Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/IwGpDD3I3TgAjKRmloI173482RM.roa
File: IwGpDD3I3TgAjKRmloI173482RM.roa (raw, json)
Hash identifier: /Lqj2DLZrraMwwj0gj3Od6gInEqm65PAOOxYEtw7Ttg=
Subject key identifier: 23:01:A9:0C:3D:C8:DD:38:00:8C:A4:66:96:82:35:EF:7E:3C:D9:13
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E6DBF108705F1C0DC499C48AF131E3956
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/IwGpDD3I3TgAjKRmloI173482RM.roa
Signing time: Thu 28 May 2026 08:41:38 +0000
ROA not before: Thu 28 May 2026 08:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14576
IP address blocks: 170.168.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:bf:10:87:05:f1:c0:dc:49:9c:48:af:13:1e:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 28 08:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2301a90c3dc8dd38008ca466968235ef7e3cd913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:42:ed:91:94:ed:dd:a4:84:8b:80:ab:96:
72:54:f9:00:2b:ab:de:45:91:d1:ce:2e:d2:1d:d7:
a6:96:16:db:79:f7:38:be:d6:4d:7f:7e:94:52:c5:
89:23:33:f1:a0:de:38:12:a0:d4:5c:17:42:1c:7a:
df:9f:c0:5f:c6:2b:ec:fa:9e:62:b6:eb:c8:72:ab:
ba:66:d8:5f:60:fa:e3:2f:08:1a:be:70:c4:ae:c5:
f9:12:77:cb:a8:50:cb:18:b8:57:21:4a:27:ea:89:
b8:07:5b:cb:85:82:25:25:83:60:d6:b5:75:d9:8d:
fd:30:c7:b3:50:8d:fe:7a:33:66:b3:8a:1b:17:e5:
d4:f6:e9:5b:05:ac:f1:ec:cd:45:8f:93:db:47:77:
39:06:47:90:98:21:48:dd:c8:21:9b:8c:a2:23:35:
ac:52:1b:ba:f2:e3:80:6b:e3:8f:98:24:89:06:c3:
5e:a9:94:ae:0a:e9:25:44:14:35:83:c8:dc:2c:e6:
18:62:1b:d2:a5:2e:36:e6:5a:08:78:cc:3c:55:74:
be:f1:73:2d:fd:c0:d7:1a:0c:0e:03:26:a9:7d:ce:
13:ce:66:d2:ad:d3:91:f7:4d:bd:12:8d:cc:c2:f3:
76:87:8a:a9:b3:07:ad:44:b1:c2:c5:cc:45:52:45:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:01:A9:0C:3D:C8:DD:38:00:8C:A4:66:96:82:35:EF:7E:3C:D9:13
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/IwGpDD3I3TgAjKRmloI173482RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:02:cd:f3:d9:d7:57:ff:89:d9:68:e1:e1:5e:ae:9f:1c:55:
11:05:f3:37:9f:1d:40:1f:9f:9a:67:29:9b:16:d6:21:11:67:
c4:8b:43:37:4f:2d:2c:c9:9e:84:97:a1:bf:68:7e:d6:58:ef:
20:af:27:bb:6e:38:74:da:f9:0c:5f:d3:90:87:fb:34:e1:ea:
0f:79:4e:c9:18:65:3e:a3:56:50:d2:53:55:42:1c:c6:15:81:
57:f5:92:5c:fe:c8:2e:24:db:75:82:f5:fd:9f:19:f0:f0:04:
a0:78:a4:62:f6:89:5c:63:a7:c0:c5:d9:47:db:39:be:d1:c5:
b4:c7:5f:b0:23:b1:26:2b:df:2a:81:1f:0d:5a:81:0b:c7:9f:
db:8c:76:40:c9:5b:fb:74:9d:ac:31:05:b9:a8:69:b3:9f:16:
ad:3c:c5:77:9d:7b:7b:3b:ee:61:b2:c7:08:7a:af:42:85:d5:
1d:ea:dd:95:0b:c2:11:7c:58:97:ff:9b:40:a5:94:13:5f:b1:
dd:14:cc:dd:44:6b:2f:84:9a:13:df:ef:51:74:7b:91:61:b6:
9c:bd:d9:cb:4b:bb:7a:d9:d2:18:24:f2:b5:a8:97:c0:b8:9b:
c9:74:38:4f:72:74:70:b7:5f:01:92:20:0e:20:21:ae:c3:0a:
93:3c:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:31:11 2026 by rpki-client