Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IqmIgWcM6EWm0rDEgRzQ0SmKuqI.roa
File: IqmIgWcM6EWm0rDEgRzQ0SmKuqI.roa (raw, json)
Hash identifier: fZ+c3BWmnw8qQADdWjVO/Sd5pl4JeQEnRjPnidRNUd4=
Subject key identifier: 22:A9:88:81:67:0C:E8:45:A6:D2:B0:C4:81:1C:D0:D1:29:8A:BA:A2
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E4A147CC604583B0D2BF4CB6071696641
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IqmIgWcM6EWm0rDEgRzQ0SmKuqI.roa
Signing time: Thu 21 May 2026 10:28:37 +0000
ROA not before: Thu 21 May 2026 10:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212890
IP address blocks: 87.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:14:7c:c6:04:58:3b:0d:2b:f4:cb:60:71:69:66:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 21 10:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22a98881670ce845a6d2b0c4811cd0d1298abaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:eb:74:fb:4d:c1:db:ff:31:f2:0b:3d:e9:
de:90:89:b7:63:94:55:57:43:20:42:24:8c:8d:2b:
88:57:02:5b:3d:cf:f8:ab:71:6c:45:ac:91:18:68:
54:a7:c4:30:46:ed:45:2d:c0:29:0a:8e:6f:09:5a:
fa:4b:5b:e8:a4:e8:19:e5:cb:b8:a3:bd:60:a6:f5:
58:56:e1:3b:d6:90:38:28:ca:bb:84:2e:4e:39:a2:
06:15:fa:94:00:d7:20:fd:0e:8b:78:cb:83:ec:29:
1d:88:a5:40:1b:c8:e8:12:ac:05:89:5b:2a:5b:e5:
28:0e:1b:70:ab:a7:b4:21:36:1a:63:9d:44:85:c5:
00:7d:57:3b:93:ee:66:bc:d0:01:4b:b5:cf:61:27:
f0:62:c2:e4:25:52:58:0c:68:06:c4:59:47:0a:17:
3b:84:96:42:e8:73:e8:7a:7b:ba:ef:83:b2:48:79:
c7:6f:45:56:44:01:5a:f8:1f:90:26:87:6b:57:01:
ec:fd:b9:92:b4:94:17:b9:3d:82:cf:40:22:2d:2c:
5b:e3:5e:83:a0:86:96:87:96:43:2d:02:2a:37:77:
98:b7:a0:1f:d3:93:a7:c6:e6:9b:be:49:f1:b4:ae:
d9:f1:e2:7b:2c:1c:d2:5a:4b:f2:f0:5a:7e:84:98:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:88:81:67:0C:E8:45:A6:D2:B0:C4:81:1C:D0:D1:29:8A:BA:A2
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/IqmIgWcM6EWm0rDEgRzQ0SmKuqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:58:4b:af:28:84:a1:3f:32:9e:3d:41:48:88:f2:a2:11:9e:
fd:6c:aa:9f:7a:db:bf:11:17:77:cf:d2:75:4a:52:ac:d5:21:
25:d0:86:93:02:7b:52:6f:1e:a9:a7:b6:1c:1e:a1:7c:b1:c7:
0a:d4:82:14:48:f6:a1:9b:60:f1:0f:b4:b3:13:58:05:98:57:
16:f8:88:dd:aa:05:d7:57:3a:bd:7b:a4:11:f8:49:a3:5b:7a:
12:58:82:b2:17:09:8d:f4:e1:1c:31:66:e7:9d:c9:92:ee:94:
58:f4:28:16:f7:cb:74:e6:6f:19:c0:4f:3a:13:3b:10:a9:d5:
bf:32:20:11:e6:13:6a:87:dc:2a:8f:72:a0:6c:d9:ec:cf:68:
9f:da:7d:2c:15:81:90:46:7c:36:fb:42:d8:67:fa:dd:0d:a0:
c0:44:98:17:49:f0:da:28:8a:cc:9f:57:df:42:7c:6f:0c:d6:
03:6b:99:76:cf:7f:27:86:a5:55:80:86:89:53:0a:12:be:db:
4c:9b:02:38:4d:1f:cd:75:9d:03:8b:9a:93:09:da:bd:c2:b7:
79:fd:7b:55:e2:5f:27:b2:a0:17:46:d8:41:6a:bc:d4:99:01:
f4:90:79:68:29:dd:03:82:6c:26:06:81:ba:04:2a:c4:4a:6a:
c6:c3:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:01:41 2026 by rpki-client