Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa
File: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (raw, json)
Hash identifier: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=
Subject key identifier: 88:50:77:BC:95:C4:38:68:2D:35:D6:1B:F5:30:D0:DE:2D:5E:4A:AA
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F236843F0955FD3870A121BDB8DDFD4F2
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49357
IP address blocks: 94.141.116.0/22 maxlen: 24
94.141.116.0/23 maxlen: 23
94.141.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:43:f0:95:5f:d3:87:0a:12:1b:db:8d:df:d4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=885077bc95c438682d35d61bf530d0de2d5e4aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:43:74:c4:83:b4:28:ca:22:b6:cf:36:85:
65:5e:41:c0:a7:89:2c:c4:66:37:b6:a2:a5:49:6e:
82:f3:c7:85:9f:ed:11:17:19:be:fa:44:de:aa:e8:
a3:25:1d:3e:c6:21:2f:22:d6:10:b9:5a:fc:02:06:
13:bd:0a:46:12:a4:31:db:e7:58:1f:8e:9e:e9:73:
2e:c6:9c:f8:03:b8:01:6f:d7:d0:3e:ef:eb:3c:97:
9e:7e:46:f6:f3:cd:34:c0:44:9c:db:8f:91:56:77:
d8:2c:be:0e:1b:78:d5:a7:46:23:b4:eb:e6:98:16:
1a:ea:f8:cc:b1:d5:76:59:32:b3:95:42:76:b9:2d:
ee:87:ca:b4:6a:07:b8:b8:80:4f:e8:31:26:cf:86:
99:23:4c:4d:7c:ca:a9:43:dd:3d:80:6d:0a:73:44:
d5:ee:ae:3d:2b:6e:cd:84:16:3f:79:d5:d5:5b:96:
75:17:20:1a:5e:a9:31:89:3f:63:40:e8:0d:33:23:
ea:32:df:d6:f8:d3:f1:51:bd:c2:5b:35:e0:14:a2:
c1:92:e2:e7:60:5f:86:4f:7b:30:04:90:a7:b1:b1:
11:e5:5d:6b:80:7a:5c:fe:8a:bb:6b:8d:ee:a5:3f:
f9:46:62:c7:4b:bc:2e:4d:1c:4f:b2:8a:9f:25:45:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:77:BC:95:C4:38:68:2D:35:D6:1B:F5:30:D0:DE:2D:5E:4A:AA
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:88:b8:25:24:69:02:bd:86:de:b7:5e:44:9b:c0:5d:75:a3:
f8:be:37:34:11:40:a1:20:22:d8:e2:31:bc:26:68:16:45:2e:
18:0f:5c:41:5d:0f:50:0a:32:b9:ed:38:0d:8d:a7:1d:42:82:
73:5f:ea:3d:8f:bd:58:2c:5a:1f:06:f9:52:5a:c1:7b:2d:f9:
84:1b:d9:f6:ec:1d:66:19:64:de:12:b0:8a:f0:ca:06:81:ed:
39:5a:f8:a0:d0:e2:ef:dc:4d:5f:83:9c:16:71:42:d1:5a:2b:
ed:a2:9f:f7:c0:da:32:5b:5c:90:ee:83:f1:28:b1:52:a1:52:
0e:ff:4c:00:f3:a1:26:13:4a:09:7a:f4:da:3f:27:8d:81:9a:
86:e4:36:3e:b4:19:e4:fd:98:02:33:9d:53:5e:00:f5:10:8e:
8f:d2:8f:bd:83:d7:16:24:d3:6c:d6:c3:19:cf:ba:c5:ae:ff:
ea:6f:a5:94:e5:f9:56:49:ef:fc:49:f5:ec:af:b5:b8:53:3f:
a8:8a:a0:f6:d5:05:e5:3a:39:49:94:64:45:f5:b3:98:78:65:
c9:ae:64:0d:36:08:bb:92:a4:27:44:db:29:64:6d:1a:7a:2f:
48:67:02:43:92:9b:fb:90:ea:72:73:c9:e0:c3:d9:8d:23:2b:
00:29:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:36 2026 by rpki-client