Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/iKG_suVErKc_0R6fYUz5F0lAVJE.roa
File: iKG_suVErKc_0R6fYUz5F0lAVJE.roa (raw, json)
Hash identifier: qOgvNl5qGpnXUge3Cx3Ece1bnvAlrIf30LL2xjiVZfc=
Subject key identifier: 88:A1:BF:B2:E5:44:AC:A7:3F:D1:1E:9F:61:4C:F9:17:49:40:54:91
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019E4EEDEFBF1434C6B16A498F43529E380D
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/iKG_suVErKc_0R6fYUz5F0lAVJE.roa
Signing time: Fri 22 May 2026 09:04:36 +0000
ROA not before: Fri 22 May 2026 09:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16344
IP address blocks: 193.25.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ed:ef:bf:14:34:c6:b1:6a:49:8f:43:52:9e:38:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: May 22 09:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88a1bfb2e544aca73fd11e9f614cf91749405491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:e0:7e:3e:2a:09:b5:c7:9b:e6:21:d2:5c:
6a:98:4f:95:45:ed:49:17:9a:17:eb:4b:35:3e:ec:
e1:a3:24:9b:40:b0:37:c6:6c:31:08:a4:e7:fe:f2:
14:14:af:38:d5:58:29:cd:a7:be:c2:90:50:69:6d:
66:92:d1:9f:0d:9e:4d:d5:fe:ae:4e:76:6d:52:ff:
3d:8c:27:53:24:82:06:51:44:f9:d9:c2:bf:3f:a7:
c2:71:a6:75:0c:6e:4b:a6:6a:5b:fb:92:f8:13:58:
0b:ae:a5:98:c8:49:cb:5c:cf:ff:ee:32:ad:26:97:
42:cb:be:31:0f:36:d0:d8:c7:a1:43:bf:a9:5f:dd:
ce:9a:02:59:27:37:c8:e4:03:66:57:ce:5f:35:89:
6d:05:92:f5:b7:ad:cc:7e:03:43:ae:9c:5a:23:4e:
4a:06:e2:9a:88:a8:41:d0:82:c2:9f:a2:d4:93:e8:
36:97:f7:cc:83:b2:01:b8:05:c9:6f:2c:14:83:b8:
7c:cb:65:c2:f1:59:31:6d:07:c6:75:1e:05:2b:f7:
86:09:8b:4e:7f:62:c0:e7:7a:0d:dc:1a:96:3d:09:
74:f7:da:b5:3e:8c:47:bf:e5:9c:0b:33:41:c6:cd:
3f:ab:03:66:4a:04:39:69:1a:c1:c4:33:5e:13:eb:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:BF:B2:E5:44:AC:A7:3F:D1:1E:9F:61:4C:F9:17:49:40:54:91
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/iKG_suVErKc_0R6fYUz5F0lAVJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.162.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:60:3f:32:45:b9:f1:21:4a:9a:7f:66:86:85:86:21:9d:6e:
9f:36:a8:04:8d:3c:a8:76:ba:75:a5:44:ba:d5:10:46:28:8e:
6e:bb:67:24:b5:c8:86:69:ec:f9:18:01:b7:5d:45:4d:bc:73:
8a:28:be:08:6a:9e:84:7e:fe:95:19:78:69:26:07:3d:86:c0:
0f:18:47:ec:e7:2e:72:be:36:54:0b:a9:ff:aa:18:73:00:5d:
07:2d:10:03:f6:c2:5c:35:cd:8d:dd:d6:ae:02:b6:ae:f5:1c:
7e:e9:2f:dd:46:8f:df:12:b6:99:57:4f:20:ca:8f:b5:f8:61:
0f:d1:52:82:2f:f5:27:61:41:ab:17:6f:b0:ea:6a:76:25:f4:
59:9e:27:0b:88:73:ff:2e:80:27:ac:21:32:56:07:d8:97:ea:
f0:25:77:0e:6d:a7:ba:b9:38:a9:9f:1f:b5:9c:84:01:f0:c8:
c6:2e:4a:93:9d:2f:da:28:2c:bc:aa:ed:67:0f:66:78:5c:c8:
3c:f4:31:fc:51:8e:85:c7:2b:8c:d0:c3:d3:96:dd:b8:c7:8c:
03:9b:54:5d:d5:d9:33:6e:9f:b9:76:c7:8f:7c:03:0e:6c:c4:
c0:5b:89:0b:03:5c:57:e8:61:d3:5e:5b:e6:bc:19:8c:2f:5b:
49:be:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:23:53 2026 by rpki-client