Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IbfTWIENtav2Gb-9A4BMXMtftZI.roa
File: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (raw, json)
Hash identifier: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=
Subject key identifier: 21:B7:D3:58:81:0D:B5:AB:F6:19:BF:BD:03:80:4C:5C:CB:5F:B5:92
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019ED6A66052F48BED96E6C9D3666A9BFC03
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IbfTWIENtav2Gb-9A4BMXMtftZI.roa
Signing time: Wed 17 Jun 2026 17:34:48 +0000
ROA not before: Wed 17 Jun 2026 17:34:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132359
IP address blocks: 46.29.26.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:a6:60:52:f4:8b:ed:96:e6:c9:d3:66:6a:9b:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 17 17:34:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21b7d358810db5abf619bfbd03804c5ccb5fb592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:1d:39:39:97:9a:59:d7:0f:b1:ca:69:14:
39:ac:af:73:9f:68:89:8d:30:84:07:6e:3b:5a:44:
af:40:a8:64:92:4b:9e:8f:13:2f:11:a7:f2:23:f8:
39:a6:b8:e8:52:20:22:dc:ea:3b:55:2c:71:d6:9f:
83:6d:83:4e:0e:ae:dd:cb:f5:6c:8a:49:47:dd:91:
de:99:b3:31:c4:5f:55:f6:d4:29:cf:5a:54:d5:8a:
b6:e7:69:b4:6a:c6:03:52:e6:9b:8d:39:c5:8b:f4:
a0:6d:d8:f5:70:49:0d:23:a7:9a:5b:fc:5e:4c:5f:
c3:32:5f:05:1a:60:02:ad:f2:b8:15:41:6f:c8:58:
66:15:d7:84:d1:71:bb:05:ec:25:7a:01:ce:0d:5b:
45:e2:a8:fa:29:86:7f:f3:e9:f7:a5:da:da:00:af:
ae:4d:1c:d7:33:f3:db:06:c8:ac:08:41:9c:31:d5:
cb:fa:c7:9c:45:36:bd:72:e9:48:5f:68:0b:5e:f3:
11:ca:0a:e8:c0:49:96:1e:ca:5f:8a:a5:e6:19:de:
cb:c9:f0:2f:4c:9b:a8:3b:35:40:47:19:29:a9:09:
6e:0f:7c:ba:f1:a7:4a:66:44:a2:7f:ba:3c:75:7e:
42:d1:4d:88:c6:1c:b8:21:ca:77:c0:25:f4:5a:d5:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:D3:58:81:0D:B5:AB:F6:19:BF:BD:03:80:4C:5C:CB:5F:B5:92
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IbfTWIENtav2Gb-9A4BMXMtftZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.26.0/24
185.87.26.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6e:2a:d0:0b:50:25:73:6f:89:78:44:ca:4c:56:bb:8b:f2:
d8:2a:db:5b:51:8e:82:66:f3:2a:43:7a:3c:a1:66:c4:16:b8:
75:d2:38:7b:6a:62:4c:e7:76:1a:90:a2:88:b1:1c:23:24:c8:
d0:7b:97:b3:12:4c:ae:23:82:4c:e9:f4:e3:43:6a:65:a9:43:
05:8a:6a:81:c8:8f:59:e9:3c:39:70:6e:f2:93:75:b9:4e:7e:
72:c0:7b:00:c7:06:a0:a3:30:95:f6:ff:9b:8b:5a:d3:9e:a3:
26:9c:e3:d8:db:58:88:01:a2:0d:95:15:1c:72:99:00:62:83:
62:38:cc:f7:95:3c:fe:aa:a8:61:7e:fd:2c:0e:55:45:31:76:
14:9b:37:9f:08:c2:e4:cf:43:41:8b:78:83:0c:17:be:02:cf:
87:6b:19:0a:2d:7a:aa:12:a3:8c:12:37:e5:d0:9c:fa:47:53:
fc:f0:35:17:08:1a:a8:05:69:a9:a8:89:47:da:32:b0:6f:d1:
b4:c3:51:ac:27:c5:43:a3:1b:3f:96:91:57:74:c2:f3:b1:fa:
d5:ba:4e:60:fa:89:02:23:5c:22:c5:a4:79:5b:29:54:e4:09:
df:61:33:0c:5b:86:f2:2a:45:5e:ec:2f:54:81:ce:09:83:d8:
fe:b8:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:18 2026 by rpki-client