Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/iyFL2NGY86FMnoIU_QGeCAFGNBI.roa
File: iyFL2NGY86FMnoIU_QGeCAFGNBI.roa (raw, json)
Hash identifier: cW3SB79uMcjtvH9kJf/uFY+Eq/As2Bn+iWyMoTTfE/c=
Subject key identifier: 8B:21:4B:D8:D1:98:F3:A1:4C:9E:82:14:FD:01:9E:08:01:46:34:12
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F236907AE409EE7B961FA18447A01403B
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/iyFL2NGY86FMnoIU_QGeCAFGNBI.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22516
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:ae:40:9e:e7:b9:61:fa:18:44:7a:01:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b214bd8d198f3a14c9e8214fd019e0801463412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:4b:46:43:93:4d:31:76:e9:8d:da:ba:c3:
a6:da:a3:83:14:b0:8d:c4:67:16:76:fb:6e:18:fe:
7b:10:50:ae:94:08:f9:d8:bb:a5:de:d9:08:13:09:
3e:2a:00:a8:44:ed:fa:81:e7:27:68:f8:d4:5c:7e:
89:55:4e:54:2e:44:cb:2d:f4:8c:f2:ba:17:f0:94:
0e:30:93:8d:e4:6f:47:14:ad:8f:15:a8:48:8f:9d:
7d:49:71:91:f3:d9:6f:0a:87:8c:ac:5e:4a:44:34:
96:bd:26:18:98:fc:83:bb:cf:7f:90:70:8f:48:95:
47:dd:7f:e9:61:33:a2:fc:e7:e2:93:0b:92:1c:b0:
3c:f7:73:f6:ad:e2:31:90:94:3e:1c:cf:82:21:06:
bb:d2:c9:a7:b7:28:b6:ab:8f:b3:bf:c0:9e:ae:6d:
43:11:01:a6:2e:f1:a0:3e:67:bd:53:40:c4:c4:83:
e9:0c:45:f3:87:04:4a:8d:98:c5:c5:0d:bf:74:b0:
a9:e2:c5:2c:c0:01:ac:13:ae:4c:46:6d:df:de:90:
18:e7:db:93:de:a5:ec:cd:d6:a0:12:c3:ff:9f:f7:
20:5f:e8:7b:cd:43:c6:fa:bc:42:dc:a9:c4:9a:a6:
40:54:e3:46:23:35:38:c9:e9:3b:39:6e:dc:88:13:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:21:4B:D8:D1:98:F3:A1:4C:9E:82:14:FD:01:9E:08:01:46:34:12
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/iyFL2NGY86FMnoIU_QGeCAFGNBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c2:5f:9b:47:c4:2d:78:b3:c5:ee:a7:78:ee:14:8c:98:40:
74:1c:e1:cb:b1:be:eb:33:dd:65:c2:5a:85:ba:3f:01:d0:0a:
40:58:c1:a2:d4:09:d8:27:a2:9c:73:0a:87:c1:21:3b:22:6e:
19:24:d6:e1:6c:b4:91:97:8f:0b:dc:72:0a:19:09:22:29:72:
05:9e:85:ca:3f:ac:44:8d:90:29:92:2e:b5:be:10:0d:7e:0b:
65:21:20:de:bb:9d:a0:61:96:19:3f:ff:5b:ee:8b:bc:44:25:
ee:56:26:78:0d:63:19:63:10:82:4a:5e:32:33:c4:50:ba:45:
41:d4:0b:ed:f9:5a:5b:7d:2c:31:65:43:58:37:e2:70:8a:d6:
f2:a5:72:3c:fa:91:7f:d4:99:3b:4b:09:01:ca:a7:c1:87:72:
b3:0e:97:4e:2c:da:8f:b1:ab:74:e8:7b:86:cf:14:6a:30:c5:
88:0f:af:df:19:c1:d2:0c:24:1e:50:a0:9d:f8:17:36:c5:8c:
7c:1c:49:9f:95:b4:33:2f:6a:28:7b:66:81:09:76:5a:5b:4c:
51:a4:cf:f0:74:4e:e0:b0:57:16:e4:34:c1:fc:44:ac:f2:52:
86:33:b0:08:23:4a:ae:07:0b:53:5b:7f:a6:ee:ea:21:0c:21:
e9:30:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:05 2026 by rpki-client