Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/iPTiMKAJsFZ0jAfznmSFyRxC97k.roa
File: iPTiMKAJsFZ0jAfznmSFyRxC97k.roa (raw, json)
Hash identifier: avlWvJQKnzNmnXgb+h9GyKsIp+jYee6FGxe6zzpgoHI=
Subject key identifier: 88:F4:E2:30:A0:09:B0:56:74:8C:07:F3:9E:64:85:C9:1C:42:F7:B9
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F236894E63B0A84AFD8CF8D2F918E7829
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/iPTiMKAJsFZ0jAfznmSFyRxC97k.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212830
IP address blocks: 193.57.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:e6:3b:0a:84:af:d8:cf:8d:2f:91:8e:78:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88f4e230a009b056748c07f39e6485c91c42f7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:ff:77:77:91:78:f9:93:4c:92:8e:06:d1:
ec:75:44:2a:b2:09:fb:4b:8e:f7:fa:4e:fb:45:6f:
78:3c:90:59:74:a6:11:15:e4:b4:23:c4:e0:e4:bc:
01:e6:2b:ab:89:b5:04:ee:dc:12:df:19:8b:67:a8:
5d:01:e0:bb:fc:ee:d4:07:d6:88:95:19:e0:d3:a6:
4c:9c:49:3b:51:a5:aa:54:be:4f:68:23:9e:0b:77:
45:db:e3:91:e2:dc:3b:49:56:fc:b5:bd:1f:2c:be:
7b:d4:69:6a:29:12:23:d8:a0:55:7c:96:1c:e4:12:
65:93:a6:60:41:c6:80:20:42:0f:f3:a1:4f:fd:42:
a1:89:fa:a9:f3:85:8f:51:a0:f2:f6:a9:eb:b1:10:
48:1f:df:a4:a9:a4:c0:1d:60:c3:c1:09:7e:55:a0:
15:a1:60:9e:ac:e6:75:39:51:cb:b0:c6:a7:e1:8d:
50:05:cd:1a:00:46:0c:c3:fa:39:f6:17:0f:96:25:
9c:73:a0:69:e3:e9:15:4d:5a:e4:05:82:04:47:27:
db:45:df:6d:7a:47:61:ef:0d:4c:cc:ee:30:9e:c4:
58:7a:71:84:e3:1d:4e:ea:5e:8d:90:53:c5:d0:12:
a9:ec:a9:08:ab:6b:71:0c:55:7a:c1:3d:9b:23:74:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:E2:30:A0:09:B0:56:74:8C:07:F3:9E:64:85:C9:1C:42:F7:B9
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/iPTiMKAJsFZ0jAfznmSFyRxC97k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.146.0/23
Signature Algorithm: sha256WithRSAEncryption
08:ec:18:5e:11:bd:1e:0e:46:31:98:3f:d6:21:a6:72:58:33:
e8:bd:c2:ab:17:d7:71:75:54:d9:2c:38:6b:4f:8d:8f:37:61:
f1:c6:59:f8:80:97:c1:15:c9:05:71:4e:e1:72:0a:a6:ad:fa:
65:07:af:99:d6:f8:8a:cb:86:7a:39:49:e5:d4:13:cf:1e:3c:
60:47:01:38:f1:79:1b:3a:13:61:e2:05:b4:dc:12:38:c9:bf:
a4:9b:c9:a7:0f:ec:fa:fa:82:7b:5e:35:ca:35:94:c5:08:1a:
17:d5:85:bd:bb:94:56:d9:42:f4:fa:bd:5f:58:71:5d:03:a3:
01:31:e0:8f:95:03:bf:90:3f:79:b9:71:8c:6b:08:46:9e:82:
3d:b9:62:10:3a:06:a3:35:9e:05:7a:23:40:86:de:b4:02:32:
b7:bb:46:23:70:58:5f:da:5b:a1:ea:4a:71:9f:7b:49:6b:2b:
f0:a8:8c:d4:4d:db:fb:31:89:7b:7e:08:64:33:b8:15:bd:bd:
76:f2:86:93:d8:d8:40:e9:3f:8b:ff:67:52:8e:1d:f7:c5:f2:
1a:28:8d:8e:74:c4:1b:bd:20:d0:5d:1b:c7:7a:ca:9e:09:b0:
4c:db:69:39:1c:3b:c2:36:a8:3d:fe:45:cf:4a:b0:54:4e:42:
1a:04:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:44:53 2026 by rpki-client