Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IbqHt2BRxG3IVv6dCGA6gZsdVDM.roa
File: IbqHt2BRxG3IVv6dCGA6gZsdVDM.roa (raw, json)
Hash identifier: I3yj3aiWwI6/41jysqxNnTnFi0SH46dYZkqGTXXX+gI=
Subject key identifier: 21:BA:87:B7:60:51:C4:6D:C8:56:FE:9D:08:60:3A:81:9B:1D:54:33
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E8E045A748C3E41111AC946E7301942B8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IbqHt2BRxG3IVv6dCGA6gZsdVDM.roa
Signing time: Wed 03 Jun 2026 15:05:10 +0000
ROA not before: Wed 03 Jun 2026 15:05:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35179
IP address blocks: 87.86.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:04:5a:74:8c:3e:41:11:1a:c9:46:e7:30:19:42:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 3 15:05:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21ba87b76051c46dc856fe9d08603a819b1d5433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:bc:f9:89:90:8d:47:05:0b:ea:51:d9:d4:
fb:7c:7b:77:65:9b:ef:63:5c:f6:d0:15:aa:cb:32:
72:22:1c:17:02:1c:f0:88:50:7c:48:7a:38:68:92:
4b:42:53:25:8e:dd:94:45:9d:4b:8e:9d:f5:ba:23:
8e:da:c7:da:4b:80:61:12:f0:c5:0e:b8:f8:65:88:
dd:54:af:c6:5b:29:1b:9b:66:c8:a5:c0:7c:08:30:
84:e9:d1:d2:ba:6f:1c:9b:d9:99:20:3a:fd:08:f4:
41:c4:0d:ff:1f:03:54:63:cb:eb:72:0b:4b:2f:a1:
cb:f2:c9:1b:3f:71:bc:9b:37:27:45:ac:e9:4a:93:
ac:cb:e7:4c:2c:1d:1d:a3:4f:94:f0:88:ec:5e:e0:
e3:49:c7:d2:43:7f:c4:5b:07:d5:67:2f:4e:09:61:
f3:1b:e9:5e:38:b0:8f:d4:45:a3:4e:1e:33:df:df:
67:5f:5b:18:51:5c:a7:5d:f4:72:cc:e1:9d:53:7b:
9a:d9:ce:08:8f:e5:23:55:bd:08:26:78:f1:1c:54:
7e:61:6f:56:2d:45:16:ec:01:ee:7e:72:4b:40:8e:
4c:d5:54:ba:56:0c:d8:a0:e3:ba:fa:3a:02:b0:fe:
4e:59:4b:06:cd:3d:7f:34:5c:d0:cc:03:72:9e:5e:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:87:B7:60:51:C4:6D:C8:56:FE:9D:08:60:3A:81:9B:1D:54:33
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IbqHt2BRxG3IVv6dCGA6gZsdVDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:66:f0:8e:4b:07:84:04:fe:88:6b:c1:f8:0e:0a:ee:85:e2:
4e:9d:53:32:38:85:ba:e4:b1:f8:e9:43:d7:67:e6:a4:ca:1e:
68:ac:5a:63:60:e7:5a:e3:5f:1a:bf:7e:89:1e:4a:da:bf:9b:
c0:14:c7:39:28:a4:33:1f:35:9f:9d:44:f3:bd:f8:b9:51:68:
71:99:9e:a7:16:cc:f6:db:2d:07:70:ba:34:39:b2:a6:8f:5a:
4d:58:90:16:6b:42:35:56:fd:ac:b4:98:a7:3d:d4:16:ae:ff:
5e:ac:fb:fd:88:5a:17:e5:e4:7f:c6:f1:3b:81:d1:f6:3d:3e:
4f:4a:03:7f:4c:ef:a8:ee:93:eb:d5:85:48:4a:de:0c:c0:21:
11:f8:28:99:10:4c:73:42:32:33:79:71:b2:4b:12:06:74:67:
29:61:c3:5a:89:74:67:d3:04:e3:ff:a5:f6:db:86:c8:ac:b5:
2d:ee:42:93:12:66:e8:fb:bb:a4:f7:67:2c:28:7b:d8:9a:76:
7a:ad:02:99:51:fb:1b:71:5c:b3:8e:01:cc:d9:f2:f3:93:57:
71:4d:93:c9:37:3c:11:29:ff:bd:b7:07:14:21:74:da:92:57:
b0:78:58:9b:6a:76:09:e9:19:d4:8c:2f:b9:c4:11:50:67:52:
b9:1a:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:45 2026 by rpki-client