Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IRfB3tESkmVjLc1Cib2G-VGIhLk.roa
File: IRfB3tESkmVjLc1Cib2G-VGIhLk.roa (raw, json)
Hash identifier: enLveUG1UyfNO0VTMWU5d8FMOrzTgnZOyQcblvKgYSc=
Subject key identifier: 21:17:C1:DE:D1:12:92:65:63:2D:CD:42:89:BD:86:F9:51:88:84:B9
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019DEF1E3BE58FFEA4A124BB944CD85113FB
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IRfB3tESkmVjLc1Cib2G-VGIhLk.roa
Signing time: Sun 03 May 2026 18:33:49 +0000
ROA not before: Sun 03 May 2026 18:33:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 95.170.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ef:1e:3b:e5:8f:fe:a4:a1:24:bb:94:4c:d8:51:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: May 3 18:33:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2117c1ded1129265632dcd4289bd86f9518884b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:ab:04:37:59:50:68:39:a3:c2:91:6c:bc:
12:5a:db:b7:02:0e:fc:62:b9:bb:8c:3e:48:8b:3c:
27:8b:af:54:6b:15:f3:61:4f:1a:fa:56:ee:81:85:
7d:d5:61:b9:de:b5:0c:71:36:c0:a3:d0:88:2e:39:
2f:9d:3c:02:a0:38:bd:c5:13:3b:32:cb:5c:76:75:
30:f8:3a:79:78:5d:f5:e5:92:90:b1:3e:28:f7:d2:
fa:fe:db:8e:4c:83:bf:8a:1e:7a:4a:ab:36:ba:a7:
ef:00:84:13:c0:cb:60:c8:3b:13:d7:61:88:bb:25:
33:66:a0:b4:0a:19:7e:d4:bd:b4:bc:ed:98:67:61:
75:01:f8:8c:2f:b2:08:f3:aa:65:7f:e1:c4:7a:03:
df:8b:72:97:ca:26:d8:4d:70:58:e6:30:12:e9:4b:
fc:bd:29:d9:35:7d:27:53:79:3f:93:c5:d7:ec:aa:
f8:95:aa:be:1c:38:aa:3c:d9:f5:d8:fe:09:9e:5f:
5b:fc:3a:d2:2a:b7:55:e2:9c:7e:c9:37:7e:f0:e5:
49:f9:93:f4:22:c4:1f:62:81:2d:76:41:41:5a:7f:
5f:d3:b4:d0:cf:34:2e:d9:8c:c6:1c:70:75:ab:ec:
09:0d:05:1e:4b:1c:c9:53:33:3d:30:e8:e7:e9:ba:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:C1:DE:D1:12:92:65:63:2D:CD:42:89:BD:86:F9:51:88:84:B9
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IRfB3tESkmVjLc1Cib2G-VGIhLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f0:93:ab:38:48:a4:37:35:e9:60:33:3b:94:5a:32:95:5f:
fa:bb:10:07:ee:16:c8:24:08:36:9e:1c:ff:76:2a:9d:f6:6d:
e7:f5:d9:cd:e8:b0:45:2f:17:a6:01:d7:33:5f:54:1c:43:2d:
2c:7d:88:7c:09:21:f6:71:18:b9:97:e1:22:76:c9:34:fc:df:
db:d1:14:ea:be:46:cb:09:d3:39:ba:da:4d:eb:db:34:65:30:
e4:9b:f6:d4:33:c6:fd:b9:99:eb:69:9f:a9:e0:b0:45:34:f9:
2e:d2:25:82:df:1e:e9:d5:7a:1e:d4:cb:74:45:9c:72:1d:59:
79:9a:1b:2a:e8:c9:b4:1c:4c:5e:ec:94:35:e9:07:80:a2:f0:
88:67:22:ea:ca:37:c3:98:fc:93:05:9e:33:8f:e4:a4:8d:22:
50:b9:df:77:a4:7b:12:eb:ac:aa:be:bc:e0:ed:18:fe:9f:cf:
96:0f:42:b7:ab:8e:95:57:3b:a1:c1:62:1f:75:e7:5f:19:9a:
da:dc:9d:c3:0b:f5:81:c5:c7:ff:2b:c8:21:31:3a:85:fb:9b:
ae:a2:2e:6f:1f:99:53:4a:97:16:94:53:e1:a1:ec:8d:0b:9b:
f9:6d:97:1e:c9:83:07:9d:5c:7d:08:5e:25:f3:71:a6:02:a2:
68:b2:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:09:10 2026 by rpki-client