Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/iX6vy1XcuPqqbDz8w-InkH2wG7I.roa
File: iX6vy1XcuPqqbDz8w-InkH2wG7I.roa (raw, json)
Hash identifier: GqKpcRA3VOR2P5FWA83zgHTmjRMOW1fhvmM6tUVqgDI=
Subject key identifier: 89:7E:AF:CB:55:DC:B8:FA:AA:6C:3C:FC:C3:E2:27:90:7D:B0:1B:B2
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019FB295957B3167D0B70CC4D743FB32935F
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/iX6vy1XcuPqqbDz8w-InkH2wG7I.roa
Signing time: Thu 30 Jul 2026 10:32:55 +0000
ROA not before: Thu 30 Jul 2026 10:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50599
IP address blocks: 213.239.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:95:95:7b:31:67:d0:b7:0c:c4:d7:43:fb:32:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Jul 30 10:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=897eafcb55dcb8faaa6c3cfcc3e227907db01bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:de:4c:c6:3b:77:92:a1:c2:0d:82:6b:86:
2f:1a:3d:f9:ef:65:ee:22:4e:f6:07:04:e6:9c:78:
90:9e:dc:9a:6d:3e:b5:0c:e0:7d:ea:1f:40:ed:f2:
35:63:23:73:45:b0:73:92:7e:ec:e0:cc:42:07:b2:
47:a2:95:4d:cc:93:7f:c9:bf:80:37:eb:48:21:2c:
09:fb:1f:f7:ec:22:49:b8:32:ac:4d:f1:9c:2c:b1:
72:b3:06:e5:e7:ef:72:f2:af:e6:05:89:0c:a0:dd:
21:16:92:a2:5a:8a:23:da:3e:c4:1f:e7:50:a2:d5:
de:23:d4:1f:3d:d4:2b:6d:b6:77:5d:d8:d2:a8:20:
52:3c:00:7a:f7:3c:b8:6f:d0:24:ae:75:e8:f3:79:
98:52:51:21:de:38:aa:01:9c:50:85:1a:79:44:d4:
a5:e9:c3:24:ba:36:5c:0c:fb:51:88:76:f1:20:81:
7d:00:b3:19:d5:23:27:f6:15:cd:4b:26:63:1e:37:
c0:42:9a:f5:ec:e2:d8:37:fd:b3:0d:8d:41:6c:e3:
6e:fc:48:d6:d7:69:8b:2d:60:8c:64:a8:7d:b0:10:
62:48:fc:ef:16:32:4a:8a:56:24:2d:d6:a5:29:c8:
fd:09:d8:af:bf:7b:4b:91:d9:35:9e:28:6e:42:6b:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:AF:CB:55:DC:B8:FA:AA:6C:3C:FC:C3:E2:27:90:7D:B0:1B:B2
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/iX6vy1XcuPqqbDz8w-InkH2wG7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.239.128.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:1b:f8:37:79:6f:d3:ee:21:12:7a:0c:82:09:13:81:a5:99:
df:b9:fc:0c:ed:e0:a7:13:1b:92:80:0e:e7:e3:dc:fb:20:5e:
c4:b0:cd:af:25:40:f9:49:0c:ba:63:13:bf:49:6b:a0:96:ae:
a3:09:71:8d:df:2c:b2:a7:8c:3d:71:af:e8:b0:1a:65:28:b1:
96:1b:81:c8:3e:a8:ff:bb:a0:4b:66:a4:9d:85:37:40:8e:68:
b6:eb:5d:ac:44:ec:d6:4d:7d:43:43:b5:4a:7a:01:79:96:22:
5f:71:e7:47:26:7d:a1:ab:7f:4e:3f:a1:62:bf:0f:e7:56:fd:
ec:96:dc:0e:6f:ff:cb:fb:b9:01:80:e5:25:ca:b7:12:5f:e5:
03:98:54:e8:df:cd:ec:d6:be:a0:4e:80:9f:35:de:22:b5:a2:
f4:d8:18:7d:30:66:99:f5:21:cd:33:70:9c:53:21:49:3c:bf:
63:73:69:29:1d:a9:05:a8:2f:bd:df:5a:e2:12:97:6a:1b:85:
5f:4b:a1:1b:2c:1b:fa:85:fa:b0:6e:c5:54:a0:7d:17:85:76:
4c:b2:d5:c5:ed:7c:2c:a1:4b:77:34:99:9b:c4:08:bd:39:37:
2f:b6:26:41:6d:87:9f:8f:82:53:83:d7:b1:89:64:9b:41:77:
61:16:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:37 2026 by rpki-client