Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iZMCFtePrz56aVtdt1a4nl0-Big.roa
File: iZMCFtePrz56aVtdt1a4nl0-Big.roa (raw, json)
Hash identifier: 9a2kVbCRXVv1gpC//KxAmLcNSLbvHIbvWzS7PhPAt8Q=
Subject key identifier: 89:93:02:16:D7:8F:AF:3E:7A:69:5B:5D:B7:56:B8:9E:5D:3E:06:28
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019C6BE4F594FF624D0B46EFEF4BFEC74201
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iZMCFtePrz56aVtdt1a4nl0-Big.roa
Signing time: Tue 17 Feb 2026 13:58:13 +0000
ROA not before: Tue 17 Feb 2026 13:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200907
IP address blocks: 46.8.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:e4:f5:94:ff:62:4d:0b:46:ef:ef:4b:fe:c7:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 17 13:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89930216d78faf3e7a695b5db756b89e5d3e0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:d7:94:0b:ee:e1:dd:dd:32:b9:47:a3:70:
92:1f:e0:b5:a2:9c:4c:ef:16:b2:63:85:6d:51:fc:
35:53:4e:9e:b5:2a:03:f1:41:73:9c:70:e2:30:12:
0e:ef:79:7b:d9:a5:7f:a3:a1:40:e5:95:fc:b6:05:
98:70:fa:96:d8:0b:5a:42:e6:64:f5:f5:07:70:55:
42:77:ae:6b:ab:e7:a5:0f:98:55:ef:74:75:79:fc:
1d:7e:a7:cc:33:a4:dd:e6:bf:bb:4b:55:9f:0b:fc:
cd:51:e4:9e:7b:c3:0d:e9:20:14:38:de:a6:d9:82:
90:8f:9e:e5:05:07:69:15:1a:1d:9b:a1:b3:50:ae:
0c:fd:b5:68:b3:03:85:8e:3e:4e:55:a6:6f:1d:f8:
35:98:15:a1:9b:8d:28:88:f6:97:57:92:f1:55:d1:
3d:47:1c:bb:bc:cb:d0:6d:15:c9:ad:79:1a:45:49:
96:c9:16:b3:14:09:92:1b:fc:b2:cb:f3:5d:da:30:
17:bb:e1:f2:9e:a6:28:8e:cd:41:e4:84:59:26:6f:
e7:4b:ca:66:52:d3:c4:09:c5:38:69:3d:fb:a8:79:
6c:fe:ad:25:ed:84:72:ec:f5:fd:c6:bb:5d:4b:46:
32:d5:4f:12:f7:ff:2e:62:a0:75:ac:7f:63:f9:12:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:93:02:16:D7:8F:AF:3E:7A:69:5B:5D:B7:56:B8:9E:5D:3E:06:28
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iZMCFtePrz56aVtdt1a4nl0-Big.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.198.0/23
Signature Algorithm: sha256WithRSAEncryption
76:f3:c3:87:88:0f:3a:bb:b0:3d:b1:48:7b:28:15:ce:c9:34:
84:47:8f:c6:64:67:55:f2:34:44:a2:34:ad:64:8b:1c:95:4a:
8e:d7:b5:83:38:c5:66:aa:3c:6a:e0:70:f3:fd:5b:87:1b:e1:
0e:27:9b:11:f2:d5:41:eb:7b:60:0a:ff:56:19:04:00:9b:a4:
2f:8f:0a:09:dc:a1:3c:30:6a:95:09:53:53:c1:d0:f2:39:04:
3c:3c:e7:b8:16:24:c7:97:bd:9a:05:ed:2e:28:fd:fb:52:ce:
04:92:b4:b4:9a:10:2a:3e:26:f0:98:06:91:e8:cc:d0:4b:68:
5c:f2:78:f0:75:64:ba:9e:33:64:8b:24:18:2b:76:1f:cf:05:
a9:f8:f4:04:89:2a:27:6a:98:05:10:d1:5a:76:01:fb:9a:24:
01:28:4a:77:1b:d4:d0:a9:a9:31:70:83:a8:4f:0b:9a:68:fe:
ed:55:82:1d:e2:ed:49:d0:7d:b1:6c:92:1b:07:be:cf:c7:2b:
f1:9d:e6:e7:6e:3f:c1:23:03:59:28:c4:5f:92:c1:94:0c:b0:
4d:47:2a:7e:7e:93:c0:9d:5b:2f:55:af:91:76:8c:42:13:98:
7e:f2:2f:fa:e5:a4:24:3b:18:01:76:81:fd:e2:5c:3c:90:c6:
4d:59:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:34:08 2026 by rpki-client