Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/IzgEkRNH1DYPVjDGLXtC7WBaydw.roa
File: IzgEkRNH1DYPVjDGLXtC7WBaydw.roa (raw, json)
Hash identifier: Li3+jB8itS16vQfr0gu2Bq1HWyQPtGQdjr3ari25zDc=
Subject key identifier: 23:38:04:91:13:47:D4:36:0F:56:30:C6:2D:7B:42:ED:60:5A:C9:DC
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019F224E49B4B32F6F9A3F44F70ED0FC0AEC
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/IzgEkRNH1DYPVjDGLXtC7WBaydw.roa
Signing time: Thu 02 Jul 2026 10:09:43 +0000
ROA not before: Thu 02 Jul 2026 10:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 89.38.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:4e:49:b4:b3:2f:6f:9a:3f:44:f7:0e:d0:fc:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jul 2 10:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=233804911347d4360f5630c62d7b42ed605ac9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:62:17:63:f9:a4:c9:1a:53:65:8b:f2:15:
ed:8a:b2:7d:94:c1:d5:dd:a3:0c:7d:99:d6:03:38:
72:10:20:41:a5:ef:b3:36:db:60:c8:29:d2:2b:dd:
81:fd:6c:b9:9d:fa:b0:41:cb:1f:dd:d2:0f:7d:94:
ac:eb:a8:35:84:c1:5f:87:cd:c2:bc:26:52:42:aa:
2c:31:cf:a3:35:6e:28:d5:67:55:9a:85:33:bc:13:
e3:b7:90:86:aa:db:34:50:ff:09:42:82:63:02:78:
4c:a3:3c:45:ce:a4:8a:3c:d6:08:ca:c2:64:d7:e0:
c2:a2:ba:bd:38:3a:5e:a2:c7:c9:1c:19:c3:a4:a1:
a8:bd:2e:52:7a:0f:e5:a8:8b:53:9e:04:d7:58:9e:
71:77:68:24:32:28:5a:c2:bc:13:77:7c:e3:2d:e7:
86:84:e9:54:99:8a:e6:f1:3a:c6:ae:9a:b9:f0:94:
7d:36:4a:63:f5:e2:2a:2e:c0:40:0f:37:74:0b:50:
32:fa:90:f2:a8:63:45:62:3b:da:c9:b1:2a:8f:af:
db:ea:fc:e9:af:49:52:94:c9:d4:17:e3:86:79:50:
b2:d7:df:6e:dd:85:cf:1c:57:0e:0d:0e:c5:f1:03:
25:50:e9:20:0c:ad:71:55:d9:31:38:9f:6c:91:a0:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:38:04:91:13:47:D4:36:0F:56:30:C6:2D:7B:42:ED:60:5A:C9:DC
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/IzgEkRNH1DYPVjDGLXtC7WBaydw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:48:5b:d7:0c:ae:1d:0c:05:32:ca:82:9e:60:d1:53:75:c3:
5c:16:11:ab:4d:b8:03:2b:de:df:c9:d1:e2:92:c7:ce:cd:ac:
df:64:64:5d:b4:f4:d2:31:f4:c0:c5:ff:1e:9b:6e:e4:14:2f:
14:7d:81:70:ba:5a:7e:54:11:fc:67:06:ba:3c:3f:15:ca:3d:
ce:cc:7b:42:2a:29:d6:e1:3e:23:f0:71:97:9c:9e:ef:c4:af:
22:9b:35:25:a1:80:a0:9e:48:c2:6b:b6:08:2b:a9:41:18:e7:
06:b9:31:18:b9:27:dc:5e:a0:99:e0:28:d0:ff:0f:77:ea:b9:
4e:93:64:65:2a:ec:cf:ae:ad:31:57:f6:cb:62:39:6b:c2:5e:
f3:67:25:6a:db:91:96:4e:38:10:6f:00:59:5d:07:ec:06:14:
da:ad:88:ca:14:8f:57:d5:97:bf:4b:b8:18:a2:59:bb:21:ee:
92:0b:0f:9b:ec:c0:f9:4c:49:75:fc:d4:3d:ef:59:d6:80:42:
1e:f7:81:53:7c:cb:d7:28:ea:62:32:c9:9b:85:1b:61:38:e2:
24:69:04:cb:7e:c6:41:98:36:43:f0:95:60:27:92:13:9b:6c:
22:a3:23:3b:8e:8f:dc:57:62:46:ce:5a:fa:0d:19:0c:ed:f9:
9c:93:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:37 2026 by rpki-client