Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa
File: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (raw, json)
Hash identifier: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=
Subject key identifier: FB:FD:6A:08:DB:68:B7:68:60:53:F2:19:3C:92:F6:AA:C4:D3:15:77
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019CDBC38ABD211203AE7200D8B3606EDFA8
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa
Signing time: Wed 11 Mar 2026 07:19:11 +0000
ROA not before: Wed 11 Mar 2026 07:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 88.135.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:c3:8a:bd:21:12:03:ae:72:00:d8:b3:60:6e:df:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Mar 11 07:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbfd6a08db68b7686053f2193c92f6aac4d31577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:ab:62:5a:6a:44:17:5c:6e:9b:9c:3a:cd:
7a:15:07:bc:b6:ce:d0:8e:db:74:94:27:c0:2d:05:
52:31:83:38:be:9c:bb:3f:ba:e9:bf:cc:28:3e:cb:
3c:71:39:f9:fa:21:f3:62:27:eb:90:76:a2:26:32:
09:dd:2b:c8:cf:00:5b:c9:ae:71:33:d4:f7:86:a3:
cd:ad:d2:3f:ce:37:3a:45:0b:c7:26:a9:cc:f4:6c:
92:37:a1:dd:0e:9d:29:4e:24:da:e0:d5:15:c4:4c:
3e:cc:2d:50:b5:07:ae:59:84:26:90:0d:f9:dc:9a:
aa:b9:f4:ef:8e:24:30:c8:37:f2:60:90:a2:7a:a9:
59:3b:db:03:36:9c:83:48:93:6d:0d:65:e2:49:dd:
f7:f0:a3:62:0c:57:2e:9a:e2:69:af:3b:ad:21:47:
7a:da:7c:62:d3:d8:67:07:d0:92:a3:95:74:b4:6d:
90:bf:96:c8:d9:ce:67:7c:bf:af:dd:af:44:a7:4c:
d2:0b:26:71:d8:99:74:2e:ef:f3:cb:ad:60:48:71:
1b:de:1d:23:7c:e6:e2:c3:da:6b:01:59:09:02:6a:
a5:32:d5:f0:b1:37:af:d7:d0:fa:3e:34:59:f2:af:
d7:77:20:33:92:c3:b6:05:cc:49:9c:e4:71:0c:df:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:6A:08:DB:68:B7:68:60:53:F2:19:3C:92:F6:AA:C4:D3:15:77
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.152.0/22
Signature Algorithm: sha256WithRSAEncryption
59:22:14:3e:5d:be:17:85:5e:d0:8e:4e:ad:a5:cc:76:05:50:
cc:0e:c9:ae:c8:74:62:c6:33:a7:df:e0:88:f9:2a:8a:da:31:
44:d9:90:eb:85:63:61:c6:cd:62:f5:96:73:d0:cf:a3:77:3c:
ba:ed:72:ad:1b:27:c5:29:6d:9e:29:d4:1c:0a:47:9b:03:58:
19:20:5e:66:44:71:a9:0c:b4:46:3a:3a:31:7c:34:c2:ea:ce:
1e:8b:fd:5e:54:15:6a:98:92:7b:83:76:61:af:47:05:e3:c3:
71:94:29:b6:57:44:7d:45:95:48:75:49:a3:d8:3c:fe:74:3a:
03:ee:32:6d:3a:01:66:29:51:2b:17:4d:37:71:86:f0:db:c0:
97:fe:f0:f5:6d:77:a8:81:8a:b0:53:3a:cd:98:e6:20:b2:91:
4e:ad:fd:b4:51:1b:35:a3:c5:6a:0b:a8:c0:9b:37:b3:80:a6:
82:2e:f3:25:53:e9:b5:ed:ed:07:98:12:6e:d7:64:3c:6a:a1:
9f:c9:e8:a0:7b:c3:9d:bb:ef:70:b6:c3:f4:95:8e:f5:9d:26:
50:ff:a8:d7:59:8f:69:03:35:0e:aa:81:20:ef:17:95:35:4f:
ac:f8:b0:c2:6c:a7:54:9d:80:65:63:6b:a8:5a:55:e9:bb:79:
a9:e1:9c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:32:00 2026 by rpki-client