Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iau-hwi2xVkz2qQ7R3Qzh-SOl8A.roa
File: iau-hwi2xVkz2qQ7R3Qzh-SOl8A.roa (raw, json)
Hash identifier: oAD9l8WNiyKWqYf2VmQbygwdAu5SyliwfW0pVC0QdQM=
Subject key identifier: 89:AB:BE:87:08:B6:C5:59:33:DA:A4:3B:47:74:33:87:E4:8E:97:C0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EA8168C26F945E91E3E0FF99E28B4258F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iau-hwi2xVkz2qQ7R3Qzh-SOl8A.roa
Signing time: Mon 08 Jun 2026 16:35:10 +0000
ROA not before: Mon 08 Jun 2026 16:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 212.189.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:16:8c:26:f9:45:e9:1e:3e:0f:f9:9e:28:b4:25:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 8 16:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89abbe8708b6c55933daa43b47743387e48e97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:3d:89:10:cb:27:62:f1:69:7f:a9:01:2a:
65:5a:20:00:c7:59:a8:69:f8:6c:9c:3e:0f:46:f0:
92:c3:54:35:b7:a9:05:11:37:7a:8e:27:be:71:cd:
a9:88:ea:43:94:fc:64:f1:23:9c:d0:7b:16:49:a0:
71:49:53:0a:66:35:de:ee:a8:19:64:0d:a3:03:69:
13:ad:5f:a4:cc:15:a6:50:62:2f:45:b4:4a:88:2c:
5c:ac:29:76:a7:47:8d:94:a7:8e:9c:35:b4:33:a6:
ee:43:82:1f:3c:e4:95:89:8e:73:ed:e4:f2:1a:c6:
21:e5:9c:44:5c:47:93:62:cb:2d:87:aa:06:23:28:
e1:0e:f8:30:e5:46:0f:52:07:42:a2:a3:7b:61:4c:
03:4d:a9:a5:5f:77:1b:63:af:d3:ea:6f:1c:55:ef:
db:57:be:50:04:1a:ae:49:3b:0c:35:54:35:27:9e:
5f:11:c1:d6:42:65:77:28:ed:00:80:da:46:17:39:
5e:2e:95:cd:d6:71:1e:14:ac:77:76:3c:08:95:0f:
49:88:b8:72:85:12:ff:77:88:3f:f1:3a:4d:dc:5b:
db:11:18:2c:26:13:a9:ed:9b:fd:d3:d9:c0:a2:83:
6b:44:9b:d8:3f:d3:1a:5c:3a:3a:a4:3d:29:cb:b0:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:BE:87:08:B6:C5:59:33:DA:A4:3B:47:74:33:87:E4:8E:97:C0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iau-hwi2xVkz2qQ7R3Qzh-SOl8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.104.0/24
Signature Algorithm: sha256WithRSAEncryption
94:da:37:c9:eb:df:55:6b:94:67:6b:e2:7b:a0:2e:d5:05:03:
28:90:ae:5e:f3:e3:9d:a0:5f:4e:dd:2c:3d:63:2e:5c:aa:4e:
11:3f:56:50:b7:0f:1f:13:34:24:c3:ed:6a:d0:4a:85:5e:bd:
ae:0e:ac:c1:77:bf:1a:f9:b8:24:80:7f:5f:6b:bd:c5:83:81:
56:b2:a1:02:16:2b:e7:6d:d4:75:67:e9:23:5c:0c:f9:b8:8b:
5d:be:eb:d1:53:78:a7:f8:96:30:0a:a2:e2:17:21:c9:c9:f5:
26:29:55:51:ed:d3:71:6d:46:4c:c5:4a:5f:f5:2d:73:43:44:
eb:38:45:71:ac:3c:d4:86:65:0c:9b:11:b4:9a:15:59:33:4e:
df:0e:4e:23:d6:7a:39:51:26:2e:2a:60:61:15:f6:f9:da:cf:
d2:ba:bd:2d:83:6b:97:45:2c:c6:ba:a8:84:c3:36:a4:1e:c3:
8d:19:43:11:fb:df:f0:51:2b:91:9a:73:de:a0:e3:ef:dc:00:
f0:9c:34:cb:05:df:5d:fb:f4:ac:e5:ec:27:25:bf:e4:35:ea:
13:3f:f8:f9:b0:3e:94:be:a9:a6:1e:68:c7:04:bf:cb:39:f9:
11:91:c3:db:1c:41:57:67:97:16:d1:af:90:57:db:41:bb:b2:
fc:c4:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:42 2026 by rpki-client