Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/m-IGLnum8ilMrBfDfxTWwYT4dUo.roa
File: m-IGLnum8ilMrBfDfxTWwYT4dUo.roa (raw, json)
Hash identifier: 24oAS4KED0v5cTnbyv83FY9FoeKXcZXgjqplweO9u30=
Subject key identifier: 9B:E2:06:2E:7B:A6:F2:29:4C:AC:17:C3:7F:14:D6:C1:84:F8:75:4A
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019F13A4838547D09FF3DCAC26755019DB22
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/m-IGLnum8ilMrBfDfxTWwYT4dUo.roa
Signing time: Mon 29 Jun 2026 13:49:36 +0000
ROA not before: Mon 29 Jun 2026 13:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 195.238.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 07:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:a4:83:85:47:d0:9f:f3:dc:ac:26:75:50:19:db:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Jun 29 13:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9be2062e7ba6f2294cac17c37f14d6c184f8754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:bc:1e:67:fb:30:59:73:77:22:7b:ed:f8:
55:2d:3e:6b:4b:9c:56:7a:25:72:78:1d:70:92:6b:
18:f0:9b:ef:c1:43:d5:a7:5c:79:4e:13:1e:62:37:
94:8e:e8:45:bd:7c:05:5c:27:6a:7b:8d:db:68:88:
bb:cc:37:30:88:c4:c7:0e:92:cc:9e:0c:85:14:d9:
33:c2:3a:11:7b:80:de:91:68:82:43:05:0d:3a:e7:
20:a8:5b:83:3a:8a:96:78:3a:2c:dc:df:2e:6b:75:
00:a7:8c:24:6d:62:89:83:1e:12:5d:ac:9d:ff:fd:
41:dd:2b:a9:23:d6:d4:22:c5:a4:a9:5e:22:a8:df:
1d:cb:f9:f8:9b:84:a0:38:9e:e5:34:b3:d1:23:8e:
4b:3b:40:93:ba:21:91:39:af:b1:df:5d:f4:79:39:
0f:af:47:50:65:3d:3f:cf:70:40:95:66:c0:42:fc:
60:9a:ac:06:dc:6f:d3:5d:17:0e:b8:73:d1:01:ea:
19:eb:eb:f6:dd:bc:07:83:74:9d:dc:25:8f:92:66:
ce:53:9a:bd:20:cc:50:d5:96:4e:14:be:a7:47:60:
9d:91:33:88:e9:4e:e7:9a:0b:27:c3:90:03:a9:54:
39:3b:29:1e:0a:a6:32:2f:b9:62:f0:f9:fd:25:9c:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:06:2E:7B:A6:F2:29:4C:AC:17:C3:7F:14:D6:C1:84:F8:75:4A
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/m-IGLnum8ilMrBfDfxTWwYT4dUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.97.0/24
Signature Algorithm: sha256WithRSAEncryption
90:45:ff:8f:a4:a9:8e:f5:79:59:44:08:18:57:b9:5c:c0:a1:
f9:db:fe:2d:cf:07:ed:5d:e2:a0:02:ca:fc:35:96:10:d5:fc:
91:5e:f4:da:15:e8:50:fe:4d:0b:58:c8:14:27:7a:90:47:1c:
37:43:67:4c:5c:e8:a3:e5:39:0f:3e:97:09:3e:db:72:5e:bb:
b8:7a:6e:68:4f:5d:8a:80:78:34:ce:43:6d:5f:af:d6:a8:25:
9b:91:ce:23:c5:97:6f:51:51:e6:ca:25:0b:ed:b4:95:e3:27:
75:d5:27:81:ef:b7:e6:c2:20:e0:96:0a:b1:7f:ab:5f:14:b7:
38:d4:67:42:a7:a2:74:bc:ff:5d:45:af:8e:26:7b:d7:e3:e0:
7c:b1:5a:3d:02:2c:b3:57:9e:0f:c6:7c:a6:4a:1e:45:83:71:
c9:30:9e:7d:0b:07:1b:b2:59:2d:16:74:fc:58:c5:0a:af:a7:
90:03:c7:61:93:8e:be:e6:2e:0e:1f:55:fd:1a:ba:e2:75:d3:
fc:c4:64:67:c7:75:b0:ac:ad:d4:0d:1c:60:26:93:b3:1b:63:
be:a0:99:5f:fe:98:20:83:15:dc:95:85:b8:6c:6a:86:9d:29:
ef:92:15:17:87:05:e7:1b:e8:2f:ed:2b:1b:50:99:25:ff:1f:
dc:83:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:24 2026 by rpki-client