Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/IxteufJj4fF75xV58EqzQgYcsIo.roa
File: IxteufJj4fF75xV58EqzQgYcsIo.roa (raw, json)
Hash identifier: Nh9kOJGnKXYTWMkaH2Xq//J/zhrI7SfQl1Qso7ySr+E=
Subject key identifier: 23:1B:5E:B9:F2:63:E1:F1:7B:E7:15:79:F0:4A:B3:42:06:1C:B0:8A
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A014DCC5BCC40C63481AD131D5D1143D50
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/IxteufJj4fF75xV58EqzQgYcsIo.roa
Signing time: Tue 18 Aug 2026 12:33:27 +0000
ROA not before: Tue 18 Aug 2026 12:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:dc:c5:bc:c4:0c:63:48:1a:d1:31:d5:d1:14:3d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 18 12:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=231b5eb9f263e1f17be71579f04ab342061cb08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:14:0a:15:09:93:d0:4d:8e:6c:6f:d5:41:
ad:e6:b4:3d:5d:4e:5a:da:de:9e:6e:3b:c5:a1:1b:
dc:91:3d:b0:1b:d4:c2:4c:b9:9b:2f:b8:20:5c:cc:
1c:5f:23:a6:2d:49:6b:ab:6c:ab:56:8a:1f:d4:f1:
a5:cf:7b:01:fd:f8:da:6a:84:ea:33:66:a8:fc:7c:
93:93:d3:fe:8d:b9:f2:91:e6:b0:e8:b7:3f:15:48:
68:37:d8:9a:95:f2:35:cf:54:27:a0:0d:c8:eb:bc:
12:35:4f:e7:e8:d8:78:bc:6c:f7:05:a6:61:c3:80:
d0:8a:a2:f0:cc:55:78:83:4c:33:3f:5c:f6:4f:ad:
09:df:19:79:f2:42:f4:65:48:38:3b:ed:dd:a5:03:
76:3a:b7:2b:41:24:80:68:c9:6b:29:d2:fe:24:93:
c9:31:da:4e:73:16:53:b2:3f:47:08:75:81:b5:fb:
1b:35:53:ef:5b:b8:0b:9f:bf:51:35:e8:58:3b:05:
9a:77:a6:b9:d2:63:65:56:c6:21:13:91:c1:5f:bf:
5f:97:1a:19:90:d0:59:b9:69:a4:66:1b:ec:0f:76:
9c:fa:f2:27:2a:9f:ba:08:a7:c2:84:81:ae:2e:94:
fa:67:57:c0:ea:af:a4:54:30:b9:21:bf:2a:7e:10:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:5E:B9:F2:63:E1:F1:7B:E7:15:79:F0:4A:B3:42:06:1C:B0:8A
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/IxteufJj4fF75xV58EqzQgYcsIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
86:06:f0:57:92:41:36:03:09:6e:5a:bc:22:05:81:52:83:1a:
1e:1e:c3:52:b4:25:e1:77:0f:65:5d:d8:ad:e7:c0:00:54:50:
a3:b8:4d:43:3d:3c:4b:d4:12:53:d9:4c:40:ec:2e:84:1b:46:
cc:10:f4:a7:37:b2:f5:c5:c0:92:1f:fc:56:fb:21:dc:ca:0e:
9c:76:d6:bb:07:de:4f:54:ca:44:fc:d9:41:2b:59:67:8c:2d:
93:a1:11:d3:fb:b5:92:6e:d2:54:a2:bb:89:37:97:b1:70:08:
a3:9b:04:73:07:10:fb:53:c1:ef:5d:f6:07:b5:49:22:dd:20:
53:91:9d:ca:c7:35:be:78:45:46:19:2c:06:e1:4c:b2:7f:68:
7f:ee:cc:f5:cb:38:96:57:0c:ba:bf:a8:a6:1e:5d:e2:ee:62:
6e:dc:26:98:5f:a6:81:0f:00:fa:5a:01:22:91:bb:35:b6:f7:
59:2b:f5:59:e8:2e:50:a7:c5:c6:90:0b:9b:76:35:cd:a5:53:
3f:36:48:f6:af:36:55:fb:65:5a:70:c2:53:ec:01:9a:31:7f:
9f:8a:a4:84:12:ea:04:95:9f:c1:24:1d:28:17:85:7e:ac:58:
d5:0d:fc:9e:48:9a:bf:03:f1:ed:95:6c:a2:84:40:32:e0:b7:
15:b0:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:00 2026 by rpki-client