Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/iNpfv2H8aBWlKXZF26UnnW9pbIg.roa
File: iNpfv2H8aBWlKXZF26UnnW9pbIg.roa (raw, json)
Hash identifier: QvFWxjKcfe2bGZQbuqD0AHyjjwdonraBq3f/+QRF0aM=
Subject key identifier: 88:DA:5F:BF:61:FC:68:15:A5:29:76:45:DB:A5:27:9D:6F:69:6C:88
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A0CE71F81EE546103A882C42BB5BA7A249
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/iNpfv2H8aBWlKXZF26UnnW9pbIg.roa
Signing time: Wed 23 Sep 2026 13:26:10 +0000
ROA not before: Wed 23 Sep 2026 13:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218607
IP address blocks: 89.34.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:71:f8:1e:e5:46:10:3a:88:2c:42:bb:5b:a7:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 23 13:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88da5fbf61fc6815a5297645dba5279d6f696c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:8c:96:83:aa:9d:1b:db:b5:a2:15:97:46:
09:9a:58:09:ad:c4:90:ff:e5:e9:a6:e1:e6:b5:0b:
c3:bf:a4:6c:ff:b0:b1:8d:a9:cd:b2:8b:72:1e:0f:
9c:00:77:fe:00:f6:b8:15:8a:19:7c:66:bb:7e:96:
d8:7f:1f:2f:74:b0:b2:ce:ee:d0:bf:86:c7:bd:fc:
06:70:a1:8f:03:55:89:fa:71:9d:dd:d4:e6:6d:cd:
5f:1b:c4:9f:dd:b5:45:fd:aa:19:1a:03:8c:f7:05:
f9:55:cc:fd:ff:99:33:ce:d1:4b:87:03:63:da:ea:
cc:22:23:7f:1d:4d:26:c2:33:fc:9b:78:02:7a:c5:
8c:a6:ad:fa:f4:5a:f6:c3:2f:96:af:42:37:64:b8:
d7:03:ad:a1:19:66:cc:f6:91:46:61:a1:f5:d6:d4:
3c:0f:22:16:d2:48:fc:6d:4d:1b:0c:88:e0:b1:ac:
35:01:31:69:90:dd:db:17:12:03:60:6a:ab:60:55:
d9:c0:29:2d:11:07:9f:2f:04:40:f9:51:b5:70:f6:
d1:11:43:8c:66:0e:3f:bc:3a:8c:7a:53:3c:5d:ab:
f2:ea:5f:19:67:a5:45:fb:26:be:a9:57:d5:dd:c7:
3e:c9:e9:dd:74:aa:eb:77:1f:bc:6b:88:a9:26:7a:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DA:5F:BF:61:FC:68:15:A5:29:76:45:DB:A5:27:9D:6F:69:6C:88
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/iNpfv2H8aBWlKXZF26UnnW9pbIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.237.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:9f:bc:c1:0f:4b:a2:b0:d8:cc:97:3c:d5:76:2d:7a:51:17:
d7:ab:b8:97:87:d3:da:5d:a8:28:df:69:53:97:2d:a7:3b:d8:
d1:a4:30:dc:58:dd:5d:25:23:b7:4d:46:40:59:91:7a:ab:98:
5b:c1:ae:07:79:25:ab:c7:33:9d:aa:a3:7a:e9:ba:8f:75:40:
87:fa:24:7a:24:f0:1f:48:d0:3a:ca:75:65:ee:2b:35:80:ed:
95:98:9e:32:b7:56:bc:42:7a:e2:06:08:93:d8:da:3e:e8:05:
95:5a:ef:eb:23:4f:f2:90:be:b5:ff:c0:36:c7:41:59:d5:76:
45:76:2a:e5:af:cf:40:97:9a:23:9d:83:62:b6:a5:3c:67:14:
19:e1:ea:09:0c:c2:ff:5e:c1:ff:ca:32:7b:d3:9b:69:bc:e2:
5e:d6:59:70:e9:b6:fc:28:13:1b:e2:fe:3f:97:ba:27:ac:b3:
90:5c:23:41:85:ec:2f:ac:f8:62:d7:6e:8e:b8:b1:69:37:e5:
82:ac:48:b8:54:18:5a:3d:66:7a:70:01:cf:54:03:9f:8a:7e:
77:de:80:ca:e2:13:f4:f9:1b:3b:56:e3:93:ee:13:a0:1e:55:
a1:a0:3d:38:f3:c9:b2:19:f4:6f:be:62:19:84:53:80:69:41:
5f:26:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:06:31 2026 by rpki-client