11:41:d6:ef:ac:b0:83:17:c3:
18:ba:7b:97:33:5c:53:94:dd:2a:57:19:fd:a8:c7:2f:f5:81:
36:4c:d0:5c:6d:a0:7f:17:1d:38:91:a4:8f:80:31:c7:1c:e9:
8d:67:bd:a6:79:a2:94:48:8e:1b:99:20:a6:80:94:f9:65:f6:
fd:b3:5c:85:cc:46:08:24:00:e8:26:92:0e:86:0f:55:9a:c0:
cb:eb:c0:d7:2c:2d:bb:20:5d:c1:60:a9:00:af:5d:dd:97:11:
27:6c:e8:13:a3:2f:e5:12:2d:00:39:50:9c:27:6e:56:34:cb:
26:a0:29:fd:2e:87:f8:c4:17:8a:12:94:d1:6d:88:8e:65:53:
80:cd:87:0c:a9:07:64:c7:ea:8c:46:5a:dc:18:b2:07:b8:99:
a3:fe:44:e8:d8:56:77:cd:f3:08:4a:3d:0c:e8:e9:fc:6a:0b:
cc:01:7c:7a:1d:26:21:16:99:98:83:c0:49:f3:94:ed:35:00:
e0:32:e0:fc:6d:a7:2d:7d:57:86:5d:cf:b5:ad:8c:bc:ad:bd:
8c:cc:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:19 2026 by rpki-client