Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/I4n1Z5BQu1kmVPGStt7EINgtNQo.roa
File: I4n1Z5BQu1kmVPGStt7EINgtNQo.roa (raw, json)
Hash identifier: 92IJ0Usz+iM/W03HDiR4wCcyFbR1eoC3A00tDG+zs24=
Subject key identifier: 23:89:F5:67:90:50:BB:59:26:54:F1:92:B6:DE:C4:20:D8:2D:35:0A
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 019FFF73822385F10F3A9CE6A373D37744A6
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/I4n1Z5BQu1kmVPGStt7EINgtNQo.roa
Signing time: Fri 14 Aug 2026 08:46:27 +0000
ROA not before: Fri 14 Aug 2026 08:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48367
IP address blocks: 152.89.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:73:82:23:85:f1:0f:3a:9c:e6:a3:73:d3:77:44:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Aug 14 08:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2389f5679050bb592654f192b6dec420d82d350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:30:96:ae:d8:7f:5a:22:7a:3d:49:ed:4f:
d1:c8:c1:6c:fc:0c:36:52:f3:e5:4e:c9:eb:b8:4d:
45:73:e2:ff:7b:15:16:93:5d:76:05:01:76:80:a9:
46:d5:0a:04:f9:5c:bf:6e:42:13:0a:07:ea:13:7a:
96:aa:bb:b1:00:24:9b:a2:a5:74:9f:4f:fe:c9:33:
2f:c3:ac:e5:1d:3d:66:c8:8a:28:28:7c:d4:b4:23:
57:34:c6:d9:62:ba:88:92:15:91:30:e0:85:26:71:
2e:25:f0:50:68:6b:72:4e:83:0f:c0:e1:55:66:a7:
8b:dc:42:59:d1:30:49:d3:69:30:6f:77:da:f4:b8:
00:23:d2:99:e7:88:9e:7c:bd:e1:c7:aa:19:f8:34:
a3:83:49:1e:63:40:d3:3e:4a:a0:b3:06:b3:10:5b:
c6:d7:e9:28:52:59:c4:4e:58:2a:95:3f:93:71:36:
78:ec:e7:01:4c:89:dc:ce:eb:7d:28:98:6a:e2:ae:
96:05:89:4f:d3:de:03:0e:77:fd:24:33:70:07:8b:
e4:c9:2c:36:4b:bd:69:44:5d:0c:3d:3f:c5:3f:6c:
38:30:4b:6c:1c:d7:18:c4:64:9c:4b:ba:14:50:7e:
51:54:44:c3:9e:f7:59:cf:63:a4:80:b7:d0:3b:32:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:F5:67:90:50:BB:59:26:54:F1:92:B6:DE:C4:20:D8:2D:35:0A
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/I4n1Z5BQu1kmVPGStt7EINgtNQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.220.0/22
Signature Algorithm: sha256WithRSAEncryption
19:59:3f:4d:f7:b7:f2:b5:92:63:19:a7:c8:09:9a:61:2b:35:
97:b4:80:5e:02:79:13:da:e9:40:06:70:cf:18:b0:4f:65:d3:
09:da:d4:45:7d:37:4e:8a:ad:08:36:ca:2b:6b:ee:50:15:21:
c8:36:33:37:00:e0:f2:cd:f5:53:64:02:4d:27:48:79:47:a7:
a3:9b:bd:45:9a:05:0c:d8:db:b8:9b:eb:99:65:44:80:16:04:
ac:59:1f:f1:32:ef:b7:7b:74:56:76:35:50:a1:c5:48:04:a1:
e6:94:14:e6:74:1a:c1:46:b4:4d:62:89:e1:e8:42:d7:18:81:
19:2f:6d:0f:e3:f2:c2:92:e2:c9:7a:2b:e9:c2:9f:fb:83:ae:
87:ff:e4:aa:81:68:c5:f7:84:bd:79:78:ae:d5:cc:62:f0:df:
79:95:25:b4:98:3f:b9:62:9f:7f:2e:d9:a8:50:e1:df:20:8d:
a4:14:d3:fb:de:a8:55:20:c1:49:e6:9e:8e:44:4a:d8:6e:1c:
b2:d3:52:ed:b0:16:b6:95:65:56:41:b3:ab:f5:e0:a2:85:64:
de:da:4b:3b:c2:91:71:bc:55:7e:8a:0e:3c:ba:61:c3:78:e6:
48:e3:a9:1e:d5:1f:d3:95:29:28:d7:4c:5f:04:a0:98:03:ce:
fc:fc:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:52:14 2026 by rpki-client