Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/iSTwcsDq44xmj4bDTIa6k6RLQKI.roa
File: iSTwcsDq44xmj4bDTIa6k6RLQKI.roa (raw, json)
Hash identifier: qWNdY8B5/pf+1M3HkKeiYMgI3P7SCbr9CH/em0VTbyE=
Subject key identifier: 89:24:F0:72:C0:EA:E3:8C:66:8F:86:C3:4C:86:BA:93:A4:4B:40:A2
Certificate issuer: /CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Certificate serial: 019EE97D61181A0914AA879FAB02405372C2
Authority key identifier: B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/iSTwcsDq44xmj4bDTIa6k6RLQKI.roa
Signing time: Sun 21 Jun 2026 09:22:48 +0000
ROA not before: Sun 21 Jun 2026 09:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.201.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:7d:61:18:1a:09:14:aa:87:9f:ab:02:40:53:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Validity
Not Before: Jun 21 09:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8924f072c0eae38c668f86c34c86ba93a44b40a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:48:3e:f1:64:4b:4b:e7:74:76:26:7b:ce:
11:77:7f:82:2b:1d:1b:88:c9:06:e1:f4:2c:52:e9:
c2:01:32:c9:ce:13:a9:8a:60:1a:ed:fd:ad:57:46:
59:00:28:ec:03:6a:6a:66:70:d1:c4:a9:89:30:0e:
d2:2f:47:48:7b:72:ce:2d:c0:eb:54:e8:49:62:73:
40:58:ac:6e:88:b7:66:94:d9:d5:04:74:37:64:ea:
1d:9d:04:39:a3:45:6d:a6:22:ac:d8:21:c6:be:47:
74:3d:60:05:8c:8e:1e:38:39:ac:cc:76:03:47:cf:
95:37:15:dc:37:36:c6:bc:7f:f4:cb:d4:a1:c0:fc:
0c:21:81:25:2a:e3:9b:13:ce:a0:fd:02:9c:6f:01:
95:98:24:26:68:5b:ef:6b:ed:f9:a1:bd:9c:7c:d6:
04:41:fd:9c:43:a6:58:d2:24:d4:18:37:b0:4a:3d:
48:93:73:21:94:1d:3a:04:16:65:1a:b3:f4:08:71:
4f:34:3b:7c:8f:8a:da:d8:b1:53:a6:c7:1b:40:0a:
f2:2c:05:c7:9b:10:03:4e:de:db:4a:99:ed:67:59:
b0:2c:eb:25:9c:37:4a:22:aa:61:e5:5b:a9:90:66:
ee:9b:92:e1:10:8c:b1:ca:f8:9d:de:6f:a1:dd:b2:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:F0:72:C0:EA:E3:8C:66:8F:86:C3:4C:86:BA:93:A4:4B:40:A2
X509v3 Authority Key Identifier:
keyid:B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/iSTwcsDq44xmj4bDTIa6k6RLQKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:48:9e:30:ea:9c:3f:c2:a2:34:d7:e9:9c:c8:6d:84:f6:46:
87:69:bb:3c:95:18:e7:48:10:64:74:f9:94:5a:82:03:d0:df:
05:e7:5c:c9:e8:19:79:d0:4b:86:9c:83:c9:3e:88:0f:df:f4:
8e:c0:56:a3:6a:50:a0:ce:30:f5:84:fc:29:f3:61:94:50:fa:
95:9a:89:e7:05:60:f2:6e:58:df:a9:de:f8:8b:22:5c:86:21:
a5:9a:7f:6d:e9:b5:48:e4:1c:82:c8:b8:e5:51:71:9b:1b:d6:
47:c5:79:a8:a1:b6:f6:9b:53:2c:4c:a6:df:8a:31:2b:c9:b2:
29:65:47:96:99:30:1f:d4:51:98:0e:8b:00:40:18:50:ea:17:
67:b5:8a:4d:8b:b9:0e:06:fb:e2:6d:f5:35:c6:e8:a5:0e:e1:
af:c5:04:0b:84:71:cc:09:4a:23:c3:43:f0:9d:d1:f9:8e:7e:
a8:8f:94:ea:d4:81:f9:cd:5f:dd:ea:44:90:8f:c9:5a:29:69:
e9:b3:d8:a3:3f:12:c8:81:c6:5d:a7:86:eb:7c:f4:59:04:65:
8f:84:09:7c:08:08:8a:48:6a:b5:8a:dd:29:db:f7:ca:ab:29:
0f:43:b2:7a:e0:f4:f2:83:d7:5a:0a:87:91:77:f1:5c:cc:a4:
d7:8b:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client