Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iBlM6SouJCQBiCieEL1Wy3_N_f0.roa
File: iBlM6SouJCQBiCieEL1Wy3_N_f0.roa (raw, json)
Hash identifier: CamhtN0dMu0SEY+yIzjzgENenlGaQyePZWflTV51ry8=
Subject key identifier: 88:19:4C:E9:2A:2E:24:24:01:88:28:9E:10:BD:56:CB:7F:CD:FD:FD
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694B19351B08CE411358CE7A493313
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iBlM6SouJCQBiCieEL1Wy3_N_f0.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203120
IP address blocks: 89.34.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4b:19:35:1b:08:ce:41:13:58:ce:7a:49:33:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88194ce92a2e24240188289e10bd56cb7fcdfdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:96:39:40:12:c9:f5:b8:ec:cf:5d:57:5b:
25:e6:aa:2d:d2:54:f5:7e:47:ba:0a:fa:b3:76:c9:
55:b9:eb:f1:26:31:d5:0a:43:9d:63:47:93:d0:a2:
3d:30:84:48:58:3e:37:da:6a:68:99:de:e3:c7:a3:
04:7e:6f:dc:83:90:dc:7d:82:ee:e7:17:1f:3e:cf:
83:9c:ec:08:ed:b2:d8:37:a2:b3:30:01:25:a2:59:
be:b7:5b:f3:9b:2b:93:35:74:69:5c:08:86:8a:81:
40:7c:53:74:4a:b3:56:fa:28:ae:0a:83:1e:29:fb:
27:5d:8d:7d:15:97:0f:41:ef:32:6b:93:6c:d7:dd:
ce:9e:12:14:72:0b:78:8e:2f:f8:30:c8:d4:47:ca:
46:11:9d:9f:b0:c7:12:57:fd:dd:2b:a4:d2:5c:2f:
2c:6b:97:0a:81:eb:40:94:54:b1:8a:2e:2f:be:0e:
1d:20:dd:56:53:0d:51:1c:b2:ba:53:05:d6:e8:89:
71:23:f7:29:e9:66:65:a9:77:d9:f9:48:6a:41:85:
7d:89:ea:c2:14:7c:fe:42:53:29:51:a5:8b:60:5e:
da:e9:8f:82:2c:fa:1e:79:23:47:13:53:68:fb:28:
b4:9a:81:f7:63:df:2d:1d:48:c5:ff:dc:2d:51:80:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:19:4C:E9:2A:2E:24:24:01:88:28:9E:10:BD:56:CB:7F:CD:FD:FD
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iBlM6SouJCQBiCieEL1Wy3_N_f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.74.0/23
Signature Algorithm: sha256WithRSAEncryption
30:f9:3e:5e:f5:64:02:7e:55:7e:0c:1e:36:be:d6:25:de:56:
8e:f7:9a:c1:7c:25:91:66:e4:90:e2:83:79:5a:ce:8f:9a:65:
3d:15:66:d8:fe:2b:98:ad:ec:c2:78:c3:ad:84:af:88:b4:5b:
69:0b:3e:dd:07:a7:50:09:9a:ae:df:6d:6a:cc:b6:18:77:4c:
4c:42:01:b4:71:ea:b2:12:f3:5c:cc:6c:4f:d6:87:70:16:38:
68:17:56:92:dd:b5:5e:7f:ba:d2:8b:4a:25:c5:48:70:76:7a:
61:fa:51:aa:9e:61:99:96:81:22:28:f1:5c:12:b7:12:7c:99:
ba:0b:bf:d3:7e:f5:2f:6b:e6:d6:56:8f:36:01:43:10:91:70:
6b:2b:44:fb:ec:c6:80:49:00:91:6c:38:b6:2e:d5:08:3c:72:
3a:fa:75:bd:55:fe:7a:52:b5:90:85:a2:43:99:8a:5a:b5:b0:
c2:ec:0d:76:c4:bc:62:76:18:e0:09:29:90:72:1e:5f:aa:85:
c6:9a:81:b5:e1:0a:17:46:61:b2:55:5b:9b:78:97:9e:a7:4a:
23:af:fa:4b:20:d6:31:52:e9:4d:4d:be:b6:aa:02:58:59:10:
04:4b:f9:e6:b2:a3:98:1a:05:42:0a:66:e3:16:af:ba:d4:20:
d0:5c:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:25 2026 by rpki-client